last executing test programs: 1m16.26675845s ago: executing program 4 (id=164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = getpgrp(0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x8) fchdir(r4) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100000, 0x2000, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r6, r5, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x23, 0x2, 0x0) 1m15.388287677s ago: executing program 4 (id=182): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_io_uring_setup(0x120f, &(0x7f0000000900)={0x0, 0x43b7, 0x10000, 0x4, 0x80003e4}, &(0x7f0000000300), &(0x7f0000000580)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x18) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) syz_io_uring_setup(0x120f, &(0x7f0000000900)={0x0, 0x43b7, 0x10000, 0x4, 0x80003e4}, &(0x7f0000000300), &(0x7f0000000580)) (async) 1m15.328158922s ago: executing program 4 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x76, 0x328, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x73a, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0xffffffff, 0x32}, 0x2, @in6=@local, 0x1504, 0x4, 0x3, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0x1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000640)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x2, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r8}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) 1m15.245318551s ago: executing program 4 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000203030000000000000000000a000000080001000100000060b7ca184e1d70356cceeb3fe0bb48462cbee03cc2c8036323613d4cc6dc8be6b84cb0d5628a4804f278d689b769bac4abe0e49c03e9ec35c37bf2b176f1da0afa6972e5c50bf75823818d6cfe896ae54999949ccaa7b69e9e9af53240f53ae42b4a00ba3078deffb572c2d80352850444dee1d3ff1c6f2decb6f6c809adedbdde4c1a81c5ca4700f689e92634282abb4e3297826bbc2f20b9483e7a288be94556211f511e44e7ecc31e50900f55e2e0089277eb"], 0x1c}, 0x1, 0x0, 0x0, 0x40858}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000020305f6b3da0000004b2ad0dfa73a923d000007b6274e37dda2731f0200"/43], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x800) close(0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400), 0x43, 0x7bf, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x2000035, 0x2, @thr={&(0x7f0000000340)="09d12beb890d2ce05ae0964ea7f5d6395cdc3fd42d7beb568f23", &(0x7f0000000380)="f4c6e66b05215ba2b8d28ccce8b232"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x500, &(0x7f0000000840)="b5b221903a71cadf27d93b60c15ae27d327107deb49528c21f0198b2f94c51974508a40c81d09e6e5e2d295d56472026c6e95a9f702b49d4154018bc004eee9dad077e0e06f73d7f84ee2d36f5afceb5182cff7d3dc95c8729e414990807855fd046eca33bcc52f3441ed2536510390ad7abf6518354d54c840eb4bf5afe9519d12c731bfd469fb0c04ff20805df4409e43c111808019336b8fb1c04f75925a5623d6661498ee549a4a854bb5f7e3bc21ec503470bb153c41e9b1ef403a77b69cd73943ea32468735379db", 0xcb, &(0x7f0000000280), 0x0, &(0x7f0000000940)="b3631504ffb2a7d3440a7903d2619ce809695045ccb5f12bbee9e3d7249d6dc60b3809d4e88a4f8fde52480ee8a1460a26ea4cbb62a60f49612878ac4be2a2dea91087a2b7f453e86e185fa46dc53c728954acd07e92549128b0966d2fca2acbba7b4e06222bbc46e6488d7174d7749baa9cf2d4f22aef4cbc0c7ee36f8fe8f362594d01593a6566eb273bab228a3808a44f3db6497534171d060ef87ae5cc588506b9c1fda5efebcbca72a61c3d7fd01685124d39c78cb2c11fd86866a68473a276910cf561399166e48922be999b7ee2a042331dc7798d690b2407bebd9b280b6e") setreuid(0x0, 0xee00) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'team_slave_1\x00', &(0x7f0000000040)=@ethtool_channels={0x3c, 0x80000001, 0x4, 0xff, 0x7, 0x7f, 0x3, 0x7, 0xff}}) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 1m15.107023964s ago: executing program 4 (id=186): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000380), &(0x7f00000005c0)=r2}, 0x20) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/184) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 1m14.216955252s ago: executing program 4 (id=207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0xf0, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@tos={{0x28}, {0x1, 0xb, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x17}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x1, 0x3, [0x24, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x31, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002400)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002440)={'macvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002480)={0x1dc, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4008814}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x18) pselect6(0x40, &(0x7f0000000200)={0x6, 0x330c868c, 0x10008, 0xfffffffffffffffa, 0x8, 0x100000001, 0x1840, 0xfffffffffffffffc}, &(0x7f0000000240)={0xa, 0x7052, 0x4, 0xa11, 0xd7, 0xa78, 0xff, 0x5}, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000f3ffff94000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002e80), 0x1, 0x0) syz_io_uring_setup(0x3798, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x100003, 0xb8}, &(0x7f0000000500)=0x0, &(0x7f0000000a40)=0x0) fcntl$notify(r2, 0x402, 0x30) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000280), &(0x7f00000000c0)) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) 1m14.172852537s ago: executing program 32 (id=207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0xf0, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@tos={{0x28}, {0x1, 0xb, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x17}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x1, 0x3, [0x24, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x31, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002400)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002440)={'macvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002480)={0x1dc, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4008814}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x18) pselect6(0x40, &(0x7f0000000200)={0x6, 0x330c868c, 0x10008, 0xfffffffffffffffa, 0x8, 0x100000001, 0x1840, 0xfffffffffffffffc}, &(0x7f0000000240)={0xa, 0x7052, 0x4, 0xa11, 0xd7, 0xa78, 0xff, 0x5}, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000f3ffff94000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002e80), 0x1, 0x0) syz_io_uring_setup(0x3798, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x100003, 0xb8}, &(0x7f0000000500)=0x0, &(0x7f0000000a40)=0x0) fcntl$notify(r2, 0x402, 0x30) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000280), &(0x7f00000000c0)) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) 31.321074308s ago: executing program 2 (id=874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 30.99468215s ago: executing program 2 (id=878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000300), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1, 0x0, 0x9d}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 30.720610977s ago: executing program 2 (id=882): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 30.393895259s ago: executing program 2 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000014}) close_range(r5, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000100)={[{@uid}, {@overriderock}, {@cruft}, {@check_strict}, {@session={'session', 0x3d, 0x29}}, {@map_normal}]}, 0x1, 0x530, &(0x7f0000000580)="$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") syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 30.131007945s ago: executing program 2 (id=886): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") 29.57073296s ago: executing program 2 (id=889): setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1}, 0x2}, {0x2, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x4}, 0x0, 0x1}], 0x40) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x249c, 0x13580, 0xffbffffd, 0x400}, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup2(r1, r0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x10000000, 0x0, 0x19, "90737f0000fbffffffffffffff679495ffffeb"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x2000000000000111, &(0x7f00000003c0)=ANY=[@ANYRES32=r2], &(0x7f00000004c0)='GPL\x00', 0x10000400, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x75, 0x341) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x82442) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$tun(r8, &(0x7f00000001c0)={@void, @void, @x25={0x0, 0x4a, 0x1, "ec2131a68aadfc830d8bdad52b63204c122eb3d9d490a62b1e0533280ce132c01a"}}, 0x24) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="a484"]) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) r10 = open$dir(&(0x7f0000000480)='./file0/file0\x00', 0x400, 0x101) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r10, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @aes128, 0x8, '\x00', @a}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x8, 0xff, 0x2, 0x6}]}, 0x10) 29.56967515s ago: executing program 33 (id=889): setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1}, 0x2}, {0x2, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x4}, 0x0, 0x1}], 0x40) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x249c, 0x13580, 0xffbffffd, 0x400}, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup2(r1, r0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x10000000, 0x0, 0x19, "90737f0000fbffffffffffffff679495ffffeb"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x2000000000000111, &(0x7f00000003c0)=ANY=[@ANYRES32=r2], &(0x7f00000004c0)='GPL\x00', 0x10000400, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0x75, 0x341) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x82442) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$tun(r8, &(0x7f00000001c0)={@void, @void, @x25={0x0, 0x4a, 0x1, "ec2131a68aadfc830d8bdad52b63204c122eb3d9d490a62b1e0533280ce132c01a"}}, 0x24) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="a484"]) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) r10 = open$dir(&(0x7f0000000480)='./file0/file0\x00', 0x400, 0x101) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r10, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @aes128, 0x8, '\x00', @a}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x8, 0xff, 0x2, 0x6}]}, 0x10) 2.113953021s ago: executing program 5 (id=1269): syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0) 2.094892983s ago: executing program 5 (id=1270): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sync() syz_usb_connect(0x6, 0xb43, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/135, 0x87}], 0x2, &(0x7f0000000640)=""/139, 0x8b}, 0x6}, {{&(0x7f0000000500)=@un=@abs, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/153, 0x99}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/60, 0x3c}], 0x7, &(0x7f0000002a00)=""/79, 0x4f}, 0x3}], 0x2, 0x40002012, &(0x7f0000000980)={0x0, 0x3938700}) socket$inet_udp(0x2, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1.971552525s ago: executing program 3 (id=1273): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.734180619s ago: executing program 3 (id=1277): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0x0]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r3, 0xee01, r4) keyctl$setperm(0x5, r3, 0x30925) keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x1103, 0x4, @private2, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r5, 0x8, 0x1, "e3"}, 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.733610149s ago: executing program 3 (id=1278): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1.640481808s ago: executing program 3 (id=1291): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="ca03"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.305501971s ago: executing program 6 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00'], 0x48) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x106f) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) readahead(r0, 0x4, 0x6266f01c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000080), 0x8) 876.742183ms ago: executing program 3 (id=1283): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x12}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040800) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000ac0)={0x1f0, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "e0e855c3e8a8cc293c3f1ee6bb700974e013dab3bb15fa13aa2259478321c6c332a3a79d0a6dd655b947001917a27d0cbdca851e2a9d04deda4756472d46f10e6ee1d5d00c99dd58da3f1eb39e6c8dce6a69857038bbbf1e82b3cbb3f0a96179df48867b97c387936c082f95d9462ca78d488578aed3196fe0102dfbc6a3dd2ee13387598d2f0bffcb5cb5529605bd666e0395472e1ec76533c0d5fec1175093ac0952c7f603f21ec548e1e7eeb1e11951c9d3b860be3f9b145d9873a6c5742f9db6148aba81041d0c029e2472729986693a4bef3a23aa04638124090b7d080adb17df"}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/+/{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800000a3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&}\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[#/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x100}, 0x40884) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x6, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x3, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x2c, 0x1}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x9}, {0xc, 0x8}, {0x5, 0xede}]}, @enum64={0x9, 0x4, 0x0, 0x13, 0x1, 0x4, [{0x8, 0x9, 0x3}, {0x1, 0x8001, 0x81}, {0x10, 0x1, 0xee}, {0xa, 0x20007, 0x5}]}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x5}, @fwd={0x5}]}, {0x0, [0x5f, 0x6f, 0x5f, 0x30]}}, &(0x7f0000000300)=""/156, 0xce, 0x9c, 0x0, 0x31b6}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r11, 0x0, 0x5, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) 770.252844ms ago: executing program 1 (id=1286): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000380), &(0x7f00000005c0)=r2}, 0x20) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/184) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 757.645355ms ago: executing program 0 (id=1287): r0 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$binfmt_aout(r1, &(0x7f0000000780)={{0x107, 0x6, 0x2, 0x1003c2, 0x9e, 0x730, 0x17a, 0xe}, "908064713dfd73b8c63241ea89e5c37e3a91b5dc43db1ba628f8ce92371bdc3585ad6ce7d068346c22291a8a74301af6748f901c", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0xfffffffffffffecb) 728.437748ms ago: executing program 1 (id=1288): r0 = socket(0xa, 0x2400000001, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008094) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syslog(0x2, &(0x7f0000000040)=""/10, 0xa) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f00000000c0)=""/159, &(0x7f0000002280)=0x9f) 696.574911ms ago: executing program 0 (id=1289): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0x0]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r3, 0xee01, r4) keyctl$setperm(0x5, r3, 0x30925) keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x1103, 0x4, @private2, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r5, 0x8, 0x1, "e3"}, 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 695.536951ms ago: executing program 0 (id=1290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002400)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002440)={'macvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002480)={0x1dc, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4008814}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x18) pselect6(0x40, &(0x7f0000000200)={0x6, 0x330c868c, 0x10008, 0xfffffffffffffffa, 0x8, 0x100000001, 0x1840, 0xfffffffffffffffc}, &(0x7f0000000240)={0xa, 0x7052, 0x4, 0xa11, 0xd7, 0xa78, 0xff, 0x5}, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000f3ffff94000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002e80), 0x1, 0x0) syz_io_uring_setup(0x3798, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x100003, 0xb8}, &(0x7f0000000500)=0x0, &(0x7f0000000a40)=0x0) fcntl$notify(r2, 0x402, 0x30) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000280), &(0x7f00000000c0)) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) 666.940264ms ago: executing program 0 (id=1292): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 614.241779ms ago: executing program 3 (id=1294): openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000", @ANYBLOB="0000000006000000", @ANYRES32], 0x50) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x404c080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000280)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0xac141437}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000009a0000000000000000000000182b000053c1e1440f51e2515c71a3e9bcc9dfab181fb29abc723421639c0f03223b7d8046fd01d2274356e7db6c7dfb1d6e86acebcd64cab865ddf0fdbe8dde9fea8ea1296183d37d64fe2acacec0dc2f8979c678978254b8b7e7f53b9f660f2a560e2897ad3cea3d0835fdde2b0272e747ec493a032d54", @ANYRES32=r0, @ANYBLOB="00000000090000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) tkill(0x0, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x3, 0x3, 0xfffff000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) pipe2$9p(&(0x7f00000004c0), 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) shmget$private(0x40000, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) 572.846723ms ago: executing program 0 (id=1296): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="ca03"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 527.146408ms ago: executing program 1 (id=1297): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = inotify_init1(0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x100080c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 526.628518ms ago: executing program 1 (id=1298): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 497.515321ms ago: executing program 1 (id=1299): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 441.547986ms ago: executing program 5 (id=1300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073"], 0x44}}, 0x20008000) 427.240138ms ago: executing program 6 (id=1301): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000380), &(0x7f00000005c0)=r2}, 0x20) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/184) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 354.998115ms ago: executing program 5 (id=1302): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x2000001) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) close(r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='-\x00']) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) link(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x14, &(0x7f0000000500)=ANY=[@ANYRES16=r7, @ANYRES32=r1, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x2, 0x5b, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0) 303.0292ms ago: executing program 6 (id=1303): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0x0]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r3, 0xee01, r4) keyctl$setperm(0x5, r3, 0x30925) keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x1103, 0x4, @private2, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r5, 0x8, 0x1, "e3"}, 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 279.171223ms ago: executing program 6 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002400)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002440)={'macvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002480)={0x1dc, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4008814}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x18) pselect6(0x40, &(0x7f0000000200)={0x6, 0x330c868c, 0x10008, 0xfffffffffffffffa, 0x8, 0x100000001, 0x1840, 0xfffffffffffffffc}, &(0x7f0000000240)={0xa, 0x7052, 0x4, 0xa11, 0xd7, 0xa78, 0xff, 0x5}, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000f3ffff94000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002e80), 0x1, 0x0) syz_io_uring_setup(0x3798, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x100003, 0xb8}, &(0x7f0000000500)=0x0, &(0x7f0000000a40)=0x0) fcntl$notify(r2, 0x402, 0x30) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000280), &(0x7f00000000c0)) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) 250.321145ms ago: executing program 6 (id=1305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x8000002}, 0x18) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) 247.623525ms ago: executing program 5 (id=1306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000240)={0x1d, r5}, 0x10) close(r2) 208.867719ms ago: executing program 1 (id=1307): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = getpgrp(0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x8) fchdir(r5) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100000, 0x2000, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r6, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r7, r6, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x23, 0x2, 0x0) 136.467486ms ago: executing program 6 (id=1308): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x12}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040800) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000ac0)={0x1f0, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "e0e855c3e8a8cc293c3f1ee6bb700974e013dab3bb15fa13aa2259478321c6c332a3a79d0a6dd655b947001917a27d0cbdca851e2a9d04deda4756472d46f10e6ee1d5d00c99dd58da3f1eb39e6c8dce6a69857038bbbf1e82b3cbb3f0a96179df48867b97c387936c082f95d9462ca78d488578aed3196fe0102dfbc6a3dd2ee13387598d2f0bffcb5cb5529605bd666e0395472e1ec76533c0d5fec1175093ac0952c7f603f21ec548e1e7eeb1e11951c9d3b860be3f9b145d9873a6c5742f9db6148aba81041d0c029e2472729986693a4bef3a23aa04638124090b7d080adb17df"}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/+/{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800000a3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&}\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[#/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x100}, 0x40884) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x6, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x3, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x2c, 0x1}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x9}, {0xc, 0x8}, {0x5, 0xede}]}, @enum64={0x9, 0x4, 0x0, 0x13, 0x1, 0x4, [{0x8, 0x9, 0x3}, {0x1, 0x8001, 0x81}, {0x10, 0x1, 0xee}, {0xa, 0x20007, 0x5}]}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x5}, @fwd={0x5}]}, {0x0, [0x5f, 0x6f, 0x5f, 0x30]}}, &(0x7f0000000300)=""/156, 0xce, 0x9c, 0x0, 0x31b6}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r11, 0x0, 0x5, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) 3.94211ms ago: executing program 0 (id=1309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f00000001c0)=[0xee01, 0x0]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r3, 0xee01, r4) keyctl$setperm(0x5, r3, 0x30925) keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x1103, 0x4, @private2, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r5, 0x8, 0x1, "e3"}, 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=1310): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): syz.2.849 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.612944][ T6163] Tainted: [W]=WARN [ 95.612954][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.612974][ T6163] Call Trace: [ 95.612982][ T6163] [ 95.612995][ T6163] __dump_stack+0x1d/0x30 [ 95.613027][ T6163] dump_stack_lvl+0xe8/0x140 [ 95.613122][ T6163] dump_stack+0x15/0x1b [ 95.613146][ T6163] should_fail_ex+0x265/0x280 [ 95.613211][ T6163] should_failslab+0x8c/0xb0 [ 95.613251][ T6163] kmem_cache_alloc_noprof+0x50/0x480 [ 95.613338][ T6163] ? skb_clone+0x151/0x1f0 [ 95.613384][ T6163] skb_clone+0x151/0x1f0 [ 95.613427][ T6163] __netlink_deliver_tap+0x2c9/0x500 [ 95.613492][ T6163] netlink_unicast+0x66b/0x690 [ 95.613570][ T6163] netlink_sendmsg+0x58b/0x6b0 [ 95.613659][ T6163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.613703][ T6163] __sock_sendmsg+0x145/0x180 [ 95.613734][ T6163] ____sys_sendmsg+0x31e/0x4e0 [ 95.613854][ T6163] ___sys_sendmsg+0x17b/0x1d0 [ 95.613918][ T6163] __x64_sys_sendmsg+0xd4/0x160 [ 95.613968][ T6163] x64_sys_call+0x191e/0x3000 [ 95.614015][ T6163] do_syscall_64+0xd2/0x200 [ 95.614071][ T6163] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.614161][ T6163] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.614201][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.614262][ T6163] RIP: 0033:0x7fdf915eefc9 [ 95.614285][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.614312][ T6163] RSP: 002b:00007fdf90057038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.614348][ T6163] RAX: ffffffffffffffda RBX: 00007fdf91845fa0 RCX: 00007fdf915eefc9 [ 95.614367][ T6163] RDX: 0000000000004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 95.614429][ T6163] RBP: 00007fdf90057090 R08: 0000000000000000 R09: 0000000000000000 [ 95.614447][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.614523][ T6163] R13: 00007fdf91846038 R14: 00007fdf91845fa0 R15: 00007ffd91af2f08 [ 95.614552][ T6163] [ 95.634979][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.849'. [ 95.665100][ T6161] tipc: New replicast peer: 10.1.1.2 [ 95.689245][ T6165] netlink: 'syz.5.850': attribute type 10 has an invalid length. [ 95.693443][ T6161] tipc: Enabled bearer , priority 10 [ 95.698111][ T6165] netlink: 40 bytes leftover after parsing attributes in process `syz.5.850'. [ 95.805376][ T6168] loop5: detected capacity change from 0 to 512 [ 96.068315][ T6176] veth0_to_bridge: entered promiscuous mode [ 96.098983][ T6168] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 96.142881][ T6168] EXT4-fs (loop5): orphan cleanup on readonly fs [ 96.150158][ T6175] veth0_to_bridge: left promiscuous mode [ 96.156860][ T6168] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.171774][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.180764][ T6168] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 96.197468][ T6168] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.850: bg 0: block 40: padding at end of block bitmap is not set [ 96.214463][ T6168] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 96.223018][ T31] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.227547][ T6168] EXT4-fs (loop5): 1 truncate cleaned up [ 96.253682][ T6168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.266413][ T31] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.284346][ T6179] netlink: 14 bytes leftover after parsing attributes in process `syz.2.856'. [ 96.285716][ T31] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.334339][ T6179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.346809][ T6165] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.850: corrupted xattr block 31: invalid header [ 96.362716][ T6179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.372634][ T6179] bond0 (unregistering): Released all slaves [ 96.404526][ T6191] FAULT_INJECTION: forcing a failure. [ 96.404526][ T6191] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 96.416925][ T6165] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 96.417904][ T6191] CPU: 1 UID: 0 PID: 6191 Comm: syz.3.860 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.417947][ T6191] Tainted: [W]=WARN [ 96.417957][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.417977][ T6191] Call Trace: [ 96.417986][ T6191] [ 96.417997][ T6191] __dump_stack+0x1d/0x30 [ 96.418028][ T6191] dump_stack_lvl+0xe8/0x140 [ 96.418056][ T6191] dump_stack+0x15/0x1b [ 96.418109][ T6191] should_fail_ex+0x265/0x280 [ 96.418194][ T6191] should_fail_alloc_page+0xf2/0x100 [ 96.418236][ T6191] __alloc_frozen_pages_noprof+0xff/0x360 [ 96.418298][ T6191] alloc_pages_mpol+0xb3/0x260 [ 96.418352][ T6191] vma_alloc_folio_noprof+0x1aa/0x300 [ 96.418383][ T6191] handle_mm_fault+0xec2/0x2be0 [ 96.418419][ T6191] ? vma_start_read+0x141/0x1f0 [ 96.418468][ T6191] do_user_addr_fault+0x630/0x1080 [ 96.418539][ T6191] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.418621][ T6191] exc_page_fault+0x62/0xa0 [ 96.418651][ T6191] asm_exc_page_fault+0x26/0x30 [ 96.418729][ T6191] RIP: 0033:0x7fd23179c4cb [ 96.418753][ T6191] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 96.418780][ T6191] RSP: 002b:00007fd230254e10 EFLAGS: 00010246 [ 96.418840][ T6191] RAX: 00007fd230256f30 RBX: 00007fd231a17640 RCX: 0000000000000000 [ 96.418859][ T6191] RDX: 00007fd230256f78 RSI: 00007fd23184edf8 RDI: 00007fd230254e30 [ 96.418877][ T6191] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 96.418894][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.418912][ T6191] R13: 00007fd231a46038 R14: 00007fd231a45fa0 R15: 00007ffd2d851c08 [ 96.418971][ T6191] [ 96.419005][ T6191] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 96.426863][ T6165] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.850: corrupted xattr block 31: invalid header [ 96.457159][ T6168] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.850: corrupted xattr block 31: invalid header [ 96.489907][ T6165] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 96.523025][ T6195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.861'. [ 96.524146][ T6165] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.850: bad symlink. [ 96.597354][ T6168] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 96.686010][ T6168] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.850: bad symlink. [ 96.695182][ T6202] loop0: detected capacity change from 0 to 2048 [ 96.724319][ T6207] veth0_to_bridge: entered promiscuous mode [ 96.735345][ T6206] veth0_to_bridge: left promiscuous mode [ 96.745651][ T6202] Alternate GPT is invalid, using primary GPT. [ 96.752154][ T6202] loop0: p2 p3 p7 [ 96.807075][ T3418] tipc: Node number set to 2886997011 [ 96.818008][ T4071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.898302][ T6213] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.917707][ T6211] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.933742][ T4528] udevd[4528]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 96.944122][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 96.944835][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 97.003699][ T6216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.014184][ T6219] tipc: Started in network mode [ 97.019762][ T6219] tipc: Node identity ac14140f, cluster identity 4711 [ 97.027831][ T6219] tipc: Enabled bearer , priority 10 [ 97.034952][ T6211] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.139901][ T6211] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.175754][ T6233] FAULT_INJECTION: forcing a failure. [ 97.175754][ T6233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.188889][ T6233] CPU: 1 UID: 0 PID: 6233 Comm: syz.5.876 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.188922][ T6233] Tainted: [W]=WARN [ 97.188930][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.188946][ T6233] Call Trace: [ 97.188955][ T6233] [ 97.188975][ T6233] __dump_stack+0x1d/0x30 [ 97.188995][ T6233] dump_stack_lvl+0xe8/0x140 [ 97.189013][ T6233] dump_stack+0x15/0x1b [ 97.189091][ T6233] should_fail_ex+0x265/0x280 [ 97.189125][ T6233] should_fail+0xb/0x20 [ 97.189153][ T6233] should_fail_usercopy+0x1a/0x20 [ 97.189177][ T6233] _copy_from_user+0x1c/0xb0 [ 97.189258][ T6233] ___sys_sendmsg+0xc1/0x1d0 [ 97.189302][ T6233] __x64_sys_sendmsg+0xd4/0x160 [ 97.189379][ T6233] x64_sys_call+0x191e/0x3000 [ 97.189399][ T6233] do_syscall_64+0xd2/0x200 [ 97.189423][ T6233] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.189483][ T6233] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 97.189505][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.189532][ T6233] RIP: 0033:0x7f47df5fefc9 [ 97.189575][ T6233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.189592][ T6233] RSP: 002b:00007f47de067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.189609][ T6233] RAX: ffffffffffffffda RBX: 00007f47df855fa0 RCX: 00007f47df5fefc9 [ 97.189621][ T6233] RDX: 0000000000000800 RSI: 0000200000006040 RDI: 0000000000000008 [ 97.189632][ T6233] RBP: 00007f47de067090 R08: 0000000000000000 R09: 0000000000000000 [ 97.189679][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.189690][ T6233] R13: 00007f47df856038 R14: 00007f47df855fa0 R15: 00007ffcac1c4138 [ 97.189709][ T6233] [ 97.408506][ T6211] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.459308][ T6240] netlink: 'syz.1.879': attribute type 10 has an invalid length. [ 97.467218][ T6240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.879'. [ 97.485638][ T6240] loop1: detected capacity change from 0 to 512 [ 97.520322][ T6240] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 97.540172][ T6240] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.557264][ T6240] __quota_error: 283 callbacks suppressed [ 97.557283][ T6240] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 97.574570][ T6240] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.598537][ T6240] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 97.616828][ T6240] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.879: bg 0: block 40: padding at end of block bitmap is not set [ 97.639552][ T6246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6246 comm=syz.3.881 [ 97.652490][ T6240] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 97.669168][ T6240] EXT4-fs (loop1): 1 truncate cleaned up [ 97.691505][ T6240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.710255][ T6240] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.879: corrupted xattr block 31: invalid header [ 97.857576][ T6240] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 97.866796][ T6240] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.879: corrupted xattr block 31: invalid header [ 97.893922][ T6240] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 97.927318][ T6240] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.879: bad symlink. [ 97.957193][ T31] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.979876][ T31] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.007418][ T31] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.017880][ T6252] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.879: corrupted xattr block 31: invalid header [ 98.064971][ T52] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.103616][ T6257] loop2: detected capacity change from 0 to 164 [ 98.137669][ T6252] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 98.166439][ T29] audit: type=1400 audit(1760877483.154:5538): avc: denied { watch_reads } for pid=6259 comm="syz.0.885" path="/179/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 98.256366][ T29] audit: type=1400 audit(1760877483.214:5539): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 98.437123][ T6252] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.879: bad symlink. [ 98.447233][ T36] tipc: Node number set to 2886997007 [ 98.518299][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.556779][ T6264] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 98.671878][ T29] audit: type=1400 audit(1760877483.674:5540): avc: denied { setopt } for pid=6266 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.734790][ T29] audit: type=1400 audit(1760877483.734:5541): avc: denied { module_load } for pid=6259 comm="syz.0.885" path="/sys/kernel/notes" dev="sysfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 98.818842][ T6272] FAULT_INJECTION: forcing a failure. [ 98.818842][ T6272] name failslab, interval 1, probability 0, space 0, times 0 [ 98.831598][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.3.890 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 98.831668][ T6272] Tainted: [W]=WARN [ 98.831675][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.831689][ T6272] Call Trace: [ 98.831696][ T6272] [ 98.831704][ T6272] __dump_stack+0x1d/0x30 [ 98.831727][ T6272] dump_stack_lvl+0xe8/0x140 [ 98.831748][ T6272] dump_stack+0x15/0x1b [ 98.831776][ T6272] should_fail_ex+0x265/0x280 [ 98.831811][ T6272] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 98.831852][ T6272] should_failslab+0x8c/0xb0 [ 98.831923][ T6272] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 98.831960][ T6272] ? shmem_alloc_inode+0x34/0x50 [ 98.831988][ T6272] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 98.832045][ T6272] shmem_alloc_inode+0x34/0x50 [ 98.832066][ T6272] alloc_inode+0x40/0x170 [ 98.832088][ T6272] new_inode+0x1d/0xe0 [ 98.832155][ T6272] shmem_get_inode+0x244/0x750 [ 98.832184][ T6272] __shmem_file_setup+0x113/0x210 [ 98.832227][ T6272] shmem_file_setup+0x3b/0x50 [ 98.832326][ T6272] __se_sys_memfd_create+0x2c3/0x590 [ 98.832357][ T6272] __x64_sys_memfd_create+0x31/0x40 [ 98.832386][ T6272] x64_sys_call+0x2ac2/0x3000 [ 98.832414][ T6272] do_syscall_64+0xd2/0x200 [ 98.832512][ T6272] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.832548][ T6272] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 98.832579][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.832688][ T6272] RIP: 0033:0x7fd2317eefc9 [ 98.832708][ T6272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.832733][ T6272] RSP: 002b:00007fd230256e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 98.832757][ T6272] RAX: ffffffffffffffda RBX: 0000000000000541 RCX: 00007fd2317eefc9 [ 98.832774][ T6272] RDX: 00007fd230256ef0 RSI: 0000000000000000 RDI: 00007fd231872960 [ 98.832852][ T6272] RBP: 0000200000000600 R08: 00007fd230256bb7 R09: 00007fd230256e40 [ 98.832865][ T6272] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 98.832878][ T6272] R13: 00007fd230256ef0 R14: 00007fd230256eb0 R15: 0000200000000000 [ 98.832898][ T6272] [ 99.064360][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.094585][ T6274] loop0: detected capacity change from 0 to 2048 [ 99.109657][ T6278] netlink: 'syz.5.894': attribute type 1 has an invalid length. [ 99.117464][ T6278] netlink: 224 bytes leftover after parsing attributes in process `syz.5.894'. [ 99.154049][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 99.165912][ T29] audit: type=1326 audit(1760877484.174:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 99.190655][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.208880][ T3303] Alternate GPT is invalid, using primary GPT. [ 99.215302][ T3303] loop0: p1 p2 p3 [ 99.227232][ T29] audit: type=1326 audit(1760877484.174:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 99.250747][ T29] audit: type=1326 audit(1760877484.174:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 99.274346][ T29] audit: type=1326 audit(1760877484.174:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 99.297739][ T29] audit: type=1326 audit(1760877484.174:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 99.326272][ T6274] Alternate GPT is invalid, using primary GPT. [ 99.332699][ T6274] loop0: p1 p2 p3 [ 99.338507][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.420693][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.525734][ T6295] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 99.533508][ T6295] netlink: 224 bytes leftover after parsing attributes in process `syz.1.896'. [ 99.556210][ T12] bridge0: port 3(dummy0) entered disabled state [ 99.582820][ T12] bridge_slave_1: left allmulticast mode [ 99.588615][ T12] bridge_slave_1: left promiscuous mode [ 99.594329][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.628739][ T12] bridge_slave_0: left allmulticast mode [ 99.634473][ T12] bridge_slave_0: left promiscuous mode [ 99.640414][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.043876][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.051383][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.066468][ T12] veth1_macvtap: left promiscuous mode [ 100.072172][ T12] veth0_macvtap: left promiscuous mode [ 100.077903][ T12] veth1_vlan: left promiscuous mode [ 100.094120][ T12] veth0_vlan: left promiscuous mode [ 100.110604][ T6332] loop5: detected capacity change from 0 to 512 [ 100.123900][ T6332] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 100.142490][ T6332] EXT4-fs (loop5): 1 truncate cleaned up [ 100.156668][ T6332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.199480][ T12] team0 (unregistering): Port device team_slave_1 removed [ 100.212709][ T12] team0 (unregistering): Port device team_slave_0 removed [ 100.253139][ T6275] chnl_net:caif_netlink_parms(): no params data found [ 100.283846][ T4071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.317269][ T6341] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.899'. [ 100.332249][ T6345] FAULT_INJECTION: forcing a failure. [ 100.332249][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 100.344939][ T6345] CPU: 1 UID: 0 PID: 6345 Comm: syz.5.900 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.344972][ T6345] Tainted: [W]=WARN [ 100.344979][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.344991][ T6345] Call Trace: [ 100.344999][ T6345] [ 100.345008][ T6345] __dump_stack+0x1d/0x30 [ 100.345032][ T6345] dump_stack_lvl+0xe8/0x140 [ 100.345052][ T6345] dump_stack+0x15/0x1b [ 100.345073][ T6345] should_fail_ex+0x265/0x280 [ 100.345114][ T6345] should_failslab+0x8c/0xb0 [ 100.345147][ T6345] kmem_cache_alloc_noprof+0x50/0x480 [ 100.345180][ T6345] ? vm_area_alloc+0x2c/0xb0 [ 100.345213][ T6345] vm_area_alloc+0x2c/0xb0 [ 100.345245][ T6345] mmap_region+0xa99/0x1620 [ 100.345300][ T6345] do_mmap+0x9b3/0xbe0 [ 100.345340][ T6345] vm_mmap_pgoff+0x17a/0x2e0 [ 100.345379][ T6345] ksys_mmap_pgoff+0xc2/0x310 [ 100.345418][ T6345] ? __x64_sys_mmap+0x49/0x70 [ 100.345447][ T6345] x64_sys_call+0x14a3/0x3000 [ 100.345475][ T6345] do_syscall_64+0xd2/0x200 [ 100.345506][ T6345] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.345540][ T6345] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.345566][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.345589][ T6345] RIP: 0033:0x7f47df5ff003 [ 100.345608][ T6345] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 100.345631][ T6345] RSP: 002b:00007f47de066e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 100.345656][ T6345] RAX: ffffffffffffffda RBX: 000000000000046e RCX: 00007f47df5ff003 [ 100.345672][ T6345] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 100.345687][ T6345] RBP: 0000200000001042 R08: 00000000ffffffff R09: 0000000000000000 [ 100.345702][ T6345] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 100.345717][ T6345] R13: 00007f47de066ef0 R14: 00007f47de066eb0 R15: 0000200000000700 [ 100.345742][ T6345] [ 100.560246][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.567415][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.578877][ T6275] bridge_slave_0: entered allmulticast mode [ 100.585442][ T6275] bridge_slave_0: entered promiscuous mode [ 100.597935][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.605072][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.615750][ T6275] bridge_slave_1: entered allmulticast mode [ 100.639929][ T6275] bridge_slave_1: entered promiscuous mode [ 100.682428][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.692240][ T6366] FAULT_INJECTION: forcing a failure. [ 100.692240][ T6366] name failslab, interval 1, probability 0, space 0, times 0 [ 100.694686][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.704940][ T6366] CPU: 1 UID: 0 PID: 6366 Comm: syz.3.903 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.705020][ T6366] Tainted: [W]=WARN [ 100.705030][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.705050][ T6366] Call Trace: [ 100.705059][ T6366] [ 100.705070][ T6366] __dump_stack+0x1d/0x30 [ 100.705102][ T6366] dump_stack_lvl+0xe8/0x140 [ 100.705131][ T6366] dump_stack+0x15/0x1b [ 100.705275][ T6366] should_fail_ex+0x265/0x280 [ 100.705323][ T6366] ? audit_log_d_path+0x8d/0x150 [ 100.705404][ T6366] should_failslab+0x8c/0xb0 [ 100.705442][ T6366] __kmalloc_cache_noprof+0x4c/0x4a0 [ 100.705487][ T6366] audit_log_d_path+0x8d/0x150 [ 100.705516][ T6366] audit_log_d_path_exe+0x42/0x70 [ 100.705620][ T6366] audit_log_task+0x1e9/0x250 [ 100.705665][ T6366] ? kstrtouint+0x76/0xc0 [ 100.705787][ T6366] audit_seccomp+0x61/0x100 [ 100.705827][ T6366] ? __seccomp_filter+0x82d/0x1250 [ 100.705865][ T6366] __seccomp_filter+0x83e/0x1250 [ 100.705902][ T6366] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.705974][ T6366] ? vfs_write+0x7e8/0x960 [ 100.706017][ T6366] ? __rcu_read_unlock+0x4f/0x70 [ 100.706051][ T6366] ? __fget_files+0x184/0x1c0 [ 100.706090][ T6366] __secure_computing+0x82/0x150 [ 100.706128][ T6366] syscall_trace_enter+0xcf/0x1e0 [ 100.706225][ T6366] do_syscall_64+0xac/0x200 [ 100.706262][ T6366] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.706300][ T6366] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.706415][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.706447][ T6366] RIP: 0033:0x7fd2317eefc9 [ 100.706471][ T6366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.706497][ T6366] RSP: 002b:00007fd230257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000079 [ 100.706580][ T6366] RAX: ffffffffffffffda RBX: 00007fd231a45fa0 RCX: 00007fd2317eefc9 [ 100.706598][ T6366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.706615][ T6366] RBP: 00007fd230257090 R08: 0000000000000000 R09: 0000000000000000 [ 100.706632][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.706649][ T6366] R13: 00007fd231a46038 R14: 00007fd231a45fa0 R15: 00007ffd2d851c08 [ 100.706677][ T6366] [ 100.941814][ T6367] FAULT_INJECTION: forcing a failure. [ 100.941814][ T6367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.954976][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.5.902 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.955019][ T6367] Tainted: [W]=WARN [ 100.955026][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.955104][ T6367] Call Trace: [ 100.955111][ T6367] [ 100.955119][ T6367] __dump_stack+0x1d/0x30 [ 100.955141][ T6367] dump_stack_lvl+0xe8/0x140 [ 100.955165][ T6367] dump_stack+0x15/0x1b [ 100.955186][ T6367] should_fail_ex+0x265/0x280 [ 100.955233][ T6367] should_fail+0xb/0x20 [ 100.955352][ T6367] should_fail_usercopy+0x1a/0x20 [ 100.955373][ T6367] _copy_from_user+0x1c/0xb0 [ 100.955402][ T6367] kstrtouint_from_user+0x69/0xf0 [ 100.955504][ T6367] ? 0xffffffff81000000 [ 100.955577][ T6367] ? selinux_file_permission+0x1e4/0x320 [ 100.955625][ T6367] proc_fail_nth_write+0x50/0x160 [ 100.955703][ T6367] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.955742][ T6367] vfs_write+0x269/0x960 [ 100.955771][ T6367] ? vfs_read+0x4e6/0x770 [ 100.955848][ T6367] ? __rcu_read_unlock+0x4f/0x70 [ 100.955881][ T6367] ? __fget_files+0x184/0x1c0 [ 100.955951][ T6367] ksys_write+0xda/0x1a0 [ 100.955984][ T6367] __x64_sys_write+0x40/0x50 [ 100.956016][ T6367] x64_sys_call+0x2802/0x3000 [ 100.956112][ T6367] do_syscall_64+0xd2/0x200 [ 100.956146][ T6367] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.956182][ T6367] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.956213][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.956272][ T6367] RIP: 0033:0x7f47df5fda7f [ 100.956303][ T6367] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 100.956329][ T6367] RSP: 002b:00007f47de046030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 100.956354][ T6367] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f47df5fda7f [ 100.956371][ T6367] RDX: 0000000000000001 RSI: 00007f47de0460a0 RDI: 000000000000000b [ 100.956398][ T6367] RBP: 00007f47de046090 R08: 0000000000000000 R09: 0000000000000000 [ 100.956412][ T6367] R10: 00002000000001c0 R11: 0000000000000293 R12: 0000000000000001 [ 100.956424][ T6367] R13: 00007f47df856128 R14: 00007f47df856090 R15: 00007ffcac1c4138 [ 100.956443][ T6367] [ 101.209805][ T6275] team0: Port device team_slave_0 added [ 101.225747][ T6275] team0: Port device team_slave_1 added [ 101.265118][ T6378] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 101.272856][ T6378] netlink: 224 bytes leftover after parsing attributes in process `syz.1.907'. [ 101.295588][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.302630][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.328748][ T6275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.467135][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.474130][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.500119][ T6275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.553862][ T6275] hsr_slave_0: entered promiscuous mode [ 101.560366][ T6275] hsr_slave_1: entered promiscuous mode [ 101.786690][ T6275] debugfs: 'hsr0' already exists in 'hsr' [ 101.792653][ T6275] Cannot create hsr debugfs directory [ 101.819688][ T6401] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.897509][ T6401] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.964374][ T6401] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.044133][ T6401] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.118759][ T6407] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.159327][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.170323][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.184629][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.221661][ T6275] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.231428][ T6275] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.241355][ T6275] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.254069][ T6407] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.265052][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.277788][ T6275] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.370156][ T6422] loop5: detected capacity change from 0 to 256 [ 102.389637][ T6422] msdos: Unknown parameter 'nodo' [ 102.426220][ T6407] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.461556][ T6275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.474657][ T6275] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.492570][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.499754][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.541209][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.541248][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.590023][ T6407] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.658395][ T6275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.699473][ T52] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.744812][ T52] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.763066][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 102.763086][ T29] audit: type=1326 audit(1760877487.764:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 102.764267][ T52] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.769410][ T29] audit: type=1326 audit(1760877487.764:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 102.838001][ T6437] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 102.841762][ T29] audit: type=1326 audit(1760877487.804:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47df5fefc9 code=0x7ffc0000 [ 102.877364][ T29] audit: type=1326 audit(1760877487.804:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47df5fefc9 code=0x7ffc0000 [ 102.901007][ T29] audit: type=1326 audit(1760877487.804:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47df5fefc9 code=0x7ffc0000 [ 102.924810][ T29] audit: type=1326 audit(1760877487.804:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47df5fefc9 code=0x7ffc0000 [ 102.932347][ T6275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.948276][ T29] audit: type=1326 audit(1760877487.804:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47df5fefc9 code=0x7ffc0000 [ 102.978343][ T29] audit: type=1326 audit(1760877487.814:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47df5fefc9 code=0x7ffc0000 [ 102.987291][ T52] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.001694][ T29] audit: type=1326 audit(1760877487.814:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47df5fefc9 code=0x7ffc0000 [ 103.033289][ T29] audit: type=1326 audit(1760877487.814:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f47df5fefc9 code=0x7ffc0000 [ 103.101582][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 103.144012][ T6443] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.199330][ T6443] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.252450][ T6443] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.335420][ T6275] veth0_vlan: entered promiscuous mode [ 103.350828][ T6275] veth1_vlan: entered promiscuous mode [ 103.439890][ T6443] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.469855][ T6275] veth0_macvtap: entered promiscuous mode [ 103.497514][ T6275] veth1_macvtap: entered promiscuous mode [ 103.520723][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.542595][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.569409][ T293] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.597431][ T293] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.606229][ T293] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.628612][ T293] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.708201][ T6469] veth0_to_bridge: entered promiscuous mode [ 103.720061][ T6467] veth0_to_bridge: left promiscuous mode [ 103.790702][ T6475] loop1: detected capacity change from 0 to 512 [ 103.818013][ T6475] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.849547][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.924'. [ 103.871327][ T6475] EXT4-fs (loop1): 1 truncate cleaned up [ 103.897726][ T6475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.024338][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.110025][ T6481] netlink: 'syz.1.926': attribute type 10 has an invalid length. [ 104.117872][ T6481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.926'. [ 104.152836][ T293] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.154833][ T6484] netlink: 7 bytes leftover after parsing attributes in process `syz.6.927'. [ 104.171985][ T293] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.187529][ T6485] loop1: detected capacity change from 0 to 512 [ 104.200463][ T293] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.200682][ T6484] netlink: 7 bytes leftover after parsing attributes in process `syz.6.927'. [ 104.225700][ T293] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.247815][ T6485] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 104.261846][ T6485] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.337259][ T6485] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.427545][ T6485] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 104.459518][ T6485] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.926: bg 0: block 40: padding at end of block bitmap is not set [ 104.501092][ T6485] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 104.524643][ T6485] EXT4-fs (loop1): 1 truncate cleaned up [ 104.544360][ T6485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.599088][ T6481] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.926: corrupted xattr block 31: invalid header [ 104.617508][ T6481] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 104.657104][ T6481] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.926: corrupted xattr block 31: invalid header [ 104.701407][ T6485] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.926: corrupted xattr block 31: invalid header [ 104.748991][ T6481] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 104.772300][ T6485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 104.819922][ T6481] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.926: bad symlink. [ 104.867132][ T6485] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.926: bad symlink. [ 104.960455][ T6511] loop6: detected capacity change from 0 to 512 [ 104.982351][ T6511] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 104.997279][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.009434][ T6511] EXT4-fs (loop6): 1 truncate cleaned up [ 105.033114][ T6511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.148850][ T6523] loop1: detected capacity change from 0 to 512 [ 105.188598][ T6523] loop1: detected capacity change from 0 to 128 [ 105.197766][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.248107][ T6529] loop6: detected capacity change from 0 to 1024 [ 105.258149][ T6531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.943'. [ 105.269290][ T6529] EXT4-fs: Ignoring removed nobh option [ 105.278341][ T6529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.383534][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.455204][ T6543] netlink: 'syz.3.948': attribute type 10 has an invalid length. [ 105.463056][ T6543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.948'. [ 105.503979][ T6543] loop3: detected capacity change from 0 to 512 [ 105.529550][ T6543] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 105.547226][ T6543] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.577449][ T6543] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.639989][ T6543] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 105.652153][ T6543] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.948: bg 0: block 40: padding at end of block bitmap is not set [ 105.685856][ T6555] macvtap0: refused to change device tx_queue_len [ 105.700099][ T6557] loop5: detected capacity change from 0 to 512 [ 105.799849][ T6563] loop0: detected capacity change from 0 to 512 [ 105.829264][ T6563] loop0: detected capacity change from 0 to 128 [ 105.869123][ T6557] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.879435][ T6543] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 105.897735][ T6557] EXT4-fs (loop5): 1 truncate cleaned up [ 105.915460][ T6557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.936667][ T6543] EXT4-fs (loop3): 1 truncate cleaned up [ 105.956432][ T6565] loop6: detected capacity change from 0 to 512 [ 106.002403][ T6543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.033137][ T6565] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.956: corrupted inode contents [ 106.047702][ T6565] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 106.056431][ T6565] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.956: corrupted inode contents [ 106.064036][ T6543] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.948: corrupted xattr block 31: invalid header [ 106.097083][ T6565] EXT4-fs error (device loop6): ext4_evict_inode:302: inode #15: comm syz.6.956: mark_inode_dirty error [ 106.117967][ T6565] EXT4-fs (loop6): 1 orphan inode deleted [ 106.127624][ T6565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.159615][ T6565] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 106.170205][ T4071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.179603][ T6543] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 106.207089][ T6543] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.948: corrupted xattr block 31: invalid header [ 106.344942][ T6543] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 106.402085][ T6543] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.948: bad symlink. [ 106.416317][ T6580] netlink: 'syz.6.959': attribute type 10 has an invalid length. [ 106.431662][ T6580] ipvlan0: entered allmulticast mode [ 106.437059][ T6580] veth0_vlan: entered allmulticast mode [ 106.452897][ T6580] team0: Device ipvlan0 failed to register rx_handler [ 106.520373][ T6584] loop6: detected capacity change from 0 to 512 [ 106.527478][ T6584] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.536179][ T6584] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 106.554162][ T6586] netlink: 24 bytes leftover after parsing attributes in process `syz.5.962'. [ 106.678497][ T6593] netlink: 'syz.5.966': attribute type 12 has an invalid length. [ 106.796107][ T6600] netlink: 'syz.5.968': attribute type 1 has an invalid length. [ 106.803847][ T6600] netlink: 224 bytes leftover after parsing attributes in process `syz.5.968'. [ 107.292636][ T6610] veth0_to_bridge: entered promiscuous mode [ 107.310100][ T6609] veth0_to_bridge: left promiscuous mode [ 107.340396][ T6612] veth0_to_bridge: entered promiscuous mode [ 107.381137][ T6611] veth0_to_bridge: left promiscuous mode [ 107.460370][ T6615] sctp: [Deprecated]: syz.6.961 (pid 6615) Use of int in max_burst socket option deprecated. [ 107.460370][ T6615] Use struct sctp_assoc_value instead [ 107.529122][ T6617] netlink: 'syz.3.974': attribute type 13 has an invalid length. [ 107.698755][ T6625] loop5: detected capacity change from 0 to 512 [ 107.698832][ T6624] loop6: detected capacity change from 0 to 512 [ 107.710168][ T6625] loop5: detected capacity change from 0 to 128 [ 107.733649][ T6624] loop6: detected capacity change from 0 to 128 [ 107.767779][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 107.767799][ T29] audit: type=1326 audit(1760877492.774:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 107.798835][ T29] audit: type=1326 audit(1760877492.774:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 107.822207][ T29] audit: type=1326 audit(1760877492.774:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 107.845633][ T29] audit: type=1326 audit(1760877492.774:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 107.868973][ T29] audit: type=1326 audit(1760877492.774:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 107.873504][ T6633] netlink: 'syz.0.979': attribute type 10 has an invalid length. [ 107.892364][ T29] audit: type=1326 audit(1760877492.774:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 107.892404][ T29] audit: type=1326 audit(1760877492.774:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 107.892483][ T29] audit: type=1326 audit(1760877492.774:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 107.892517][ T29] audit: type=1326 audit(1760877492.774:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 107.892551][ T29] audit: type=1326 audit(1760877492.774:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.0.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 108.025999][ T6633] ipvlan0: entered allmulticast mode [ 108.031491][ T6633] veth0_vlan: entered allmulticast mode [ 108.038318][ T6633] team0: Device ipvlan0 failed to register rx_handler [ 108.075260][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.980'. [ 108.093960][ T6637] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.134693][ T6640] veth0_to_bridge: entered promiscuous mode [ 108.149116][ T6637] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.170175][ T6639] veth0_to_bridge: left promiscuous mode [ 108.220374][ T6637] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.260408][ T6648] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.281444][ T6637] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.329557][ T6648] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.371139][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.397453][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.405972][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.415359][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.430830][ T6648] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.490299][ T6648] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.617230][ T293] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.647456][ T293] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.660431][ T293] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.705202][ T52] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.966068][ T6685] netlink: 'syz.6.997': attribute type 12 has an invalid length. [ 108.983257][ T6687] xt_policy: output policy not valid in PREROUTING and INPUT [ 108.996944][ T6690] SELinux: Context system_u:object_r:modules_object_t:s0 is not valid (left unmapped). [ 109.031454][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 109.051280][ T6687] bridge0: port 3(dummy0) entered disabled state [ 109.057810][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.065065][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.155746][ T6698] loop3: detected capacity change from 0 to 512 [ 109.179575][ T6698] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.223298][ T6698] EXT4-fs (loop3): 1 truncate cleaned up [ 109.258638][ T6692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6692 comm=syz.6.1000 [ 109.277861][ T6698] EXT4-fs mount: 2 callbacks suppressed [ 109.277884][ T6698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.404276][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.427850][ T6711] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6711 comm=syz.5.1004 [ 109.480946][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.490516][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.508752][ T6716] netlink: 'syz.6.1007': attribute type 10 has an invalid length. [ 109.510790][ T6715] vlan1: entered allmulticast mode [ 109.516874][ T6716] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1007'. [ 109.577104][ T6716] dummy0: entered promiscuous mode [ 109.582290][ T6716] dummy0: entered allmulticast mode [ 109.591303][ T6718] loop6: detected capacity change from 0 to 512 [ 109.607898][ T6716] bridge0: port 3(dummy0) entered blocking state [ 109.614325][ T6716] bridge0: port 3(dummy0) entered disabled state [ 109.631330][ T6718] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 109.643948][ T6716] bridge0: port 3(dummy0) entered blocking state [ 109.647758][ T6718] EXT4-fs (loop6): orphan cleanup on readonly fs [ 109.650466][ T6716] bridge0: port 3(dummy0) entered forwarding state [ 109.667381][ T6718] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.697225][ T6718] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 109.710850][ T6718] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1007: bg 0: block 40: padding at end of block bitmap is not set [ 109.769625][ T6718] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 109.809177][ T6726] netlink: 'syz.0.1010': attribute type 12 has an invalid length. [ 109.829760][ T6718] EXT4-fs (loop6): 1 truncate cleaned up [ 109.861405][ T6718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.877983][ T6730] netlink: 'syz.0.1012': attribute type 21 has an invalid length. [ 109.885935][ T6730] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1012'. [ 109.895118][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 109.910934][ T6716] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.1007: corrupted xattr block 31: invalid header [ 109.914827][ T6732] FAULT_INJECTION: forcing a failure. [ 109.914827][ T6732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.933538][ T6716] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 109.937309][ T6732] CPU: 1 UID: 0 PID: 6732 Comm: syz.3.1013 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.937345][ T6732] Tainted: [W]=WARN [ 109.937352][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.937432][ T6732] Call Trace: [ 109.937442][ T6732] [ 109.937453][ T6732] __dump_stack+0x1d/0x30 [ 109.937483][ T6732] dump_stack_lvl+0xe8/0x140 [ 109.937512][ T6732] dump_stack+0x15/0x1b [ 109.937614][ T6732] should_fail_ex+0x265/0x280 [ 109.937663][ T6732] should_fail+0xb/0x20 [ 109.937707][ T6732] should_fail_usercopy+0x1a/0x20 [ 109.937796][ T6732] _copy_from_user+0x1c/0xb0 [ 109.937834][ T6732] __sys_bpf+0x183/0x7c0 [ 109.937891][ T6732] __x64_sys_bpf+0x41/0x50 [ 109.937975][ T6732] x64_sys_call+0x2aee/0x3000 [ 109.938006][ T6732] do_syscall_64+0xd2/0x200 [ 109.938059][ T6732] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.938151][ T6732] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 109.938186][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.938216][ T6732] RIP: 0033:0x7fd2317eefc9 [ 109.938261][ T6732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.938299][ T6732] RSP: 002b:00007fd230257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.938326][ T6732] RAX: ffffffffffffffda RBX: 00007fd231a45fa0 RCX: 00007fd2317eefc9 [ 109.938342][ T6732] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 109.938359][ T6732] RBP: 00007fd230257090 R08: 0000000000000000 R09: 0000000000000000 [ 109.938433][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.938449][ T6732] R13: 00007fd231a46038 R14: 00007fd231a45fa0 R15: 00007ffd2d851c08 [ 109.938475][ T6732] [ 110.139287][ T6735] vlan2: entered allmulticast mode [ 110.167786][ T6716] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.1007: corrupted xattr block 31: invalid header [ 110.183856][ T6716] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 110.204828][ T6716] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.1007: bad symlink. [ 110.260131][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.270944][ T6741] FAULT_INJECTION: forcing a failure. [ 110.270944][ T6741] name failslab, interval 1, probability 0, space 0, times 0 [ 110.283900][ T6741] CPU: 0 UID: 0 PID: 6741 Comm: syz.5.1018 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.283988][ T6741] Tainted: [W]=WARN [ 110.283995][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.284010][ T6741] Call Trace: [ 110.284015][ T6741] [ 110.284022][ T6741] __dump_stack+0x1d/0x30 [ 110.284046][ T6741] dump_stack_lvl+0xe8/0x140 [ 110.284069][ T6741] dump_stack+0x15/0x1b [ 110.284085][ T6741] should_fail_ex+0x265/0x280 [ 110.284134][ T6741] should_failslab+0x8c/0xb0 [ 110.284169][ T6741] kmem_cache_alloc_noprof+0x50/0x480 [ 110.284201][ T6741] ? skb_clone+0x151/0x1f0 [ 110.284233][ T6741] skb_clone+0x151/0x1f0 [ 110.284333][ T6741] __netlink_deliver_tap+0x2c9/0x500 [ 110.284370][ T6741] ? netlink_attachskb+0x2cc/0x650 [ 110.284407][ T6741] netlink_sendskb+0x126/0x150 [ 110.284482][ T6741] netlink_unicast+0x2a2/0x690 [ 110.284520][ T6741] tipc_nl_compat_recv+0x790/0x800 [ 110.284589][ T6741] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 110.284618][ T6741] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 110.284661][ T6741] genl_family_rcv_msg_doit+0x143/0x1b0 [ 110.284775][ T6741] genl_rcv_msg+0x422/0x460 [ 110.284799][ T6741] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 110.284892][ T6741] netlink_rcv_skb+0x123/0x220 [ 110.284954][ T6741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.284981][ T6741] genl_rcv+0x28/0x40 [ 110.284998][ T6741] netlink_unicast+0x5c0/0x690 [ 110.285030][ T6741] netlink_sendmsg+0x58b/0x6b0 [ 110.285089][ T6741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.285130][ T6741] __sock_sendmsg+0x145/0x180 [ 110.285159][ T6741] ____sys_sendmsg+0x31e/0x4e0 [ 110.285195][ T6741] ___sys_sendmsg+0x17b/0x1d0 [ 110.285317][ T6741] __x64_sys_sendmsg+0xd4/0x160 [ 110.285374][ T6741] x64_sys_call+0x191e/0x3000 [ 110.285395][ T6741] do_syscall_64+0xd2/0x200 [ 110.285421][ T6741] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.285487][ T6741] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 110.285515][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.285539][ T6741] RIP: 0033:0x7f47df5fefc9 [ 110.285555][ T6741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.285635][ T6741] RSP: 002b:00007f47de067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.285654][ T6741] RAX: ffffffffffffffda RBX: 00007f47df855fa0 RCX: 00007f47df5fefc9 [ 110.285667][ T6741] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 110.285680][ T6741] RBP: 00007f47de067090 R08: 0000000000000000 R09: 0000000000000000 [ 110.285697][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.285714][ T6741] R13: 00007f47df856038 R14: 00007f47df855fa0 R15: 00007ffcac1c4138 [ 110.285771][ T6741] [ 110.301702][ T6743] veth0_to_bridge: entered promiscuous mode [ 110.569945][ T6747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1020'. [ 110.597448][ T6742] veth0_to_bridge: left promiscuous mode [ 110.804572][ T6761] loop3: detected capacity change from 0 to 512 [ 110.818458][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 110.834611][ T6766] loop5: detected capacity change from 0 to 512 [ 110.869529][ T6766] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 110.893034][ T6768] loop6: detected capacity change from 0 to 512 [ 110.915112][ T6766] EXT4-fs (loop5): 1 truncate cleaned up [ 110.923632][ T6768] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 110.937685][ T6766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.971992][ T6768] EXT4-fs (loop6): 1 truncate cleaned up [ 110.991641][ T6768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.037640][ T4071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.114230][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.130539][ T6780] loop5: detected capacity change from 0 to 1024 [ 111.137418][ T6780] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 111.168503][ T6780] loop5: detected capacity change from 0 to 512 [ 111.176864][ T6783] netlink: 'syz.6.1032': attribute type 12 has an invalid length. [ 111.198806][ T6780] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1031: couldn't read orphan inode 26 (err -116) [ 111.218276][ T6788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1034'. [ 111.298225][ T6780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.360963][ T6800] FAULT_INJECTION: forcing a failure. [ 111.360963][ T6800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.374395][ T6800] CPU: 0 UID: 0 PID: 6800 Comm: syz.3.1040 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.374429][ T6800] Tainted: [W]=WARN [ 111.374435][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.374447][ T6800] Call Trace: [ 111.374453][ T6800] [ 111.374460][ T6800] __dump_stack+0x1d/0x30 [ 111.374532][ T6800] dump_stack_lvl+0xe8/0x140 [ 111.374558][ T6800] dump_stack+0x15/0x1b [ 111.374575][ T6800] should_fail_ex+0x265/0x280 [ 111.374618][ T6800] should_fail+0xb/0x20 [ 111.374724][ T6800] should_fail_usercopy+0x1a/0x20 [ 111.374751][ T6800] _copy_from_iter+0xd2/0xe80 [ 111.374780][ T6800] ? __build_skb_around+0x1ab/0x200 [ 111.374868][ T6800] ? __alloc_skb+0x223/0x320 [ 111.374904][ T6800] netlink_sendmsg+0x471/0x6b0 [ 111.374938][ T6800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.374968][ T6800] __sock_sendmsg+0x145/0x180 [ 111.374996][ T6800] ____sys_sendmsg+0x31e/0x4e0 [ 111.375063][ T6800] ___sys_sendmsg+0x17b/0x1d0 [ 111.375123][ T6800] __x64_sys_sendmsg+0xd4/0x160 [ 111.375198][ T6800] x64_sys_call+0x191e/0x3000 [ 111.375227][ T6800] do_syscall_64+0xd2/0x200 [ 111.375259][ T6800] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.375293][ T6800] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 111.375325][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.375351][ T6800] RIP: 0033:0x7fd2317eefc9 [ 111.375371][ T6800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.375410][ T6800] RSP: 002b:00007fd230257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.375435][ T6800] RAX: ffffffffffffffda RBX: 00007fd231a45fa0 RCX: 00007fd2317eefc9 [ 111.375451][ T6800] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 0000000000000007 [ 111.375464][ T6800] RBP: 00007fd230257090 R08: 0000000000000000 R09: 0000000000000000 [ 111.375481][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.375493][ T6800] R13: 00007fd231a46038 R14: 00007fd231a45fa0 R15: 00007ffd2d851c08 [ 111.375512][ T6800] [ 111.375629][ T6780] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.539414][ T6804] loop3: detected capacity change from 0 to 1024 [ 111.617686][ T6804] EXT4-fs: inline encryption not supported [ 111.633689][ T4071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.638095][ T6809] netlink: 'syz.6.1043': attribute type 10 has an invalid length. [ 111.650788][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1043'. [ 111.674727][ T6804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.687328][ T6809] loop6: detected capacity change from 0 to 512 [ 111.698423][ T6809] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 111.739277][ T6809] EXT4-fs (loop6): orphan cleanup on readonly fs [ 111.745905][ T6809] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.769974][ T6809] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 111.770507][ T6804] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1042: Allocating blocks 497-513 which overlap fs metadata [ 111.792018][ T6809] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1043: bg 0: block 40: padding at end of block bitmap is not set [ 111.806731][ T6804] EXT4-fs (loop3): Remounting filesystem read-only [ 111.817648][ T6809] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 111.818376][ T6817] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.837878][ T6809] EXT4-fs (loop6): 1 truncate cleaned up [ 111.847229][ T6804] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1042'. [ 111.854686][ T6809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.864222][ T6803] EXT4-fs (loop3): pa ffff888107227620: logic 256, phys. 401, len 7 [ 111.879326][ T6809] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.1043: corrupted xattr block 31: invalid header [ 111.911643][ T6817] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.932306][ T6809] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 111.948433][ T6809] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.1043: corrupted xattr block 31: invalid header [ 111.970770][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.980959][ T6828] loop5: detected capacity change from 0 to 512 [ 111.989163][ T6809] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 111.998252][ T6809] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.1043: bad symlink. [ 112.018163][ T6817] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.029237][ T6828] loop5: detected capacity change from 0 to 128 [ 112.081635][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.098360][ T6833] loop3: detected capacity change from 0 to 512 [ 112.105516][ T6817] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.141248][ T6833] loop3: detected capacity change from 0 to 128 [ 112.238505][ T293] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.264304][ T293] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.279923][ T293] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.309561][ T293] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.332458][ T6845] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.406973][ T6845] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.436369][ T6856] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.474803][ T6863] netlink: 'syz.5.1062': attribute type 10 has an invalid length. [ 112.482849][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1062'. [ 112.511379][ T6845] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.560197][ T6856] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.589286][ T6845] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.611313][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1061'. [ 112.611826][ T6867] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 112.634905][ T6865] bond1: entered promiscuous mode [ 112.640475][ T6865] bond1: entered allmulticast mode [ 112.653731][ T6865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.667642][ T6856] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.735475][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.790847][ T3471] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.799989][ T6856] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.825201][ T3471] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.837916][ T3471] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.911214][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 112.911234][ T29] audit: type=1326 audit(1760877497.914:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 112.984629][ T29] audit: type=1326 audit(1760877497.954:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 113.026573][ T29] audit: type=1326 audit(1760877498.024:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 113.050355][ T29] audit: type=1326 audit(1760877498.024:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 113.078013][ T29] audit: type=1326 audit(1760877498.084:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 113.101765][ T29] audit: type=1326 audit(1760877498.084:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 113.125362][ T29] audit: type=1326 audit(1760877498.084:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 113.148943][ T29] audit: type=1326 audit(1760877498.084:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 113.160214][ T6899] bridge1: entered promiscuous mode [ 113.172400][ T29] audit: type=1326 audit(1760877498.084:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 113.201279][ T29] audit: type=1326 audit(1760877498.084:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 113.238416][ T6890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=6890 comm=syz.3.1069 [ 113.711608][ T6928] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.790129][ T6928] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.834633][ T3471] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.866221][ T293] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.939326][ T6922] loop6: detected capacity change from 0 to 512 [ 114.029872][ T6928] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.053413][ T6922] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1077: iget: bad i_size value: 38620345925642 [ 114.217093][ T6922] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1077: couldn't read orphan inode 15 (err -117) [ 114.232946][ T6928] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.291975][ T6952] vlan2: entered allmulticast mode [ 114.304487][ T6922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.322184][ T6922] EXT4-fs error (device loop6): ext4_check_all_de:659: inode #12: block 7: comm syz.6.1077: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 114.341315][ T293] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.351902][ T293] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.438123][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.460899][ T6969] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 114.703274][ T6989] loop6: detected capacity change from 0 to 512 [ 114.712545][ T6992] loop1: detected capacity change from 0 to 512 [ 114.719462][ T6989] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 114.754457][ T6989] EXT4-fs (loop6): 1 truncate cleaned up [ 114.759468][ T6992] EXT4-fs: inline encryption not supported [ 114.768374][ T6989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.782046][ T6992] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 935 [ 114.848338][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.985856][ T7011] loop1: detected capacity change from 0 to 128 [ 115.051974][ T7014] netlink: 'syz.1.1097': attribute type 13 has an invalid length. [ 115.060718][ T7014] gretap0: refused to change device tx_queue_len [ 115.067318][ T7014] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 115.205094][ T7019] netlink: 'syz.1.1099': attribute type 10 has an invalid length. [ 115.213074][ T7019] __nla_validate_parse: 7 callbacks suppressed [ 115.213092][ T7019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1099'. [ 115.262487][ T7019] loop1: detected capacity change from 0 to 512 [ 115.367140][ T7019] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 115.402769][ T7019] EXT4-fs (loop1): orphan cleanup on readonly fs [ 115.442572][ T7019] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.499190][ T7019] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 115.510730][ T7031] loop5: detected capacity change from 0 to 512 [ 115.511620][ T7019] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1099: bg 0: block 40: padding at end of block bitmap is not set [ 115.531374][ T7031] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.550365][ T7019] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 115.560171][ T7031] EXT4-fs (loop5): 1 truncate cleaned up [ 115.571348][ T7019] EXT4-fs (loop1): 1 truncate cleaned up [ 115.576581][ T7031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.577651][ T7019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.605116][ T7019] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.1099: corrupted xattr block 31: invalid header [ 115.618834][ T7019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 115.629581][ T7019] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.1099: corrupted xattr block 31: invalid header [ 115.643286][ T7019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 115.653284][ T7019] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.1099: bad symlink. [ 115.653709][ T4071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.676921][ T7019] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.1099: corrupted xattr block 31: invalid header [ 115.693161][ T7019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 115.707252][ T7019] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.1099: bad symlink. [ 115.723672][ T7036] loop5: detected capacity change from 0 to 128 [ 115.837556][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.952802][ T7037] bio_check_eod: 3 callbacks suppressed [ 115.952819][ T7037] syz.5.1106: attempt to access beyond end of device [ 115.952819][ T7037] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 115.972009][ T7037] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 115.981074][ T7036] syz.5.1106: attempt to access beyond end of device [ 115.981074][ T7036] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 115.994558][ T7036] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 116.011883][ T7037] syz.5.1106: attempt to access beyond end of device [ 116.011883][ T7037] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 116.025459][ T7037] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 116.354947][ T7046] FAULT_INJECTION: forcing a failure. [ 116.354947][ T7046] name failslab, interval 1, probability 0, space 0, times 0 [ 116.367685][ T7046] CPU: 1 UID: 0 PID: 7046 Comm: syz.5.1109 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 116.367760][ T7046] Tainted: [W]=WARN [ 116.367768][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.367785][ T7046] Call Trace: [ 116.367794][ T7046] [ 116.367805][ T7046] __dump_stack+0x1d/0x30 [ 116.367832][ T7046] dump_stack_lvl+0xe8/0x140 [ 116.367854][ T7046] dump_stack+0x15/0x1b [ 116.367870][ T7046] should_fail_ex+0x265/0x280 [ 116.367985][ T7046] should_failslab+0x8c/0xb0 [ 116.368021][ T7046] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 116.368059][ T7046] ? __alloc_skb+0x101/0x320 [ 116.368102][ T7046] __alloc_skb+0x101/0x320 [ 116.368129][ T7046] ? audit_log_start+0x342/0x720 [ 116.368155][ T7046] audit_log_start+0x3a0/0x720 [ 116.368183][ T7046] audit_seccomp+0x48/0x100 [ 116.368223][ T7046] ? __seccomp_filter+0x82d/0x1250 [ 116.368327][ T7046] __seccomp_filter+0x83e/0x1250 [ 116.368429][ T7046] ? __list_add_valid_or_report+0x38/0xe0 [ 116.368464][ T7046] ? _raw_spin_unlock+0x26/0x50 [ 116.368544][ T7046] __secure_computing+0x82/0x150 [ 116.368578][ T7046] syscall_trace_enter+0xcf/0x1e0 [ 116.368638][ T7046] do_syscall_64+0xac/0x200 [ 116.368670][ T7046] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 116.368766][ T7046] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 116.368797][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.368825][ T7046] RIP: 0033:0x7f47df5fd9dc [ 116.368842][ T7046] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 116.368932][ T7046] RSP: 002b:00007f47de067030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.368958][ T7046] RAX: ffffffffffffffda RBX: 00007f47df855fa0 RCX: 00007f47df5fd9dc [ 116.368975][ T7046] RDX: 000000000000000f RSI: 00007f47de0670a0 RDI: 0000000000000006 [ 116.368991][ T7046] RBP: 00007f47de067090 R08: 0000000000000000 R09: 0000000000000000 [ 116.369006][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.369018][ T7046] R13: 00007f47df856038 R14: 00007f47df855fa0 R15: 00007ffcac1c4138 [ 116.369037][ T7046] [ 116.658220][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1111'. [ 116.829747][ T7066] loop6: detected capacity change from 0 to 512 [ 116.930158][ T7074] loop5: detected capacity change from 0 to 512 [ 116.958708][ T7074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.015254][ T7074] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.041214][ T7082] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 117.049102][ T7082] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1114'. [ 117.128356][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.147683][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.180225][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.198677][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.206125][ T7088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.225260][ T4071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.237637][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.245054][ T7088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.280505][ T57] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.307913][ T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.344045][ T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.358653][ T7095] program syz.5.1129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.374801][ T7086] hid-generic 0000:0000:0000.0003: pid 7086 passed too short report [ 117.417452][ T7099] FAULT_INJECTION: forcing a failure. [ 117.417452][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 117.430175][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.5.1130 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.430210][ T7099] Tainted: [W]=WARN [ 117.430217][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.430230][ T7099] Call Trace: [ 117.430237][ T7099] [ 117.430245][ T7099] __dump_stack+0x1d/0x30 [ 117.430303][ T7099] dump_stack_lvl+0xe8/0x140 [ 117.430325][ T7099] dump_stack+0x15/0x1b [ 117.430414][ T7099] should_fail_ex+0x265/0x280 [ 117.430457][ T7099] should_failslab+0x8c/0xb0 [ 117.430491][ T7099] kmem_cache_alloc_noprof+0x50/0x480 [ 117.430590][ T7099] ? skb_clone+0x151/0x1f0 [ 117.430628][ T7099] skb_clone+0x151/0x1f0 [ 117.430713][ T7099] nfnetlink_rcv+0x2fc/0x16c0 [ 117.430742][ T7099] ? kmem_cache_free+0xe4/0x3d0 [ 117.430825][ T7099] ? __kfree_skb+0x109/0x150 [ 117.430940][ T7099] ? nlmon_xmit+0x4f/0x60 [ 117.430969][ T7099] ? nlmon_xmit+0x4f/0x60 [ 117.431027][ T7099] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 117.431088][ T7099] ? __dev_queue_xmit+0x1200/0x2000 [ 117.431127][ T7099] ? __dev_queue_xmit+0x182/0x2000 [ 117.431169][ T7099] ? ref_tracker_free+0x37d/0x3e0 [ 117.431245][ T7099] netlink_unicast+0x5c0/0x690 [ 117.431285][ T7099] netlink_sendmsg+0x58b/0x6b0 [ 117.431336][ T7099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.431377][ T7099] __sock_sendmsg+0x145/0x180 [ 117.431402][ T7099] ____sys_sendmsg+0x31e/0x4e0 [ 117.431437][ T7099] ___sys_sendmsg+0x17b/0x1d0 [ 117.431523][ T7099] __x64_sys_sendmsg+0xd4/0x160 [ 117.431558][ T7099] x64_sys_call+0x191e/0x3000 [ 117.431648][ T7099] do_syscall_64+0xd2/0x200 [ 117.431749][ T7099] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 117.431784][ T7099] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 117.431807][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.431827][ T7099] RIP: 0033:0x7f47df5fefc9 [ 117.431847][ T7099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.431949][ T7099] RSP: 002b:00007f47de067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.431968][ T7099] RAX: ffffffffffffffda RBX: 00007f47df855fa0 RCX: 00007f47df5fefc9 [ 117.431980][ T7099] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 117.431992][ T7099] RBP: 00007f47de067090 R08: 0000000000000000 R09: 0000000000000000 [ 117.432059][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.432075][ T7099] R13: 00007f47df856038 R14: 00007f47df855fa0 R15: 00007ffcac1c4138 [ 117.432100][ T7099] [ 117.763674][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 117.789957][ T7110] netlink: 'syz.5.1134': attribute type 12 has an invalid length. [ 117.815768][ T7116] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1135'. [ 118.110547][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 118.110563][ T29] audit: type=1326 audit(1760877503.114:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2aabefc9 code=0x7ffc0000 [ 118.149563][ T29] audit: type=1326 audit(1760877503.144:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f8c2aabefc9 code=0x7ffc0000 [ 118.173271][ T29] audit: type=1326 audit(1760877503.144:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2aabefc9 code=0x7ffc0000 [ 118.197181][ T29] audit: type=1326 audit(1760877503.144:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2aabefc9 code=0x7ffc0000 [ 118.220786][ T29] audit: type=1326 audit(1760877503.154:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c2aabefc9 code=0x7ffc0000 [ 118.244223][ T29] audit: type=1326 audit(1760877503.154:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2aabefc9 code=0x7ffc0000 [ 118.267679][ T29] audit: type=1326 audit(1760877503.154:6884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2aabefc9 code=0x7ffc0000 [ 118.291523][ T29] audit: type=1326 audit(1760877503.244:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c2aabefc9 code=0x7ffc0000 [ 118.315082][ T29] audit: type=1326 audit(1760877503.244:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2aabefc9 code=0x7ffc0000 [ 118.338532][ T29] audit: type=1326 audit(1760877503.244:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.6.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2aabefc9 code=0x7ffc0000 [ 118.500857][ T7142] loop0: detected capacity change from 0 to 512 [ 118.530076][ T7145] netlink: 'syz.6.1149': attribute type 12 has an invalid length. [ 118.557822][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.598105][ T7142] EXT4-fs (loop0): mount failed [ 118.626342][ T7142] loop0: detected capacity change from 0 to 512 [ 118.654590][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.685993][ T7142] EXT4-fs (loop0): mount failed [ 118.714065][ T7142] loop0: detected capacity change from 0 to 512 [ 118.737225][ T7158] netlink: 'syz.6.1152': attribute type 10 has an invalid length. [ 118.745274][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1152'. [ 118.778998][ T7158] loop6: detected capacity change from 0 to 512 [ 118.786596][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.810916][ T7158] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 118.837331][ T7158] EXT4-fs (loop6): orphan cleanup on readonly fs [ 118.854383][ T7142] EXT4-fs (loop0): mount failed [ 118.866151][ T7158] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.884135][ T7158] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 118.897559][ T7142] loop0: detected capacity change from 0 to 512 [ 118.904586][ T7158] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1152: bg 0: block 40: padding at end of block bitmap is not set [ 118.931924][ T7158] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 118.944971][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.965236][ T7158] EXT4-fs (loop6): 1 truncate cleaned up [ 118.971579][ T7158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.984464][ T7142] EXT4-fs (loop0): mount failed [ 118.992538][ T7158] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.1152: corrupted xattr block 31: invalid header [ 119.006271][ T7158] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 119.019508][ T7142] loop0: detected capacity change from 0 to 512 [ 119.032612][ T7158] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.1152: corrupted xattr block 31: invalid header [ 119.046702][ T7164] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.1152: corrupted xattr block 31: invalid header [ 119.060543][ T7158] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 119.069796][ T7158] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.1152: bad symlink. [ 119.070582][ T7164] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 119.089391][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.110334][ T7164] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.1152: bad symlink. [ 119.145561][ T7169] netlink: 256 bytes leftover after parsing attributes in process `+}[@'. [ 119.154522][ T7142] EXT4-fs (loop0): mount failed [ 119.261060][ T7142] loop0: detected capacity change from 0 to 512 [ 119.300654][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.337985][ T7142] EXT4-fs (loop0): mount failed [ 119.346023][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.355167][ T7142] loop0: detected capacity change from 0 to 512 [ 119.379611][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.401139][ T7142] EXT4-fs (loop0): mount failed [ 119.432275][ T7142] loop0: detected capacity change from 0 to 512 [ 119.461811][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.496397][ T7142] EXT4-fs (loop0): mount failed [ 119.525919][ T7142] loop0: detected capacity change from 0 to 512 [ 119.555347][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.597415][ T7142] EXT4-fs (loop0): mount failed [ 119.614047][ T7142] loop0: detected capacity change from 0 to 512 [ 119.652684][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.673488][ T7142] EXT4-fs (loop0): mount failed [ 119.698998][ T7198] netlink: 'syz.6.1161': attribute type 12 has an invalid length. [ 119.727972][ T7142] loop0: detected capacity change from 0 to 512 [ 119.759876][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.787079][ T3486] Bluetooth: hci0: command 0x1003 tx timeout [ 119.794769][ T4187] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.798763][ T7142] EXT4-fs (loop0): mount failed [ 119.828515][ T7142] loop0: detected capacity change from 0 to 512 [ 119.860253][ T7208] loop6: detected capacity change from 0 to 512 [ 119.886535][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.901720][ T7142] EXT4-fs (loop0): mount failed [ 119.943394][ T7142] loop0: detected capacity change from 0 to 512 [ 119.945721][ T7214] netlink: 'syz.6.1165': attribute type 10 has an invalid length. [ 119.957749][ T7214] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1165'. [ 119.973344][ T7214] loop6: detected capacity change from 0 to 512 [ 119.981740][ T7214] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 119.990173][ T7214] EXT4-fs (loop6): orphan cleanup on readonly fs [ 119.990410][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.997221][ T7214] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.027675][ T7142] EXT4-fs (loop0): mount failed [ 120.031914][ T7214] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 120.039703][ T7214] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1165: bg 0: block 40: padding at end of block bitmap is not set [ 120.054255][ T7142] loop0: detected capacity change from 0 to 512 [ 120.057777][ T7214] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 120.070299][ T7214] EXT4-fs (loop6): 1 truncate cleaned up [ 120.076525][ T7214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.092537][ T7214] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.1165: corrupted xattr block 31: invalid header [ 120.105954][ T7214] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 120.108598][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.115444][ T7214] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.1165: corrupted xattr block 31: invalid header [ 120.130812][ T7142] EXT4-fs (loop0): mount failed [ 120.147421][ T7214] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 120.156694][ T7214] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.1165: bad symlink. [ 120.156890][ T7220] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.1165: corrupted xattr block 31: invalid header [ 120.181837][ T7142] loop0: detected capacity change from 0 to 512 [ 120.184407][ T7220] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 120.197431][ T7220] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.1165: bad symlink. [ 120.210353][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.229373][ T7142] EXT4-fs (loop0): mount failed [ 120.238821][ T7142] loop0: detected capacity change from 0 to 512 [ 120.268985][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.269147][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.290055][ T7142] EXT4-fs (loop0): mount failed [ 120.302229][ T7142] loop0: detected capacity change from 0 to 512 [ 120.323615][ T7226] loop6: detected capacity change from 0 to 128 [ 120.337771][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.345479][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.361492][ T7142] EXT4-fs (loop0): mount failed [ 120.392454][ T7142] loop0: detected capacity change from 0 to 512 [ 120.436691][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.463987][ T7236] loop3: detected capacity change from 0 to 512 [ 120.473157][ T7236] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.492173][ T7236] EXT4-fs (loop3): 1 truncate cleaned up [ 120.498232][ T7142] EXT4-fs (loop0): mount failed [ 120.503709][ T7236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.523922][ T7142] loop0: detected capacity change from 0 to 512 [ 120.556106][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1170'. [ 120.571174][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.598991][ T7241] loop1: detected capacity change from 0 to 512 [ 120.612035][ T7142] EXT4-fs (loop0): mount failed [ 120.623629][ T7241] ext4: Unknown parameter 'audit' [ 120.630070][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.649503][ T7142] loop0: detected capacity change from 0 to 512 [ 120.704446][ T7250] netlink: 'syz.3.1172': attribute type 12 has an invalid length. [ 120.730730][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.792358][ T7142] EXT4-fs (loop0): mount failed [ 120.820662][ T7142] loop0: detected capacity change from 0 to 512 [ 120.872054][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.941495][ T7142] EXT4-fs (loop0): mount failed [ 120.968457][ T7142] loop0: detected capacity change from 0 to 512 [ 120.996524][ T7270] netlink: 'syz.5.1177': attribute type 10 has an invalid length. [ 121.004479][ T7270] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1177'. [ 121.020891][ T7270] loop5: detected capacity change from 0 to 512 [ 121.028223][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.123988][ T7142] EXT4-fs (loop0): mount failed [ 121.138930][ T7274] loop1: detected capacity change from 0 to 512 [ 121.164785][ T7270] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 121.173113][ T7270] EXT4-fs (loop5): orphan cleanup on readonly fs [ 121.181109][ T7270] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.196117][ T7270] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 121.216918][ T7142] loop0: detected capacity change from 0 to 512 [ 121.240251][ T7278] netlink: 'syz.1.1178': attribute type 13 has an invalid length. [ 121.243000][ T7270] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1177: bg 0: block 40: padding at end of block bitmap is not set [ 121.258374][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.279930][ T7270] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 121.288379][ T7142] EXT4-fs (loop0): mount failed [ 121.294088][ T7270] EXT4-fs (loop5): 1 truncate cleaned up [ 121.311047][ T7142] loop0: detected capacity change from 0 to 512 [ 121.311215][ T7270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.349328][ T7270] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1177: corrupted xattr block 31: invalid header [ 121.368623][ T7142] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.412823][ T7142] EXT4-fs (loop0): mount failed [ 121.418285][ T7270] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 121.437615][ T7270] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1177: corrupted xattr block 31: invalid header [ 121.470761][ T7283] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.1177: corrupted xattr block 31: invalid header [ 121.472495][ T7270] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 121.493881][ T7270] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1177: bad symlink. [ 121.505015][ T7283] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 121.516559][ T7283] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1177: bad symlink. [ 121.562123][ T4071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.766233][ T7295] loop1: detected capacity change from 0 to 512 [ 121.782566][ T7295] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.900246][ T7295] EXT4-fs (loop1): 1 truncate cleaned up [ 121.936586][ T7295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.140406][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.220730][ T7326] loop5: detected capacity change from 0 to 512 [ 122.227702][ T7327] netlink: 'syz.1.1193': attribute type 12 has an invalid length. [ 122.227929][ T7326] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.249367][ T7326] EXT4-fs (loop5): 1 truncate cleaned up [ 122.255062][ T7329] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.255751][ T7326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.274179][ T7329] loop0: detected capacity change from 0 to 512 [ 122.306021][ T7329] EXT4-fs: Ignoring removed i_version option [ 122.312225][ T7329] EXT4-fs: Ignoring removed bh option [ 122.331298][ T4071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.331503][ T7329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.353319][ T3486] Bluetooth: hci0: command 0x1003 tx timeout [ 122.357327][ T4187] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.366023][ T7329] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.540755][ T7349] netlink: 'syz.5.1200': attribute type 1 has an invalid length. [ 122.548749][ T7349] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1200'. [ 122.769407][ T7365] netlink: 'syz.6.1205': attribute type 12 has an invalid length. [ 122.821931][ T7368] loop1: detected capacity change from 0 to 512 [ 122.828751][ T7368] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.060986][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.248247][ T7403] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.314958][ T7403] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.388214][ T7403] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.450834][ T7403] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.469782][ T7409] loop5: detected capacity change from 0 to 512 [ 123.479500][ T7409] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 123.493166][ T7409] EXT4-fs (loop5): 1 truncate cleaned up [ 123.508134][ T7407] netlink: 'syz.1.1218': attribute type 12 has an invalid length. [ 123.567245][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.577533][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.616703][ T7409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.640073][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 123.640091][ T29] audit: type=1326 audit(1760877508.644:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 123.669886][ T29] audit: type=1326 audit(1760877508.644:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 123.693349][ T29] audit: type=1326 audit(1760877508.644:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 123.716912][ T29] audit: type=1326 audit(1760877508.644:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 123.740452][ T29] audit: type=1326 audit(1760877508.644:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 123.766714][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.780995][ T7418] loop0: detected capacity change from 0 to 2048 [ 123.798710][ T3471] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.812106][ T29] audit: type=1326 audit(1760877508.774:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 123.835698][ T29] audit: type=1326 audit(1760877508.774:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 123.859168][ T29] audit: type=1326 audit(1760877508.774:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.3.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2317eefc9 code=0x7ffc0000 [ 123.885208][ T29] audit: type=1326 audit(1760877508.844:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 123.893418][ T4071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.908776][ T29] audit: type=1326 audit(1760877508.844:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 123.946211][ T7424] loop3: detected capacity change from 0 to 512 [ 123.955687][ T7424] EXT4-fs: Ignoring removed nobh option [ 123.968626][ T3303] Alternate GPT is invalid, using primary GPT. [ 123.974980][ T3303] loop0: p1 p2 p3 [ 123.975642][ T7424] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1224: corrupted inode contents [ 123.978771][ T3303] loop0: partition table partially beyond EOD, truncated [ 124.014004][ T7424] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.1224: mark_inode_dirty error [ 124.039786][ T7424] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.1224: corrupted inode contents [ 124.076949][ T7418] Alternate GPT is invalid, using primary GPT. [ 124.083398][ T7418] loop0: p1 p2 p3 [ 124.087204][ T7418] loop0: partition table partially beyond EOD, truncated [ 124.095652][ T7424] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1224: mark_inode_dirty error [ 124.147598][ T7424] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1224: Failed to acquire dquot type 0 [ 124.169477][ T7424] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1224: corrupted inode contents [ 124.186341][ T7437] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.198752][ T4528] udevd[4528]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 124.203392][ T7424] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.1224: mark_inode_dirty error [ 124.210484][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 124.221608][ T7439] loop0: detected capacity change from 0 to 512 [ 124.240440][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 124.250485][ T7424] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1224: corrupted inode contents [ 124.275183][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 124.279670][ T4528] udevd[4528]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 124.286227][ T7424] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1224: mark_inode_dirty error [ 124.296491][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 124.307661][ T7437] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.327542][ T7424] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1224: corrupted inode contents [ 124.359049][ T7442] netlink: 'syz.0.1229': attribute type 1 has an invalid length. [ 124.361839][ T7424] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 124.366915][ T7442] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1229'. [ 124.400484][ T7424] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1224: corrupted inode contents [ 124.417674][ T7424] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.1224: mark_inode_dirty error [ 124.428987][ T7424] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 124.440135][ T7437] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.452036][ T7424] EXT4-fs (loop3): 1 truncate cleaned up [ 124.459057][ T7424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.471978][ T7424] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.488892][ T7437] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.507991][ T7424] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1224: iget: bad i_size value: 360287970189639690 [ 124.534864][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.554990][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.570216][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.612286][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.623256][ T7445] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1230'. [ 124.638935][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.752132][ T7450] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1232'. [ 124.817500][ T7452] netlink: 'syz.1.1233': attribute type 12 has an invalid length. [ 124.824556][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1234'. [ 124.918022][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1238'. [ 124.969826][ T7471] netlink: 'syz.3.1240': attribute type 10 has an invalid length. [ 124.978066][ T7471] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1240'. [ 124.993497][ T7471] loop3: detected capacity change from 0 to 512 [ 125.014042][ T7471] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 125.035804][ T7471] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.042495][ T7471] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.061891][ T7471] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 125.073434][ T7471] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1240: bg 0: block 40: padding at end of block bitmap is not set [ 125.075519][ T7476] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1242'. [ 125.097043][ T7478] loop6: detected capacity change from 0 to 512 [ 125.103525][ T7471] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 125.113364][ T7471] EXT4-fs (loop3): 1 truncate cleaned up [ 125.119795][ T7471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.133667][ T7471] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.1240: corrupted xattr block 31: invalid header [ 125.150811][ T7471] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 125.151237][ T7478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.167279][ T7471] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.1240: corrupted xattr block 31: invalid header [ 125.172566][ T7478] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.196684][ T7481] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.1240: corrupted xattr block 31: invalid header [ 125.209958][ T7471] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 125.219099][ T7471] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1240: bad symlink. [ 125.236958][ T7481] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 125.249997][ T7481] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1240: bad symlink. [ 125.310494][ T7478] infiniband syz2: set active [ 125.315271][ T7478] infiniband syz2: added bond0 [ 125.333385][ T7478] RDS/IB: syz2: added [ 125.385124][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.439089][ T7487] loop0: detected capacity change from 0 to 512 [ 125.472114][ T7489] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.480027][ T7487] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 125.497149][ T7489] loop3: detected capacity change from 0 to 512 [ 125.503868][ T7489] EXT4-fs: Ignoring removed i_version option [ 125.510020][ T7489] EXT4-fs: Ignoring removed bh option [ 125.545851][ T7487] EXT4-fs (loop0): orphan cleanup on readonly fs [ 125.563471][ T7487] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.579027][ T7487] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 125.586175][ T7487] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1255: bg 0: block 40: padding at end of block bitmap is not set [ 125.603494][ T7489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.627236][ T7489] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.639028][ T7487] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 125.664094][ T7487] EXT4-fs (loop0): 1 truncate cleaned up [ 125.684403][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.685432][ T7487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.709847][ T7497] __nla_validate_parse: 1 callbacks suppressed [ 125.709866][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1247'. [ 125.711922][ T7487] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1255: corrupted xattr block 31: invalid header [ 125.738574][ T7487] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 125.747747][ T7487] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1255: corrupted xattr block 31: invalid header [ 125.763241][ T7499] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1255: corrupted xattr block 31: invalid header [ 125.789816][ T7502] 9pnet_virtio: no channels available for device 127.0.0.1 [ 125.850485][ T7487] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 125.870558][ T7499] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 125.886153][ T7499] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.1255: bad symlink. [ 125.896746][ T7487] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.1255: bad symlink. [ 125.908465][ T7514] cgroup: Need name or subsystem set [ 125.924856][ T7515] loop6: detected capacity change from 0 to 512 [ 125.946658][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.982635][ T7515] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1253: bg 0: block 393: padding at end of block bitmap is not set [ 126.018216][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1260'. [ 126.028483][ T7528] validate_nla: 3 callbacks suppressed [ 126.028508][ T7528] netlink: 'syz.5.1259': attribute type 12 has an invalid length. [ 126.045606][ T7515] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 126.066850][ T7515] EXT4-fs (loop6): 2 truncates cleaned up [ 126.079080][ T7515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.136672][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 126.169376][ T7545] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1266'. [ 126.178605][ T7545] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 126.180349][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.205400][ T7533] wireguard0: entered promiscuous mode [ 126.211206][ T7533] wireguard0: entered allmulticast mode [ 126.222892][ T7550] netlink: 'syz.6.1267': attribute type 1 has an invalid length. [ 126.230791][ T7550] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1267'. [ 126.322065][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.364074][ T7563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1272'. [ 126.450582][ T7568] netlink: 'syz.0.1274': attribute type 12 has an invalid length. [ 126.474923][ T7566] vlan1: entered allmulticast mode [ 126.705594][ T7581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7581 comm=syz.1.1280 [ 126.770314][ T7591] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.810105][ T7591] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.868560][ T7591] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.918686][ T7591] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.087515][ T7594] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.098925][ T7594] loop6: detected capacity change from 0 to 512 [ 127.110072][ T7594] EXT4-fs: Ignoring removed i_version option [ 127.116169][ T7594] EXT4-fs: Ignoring removed bh option [ 127.151371][ T7594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.164292][ T7594] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.439049][ T3471] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.451012][ T3471] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.462975][ T3471] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.475330][ T3471] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.513957][ T7604] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 127.526068][ T7604] 9pnet_fd: Insufficient options for proto=fd [ 127.570697][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 127.585869][ T7608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1285'. [ 127.609943][ T7603] wireguard0: entered promiscuous mode [ 127.615490][ T7603] wireguard0: entered allmulticast mode [ 127.632757][ T7611] netlink: 'syz.1.1286': attribute type 12 has an invalid length. [ 127.771374][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'. [ 127.780926][ T7626] bridge0: port 3(dummy0) entered disabled state [ 127.787962][ T7626] bridge_slave_1: left allmulticast mode [ 127.793663][ T7626] bridge_slave_1: left promiscuous mode [ 127.799377][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.808700][ T7626] bridge_slave_0: left promiscuous mode [ 127.814453][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.864326][ T7630] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.911610][ T7628] loop3: detected capacity change from 0 to 1024 [ 127.920615][ T7628] EXT4-fs: Ignoring removed bh option [ 127.938568][ T7628] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 127.953720][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.976591][ T7641] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1300'. [ 127.987940][ T7630] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.008665][ T7628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.023362][ T7643] netlink: 'syz.6.1301': attribute type 12 has an invalid length. [ 128.035720][ T7647] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 128.047934][ T7647] 9pnet_fd: Insufficient options for proto=fd [ 128.048518][ T7630] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.140657][ T7630] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.161899][ T7654] loop5: detected capacity change from 0 to 2048 [ 128.182356][ T7658] netlink: 'syz.1.1307': attribute type 1 has an invalid length. [ 128.225387][ T3002] loop5: p1 p2 p3 [ 128.234795][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.244835][ T3002] loop5: p1 p2 p3 [ 128.259568][ T7660] wireguard0: entered promiscuous mode [ 128.265113][ T7660] wireguard0: entered allmulticast mode [ 128.274560][ T7654] loop5: p1 p2 p3 [ 128.278843][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.299098][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.356577][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.401986][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 128.402035][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 128.402116][ T3305] ================================================================== [ 128.402149][ T3305] BUG: KCSAN: data-race in data_push_tail / string [ 128.402184][ T3305] [ 128.402192][ T3305] write to 0xffffffff88e4b100 of 1 bytes by task 3303 on cpu 1: [ 128.402214][ T3305] string+0x187/0x220 [ 128.402254][ T3305] vsnprintf+0x532/0x890 [ 128.402294][ T3305] vscnprintf+0x41/0x90 [ 128.402329][ T3305] printk_sprint+0x30/0x2d0 [ 128.402357][ T3305] vprintk_store+0x599/0x860 [ 128.402384][ T3305] vprintk_emit+0x10d/0x580 [ 128.402411][ T3305] devkmsg_emit+0x7f/0xb0 [ 128.402449][ T3305] devkmsg_write+0x1e3/0x2b0 [ 128.402472][ T3305] do_iter_readv_writev+0x4a1/0x540 [ 128.402506][ T3305] vfs_writev+0x2df/0x8b0 [ 128.402546][ T3305] do_writev+0xe7/0x210 [ 128.402574][ T3305] __x64_sys_writev+0x45/0x50 [ 128.402607][ T3305] x64_sys_call+0x1e9a/0x3000 [ 128.402638][ T3305] do_syscall_64+0xd2/0x200 [ 128.402672][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.402702][ T3305] [ 128.402711][ T3305] read to 0xffffffff88e4b100 of 8 bytes by task 3305 on cpu 0: [ 128.402733][ T3305] data_push_tail+0xfd/0x420 [ 128.402758][ T3305] data_alloc+0xfb/0x2e0 [ 128.402808][ T3305] prb_reserve+0x807/0xaf0 [ 128.402831][ T3305] vprintk_store+0x56d/0x860 [ 128.402857][ T3305] vprintk_emit+0x10d/0x580 [ 128.402885][ T3305] devkmsg_emit+0x7f/0xb0 [ 128.402923][ T3305] devkmsg_write+0x1e3/0x2b0 [ 128.402947][ T3305] do_iter_readv_writev+0x4a1/0x540 [ 128.402979][ T3305] vfs_writev+0x2df/0x8b0 [ 128.403008][ T3305] do_writev+0xe7/0x210 [ 128.403042][ T3305] __x64_sys_writev+0x45/0x50 [ 128.403074][ T3305] x64_sys_call+0x1e9a/0x3000 [ 128.403103][ T3305] do_syscall_64+0xd2/0x200 [ 128.403135][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.403163][ T3305] [ 128.403169][ T3305] value changed: 0x00000000ffffe822 -> 0x6f6e69203a5d3330 [ 128.403185][ T3305] [ 128.403192][ T3305] Reported by Kernel Concurrency Sanitizer on: [ 128.403225][ T3305] CPU: 0 UID: 0 PID: 3305 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 128.403261][ T3305] Tainted: [W]=WARN [ 128.403270][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.403288][ T3305] ================================================================== [ 128.503686][ T4528] udevd[4528]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 128.647251][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 128.647273][ T29] audit: type=1326 audit(1760877513.654:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 128.683663][ T29] audit: type=1326 audit(1760877513.654:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 128.708037][ T29] audit: type=1326 audit(1760877513.694:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 128.731686][ T29] audit: type=1326 audit(1760877513.694:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 128.755342][ T29] audit: type=1326 audit(1760877513.694:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 128.778840][ T29] audit: type=1326 audit(1760877513.694:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 128.802271][ T29] audit: type=1326 audit(1760877513.694:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 128.825766][ T29] audit: type=1326 audit(1760877513.694:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 128.849210][ T29] audit: type=1326 audit(1760877513.694:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.0.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd0a8ccefc9 code=0x7ffc0000 [ 128.862820][ T4528] udevd[4528]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 128.874605][ T29] audit: type=1326 audit(1760877513.794:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6963b8efc9 code=0x7ffc0000 [ 131.648621][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.