last executing test programs: 6m26.259884736s ago: executing program 4 (id=2176): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote, 0x4}}}, 0x108) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x16, "4372070000000000476fb2be4c3f9725f0f2bf568d62"}}) sendto$inet6(r1, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x1, 0x10062, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x804) pipe(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x10, 0x1, 0x0, 0xffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0) 6m25.384658092s ago: executing program 4 (id=2197): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000b800c8314ad583ab62d52b78b2cc35f5fe9eeb14537ee4e7e54715e9c26db8d3cfcbe7b7a46c0767c05d3c383e61b7f4352a0583cf7e41f0c2d6d7c98b5d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf2501"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) 6m25.307560254s ago: executing program 4 (id=2200): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0xb00, 0x0, 0x0) 6m25.257043675s ago: executing program 4 (id=2202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x80802, 0x0) write$cgroup_int(r1, 0x0, 0x2) 6m25.209276966s ago: executing program 4 (id=2203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) poll(&(0x7f0000000080)=[{}], 0x1, 0x44) 6m25.092910938s ago: executing program 4 (id=2209): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) unshare(0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8880) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="980000000000000000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgget$private(0x0, 0x0) fdatasync(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) syz_usb_connect(0x0, 0x57, 0x0, 0x0) 6m10.074638319s ago: executing program 32 (id=2209): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) unshare(0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8880) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="980000000000000000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgget$private(0x0, 0x0) fdatasync(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) syz_usb_connect(0x0, 0x57, 0x0, 0x0) 1m37.035119602s ago: executing program 2 (id=7509): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000004c0), &(0x7f00000006c0)='%pB \x00'}, 0x20) getdents64(0xffffffffffffffff, 0x0, 0x4f) 1m36.988836513s ago: executing program 2 (id=7512): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000002340)=0x0) io_submit(r2, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x23, 0x1, 0x20, 0x0, 0x0, 0x7, 0x20008, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x8, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='xen_mmu_write_cr3\x00', r8, 0x0, 0x2}, 0x18) sendmmsg$inet(r6, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a9", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4008440) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4dfd, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRESOCT=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYRES32=r1, @ANYBLOB='(\x00\x00\x00( \x00\x00', @ANYRES32=r4, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="f7e11cc07b7e6ece50847c60145935c8acca64d13f5e38c52d6011215edc68e870a94bb64352053111a5d4ac8c5c2f8aec2b74a62815d70216e1dbd5ed3d01d03186f29901d6bff800f738a7492e25be09369473bd5455898edd1dcf11947471c5abf302d5654a6039af0cd70205bd09a9cfbb04879065a3162dfed4172b860b320cc0c187b9b8344697632785735dfdc4e9983d27e5d5d4119991a348f6a6056fb7da3330eae3f0a398870907c1e72b3e2893686ec62ccb753e2d4462ea078fe1ffadc3ec0a25468d9a424ddff061f5123554f2e7704c2958113f40af668e6fba3de5ed573cd8c8cedc80bd", @ANYRES64=0x0], 0x20) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, 0x0, 0x0) 1m35.794867966s ago: executing program 2 (id=7540): socket$netlink(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) (fail_nth: 4) r2 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1m35.660680978s ago: executing program 2 (id=7543): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3ff}, 0x18) open_tree(0xffffffffffffff9c, 0x0, 0x81000) r0 = mq_open(&(0x7f0000000100)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0\xe3\x1dy\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xbd\xae\x00^}\xb4VD\xff\nJ+\xef\xe8\x96\x1a\x06 \x0fZ\xd6\xce\x96\x1eX\xbc\x881\xe2w\x06fG\"e\xd4\xd1:\x8e:\x1dR\xbb\xcb3\xed\x10\\\x10\x17D\xe3=\x7f\x15\xab\xadS\x82\xd2\x1b\xf3c\x8c\xe5\xd3\xf3\xc3\xf5X\x13G\xbd\x06 Yp\xa6N\xba\x81\xff\xd3>\xd5\xcc8\xf2(\x01aa\xa3\xea\xf0\x93\xbb\x015\x12\xbb\xcd\xbdi|z\xc3\x91q\xd9\x933\xb6\x13j', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) 1m35.537977221s ago: executing program 2 (id=7545): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c000480480001"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) 1m35.526616671s ago: executing program 2 (id=7547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000740)={@multicast1, @local, 0x0}, &(0x7f0000000780)=0xc) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x2d, 0x9, 0x3, 0xfff, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7800, 0x7, 0xfffffffc}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'dvmrp1\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) (async, rerun: 64) sendmsg$can_j1939(r9, &(0x7f0000001680)={&(0x7f0000001700)={0x1d, r10, 0x0, {0x1, 0xfe, 0x4}, 0x1fe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x40}, 0x24000005) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r1, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r2, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000b40)=[0x0], &(0x7f0000000b80)=[0x0], 0x0, 0x28, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000e00)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f0000000e40)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000e80)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a40)={&(0x7f0000000ec0)={0xb68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x480}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3bb}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x65, 0x4, 0x7fffffff}, {0x4, 0x2, 0x10, 0x9}, {0x8788, 0xc, 0x4, 0x4}, {0x6, 0x8, 0x2, 0x2}, {0x6, 0xf, 0x6, 0xaa3e}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xf6e9, 0x3, 0xa, 0xc}, {0x4557, 0x4, 0x83, 0x10001}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r12}, {0x248, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff1ee}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x7, 0x81, 0x300}, {0x1000, 0x8, 0x1, 0xfffffffb}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x3, 0x57, 0x5}, {0x116, 0xfb, 0xff, 0x8}, {0x5, 0x4b, 0xcd, 0x2}, {0x240, 0x2, 0x5, 0xb89e}, {0x6, 0x2b, 0x4, 0x1}, {0x5, 0x10, 0x1, 0x200}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0xb68}, 0x1, 0x0, 0x0, 0x80d0}, 0x8000) (async) r17 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x7b04, 0x3280, 0x8003, 0x400a1}, &(0x7f0000000380)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r18, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) syz_io_uring_submit(r18, r19, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x1, r17, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) (async) io_uring_enter(r17, 0x6e2, 0x620, 0x1, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) r20 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r21 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r21, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m20.475628753s ago: executing program 33 (id=7547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000740)={@multicast1, @local, 0x0}, &(0x7f0000000780)=0xc) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x2d, 0x9, 0x3, 0xfff, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7800, 0x7, 0xfffffffc}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'dvmrp1\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) (async, rerun: 64) sendmsg$can_j1939(r9, &(0x7f0000001680)={&(0x7f0000001700)={0x1d, r10, 0x0, {0x1, 0xfe, 0x4}, 0x1fe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x40}, 0x24000005) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r1, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r2, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000b40)=[0x0], &(0x7f0000000b80)=[0x0], 0x0, 0x28, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000e00)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f0000000e40)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000e80)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a40)={&(0x7f0000000ec0)={0xb68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x480}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3bb}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x65, 0x4, 0x7fffffff}, {0x4, 0x2, 0x10, 0x9}, {0x8788, 0xc, 0x4, 0x4}, {0x6, 0x8, 0x2, 0x2}, {0x6, 0xf, 0x6, 0xaa3e}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xf6e9, 0x3, 0xa, 0xc}, {0x4557, 0x4, 0x83, 0x10001}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r12}, {0x248, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff1ee}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x7, 0x81, 0x300}, {0x1000, 0x8, 0x1, 0xfffffffb}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x3, 0x57, 0x5}, {0x116, 0xfb, 0xff, 0x8}, {0x5, 0x4b, 0xcd, 0x2}, {0x240, 0x2, 0x5, 0xb89e}, {0x6, 0x2b, 0x4, 0x1}, {0x5, 0x10, 0x1, 0x200}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0xb68}, 0x1, 0x0, 0x0, 0x80d0}, 0x8000) (async) r17 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x7b04, 0x3280, 0x8003, 0x400a1}, &(0x7f0000000380)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r18, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) syz_io_uring_submit(r18, r19, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x1, r17, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) (async) io_uring_enter(r17, 0x6e2, 0x620, 0x1, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) r20 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r21 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r21, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.07384658s ago: executing program 0 (id=9095): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000002340)=0x0) io_submit(r2, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x23, 0x1, 0x20, 0x0, 0x0, 0x7, 0x20008, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x8, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='xen_mmu_write_cr3\x00', r8, 0x0, 0x2}, 0x18) sendmmsg$inet(r6, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='9', 0x1}], 0x1}}], 0x2, 0x4008440) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4dfd, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRESOCT=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYRES32=r1, @ANYBLOB='(\x00\x00\x00( \x00\x00', @ANYRES32=r4, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="f7e11cc07b7e6ece50847c60145935c8acca64d13f5e38c52d6011215edc68e870a94bb64352053111a5d4ac8c5c2f8aec2b74a62815d70216e1dbd5ed3d01d03186f29901d6bff800f738a7492e25be09369473bd5455898edd1dcf11947471c5abf302d5654a6039af0cd70205bd09a9cfbb04879065a3162dfed4172b860b320cc0c187b9b8344697632785735dfdc4e9983d27e5d5d4119991a348f6a6056fb7da3330eae3f0a398870907c1e72b3e2893686ec62ccb753e2d4462ea078fe1ffadc3ec0a25468d9a424ddff061f5123554f2e7704c2958113f40af668e6fba3de5ed573cd8c8cedc80bd", @ANYRES64=0x0], 0x20) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) 3.04822146s ago: executing program 3 (id=9096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.197557297s ago: executing program 3 (id=9108): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="1066"]) 2.082258039s ago: executing program 0 (id=9110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x28, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.076514929s ago: executing program 3 (id=9111): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000640)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000700)=0x60) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x30}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) unshare(0x62040200) 2.04711066s ago: executing program 0 (id=9113): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000f80)=ANY=[@ANYBLOB="757466382c6869646500757466383a0176558a0bca7c0a5fba6a2c6f76657272696465726f636b7065726d2c6d61703d6f66662c6d61703d6e6f726d616c4173657373696f6e3d30783030303030303030303030b6303033372c756e686964652c756e686964652c6f76657272696465726f636b7065726d2c6d61703d6f66662c6d61703d6e6f726d616c2c6e6f726f636b2c00"], 0x2, 0x6b1, &(0x7f0000001100)="$eJzs3V1vG1kdx/HfOI7jZqFaAaqqqg+nLSulorhjZ5sqKhJrxuNkwPZYMw5qJKRV2Sarqk4X2iLR3Cy54UFa3gDihgu44EUgcb3vghsE0grukJYLr+bJseOnuuu2u9vvJ9r1eM5/zvnPjOu/JvEcCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHJqtl221PBaO3fMZE4t8Jvp8v97o+1Jb8u6lixcmzmuZEX/qVjU2WTV2W8dN5+J/ndF55Nn51WMHoo6fOPMm7e/mc9l209J+Hlo3g4fPz18cLfb3Xv0DLFLmrv7V0m5bOlUek7GBG25LS/0vWZ1yzVe6JvNjQ37xnY9NHWv4Ya7YcdtGidwcx0/MGvONVPe3Fw3bmnX32lt1aoNN1t567sV294wP1xJTrSkUuhse42G19qKY6LmKOaW+egnSYBbbRqzf7+7tz5rT6Kg8rMEVWYFVexKpVyuVMobNzdv3rLt/OCKnKS8HbHsPo1ssvAXLb5kFvPGDSxALqr//7CkhopqaUd3ZMb+OKopkK/mhPZUVv/fuuFOHXew/mdV/qz0/bT5nOL6fzF5dnFS/Z+Qi5GJNxjXYk1YP9/PcpyR0WM91aEe6K666mpPjxbQt5G5tJBeXsLPlly15CmUL09NVbWlP39d6RqjTW1oQ7be1bbqCmVUl6eGXIXaVaiO3PgV5SiQq6o68hXIaE2OrsmorE1tal1Grkrala8dtbSlmqr6X6/X29f9+LivT8lRWVB5QsDKYFBlSk/DxfyPyur/Tz9MXqd23j6B+v96SV4HK8nDx9NigC+AXnr9Pyg3e7NLLy4jAAAAAACwaFb823cr/tv9BUk91b2Ga7/qtAAAAAAAwAJZ6q3ovKzo+l/SBVlc/wMAAAAA8FVjxffYWZJW4w/1W8d3Qj3LLwGWXkKKAAAAAADgc4rv/L9YkHrxpBWXZM11/Q8AAAAAAL4Efjswx34+m2O3l/1ZPycpbK9Yf/vPioJl66h959vWQTVqqR6kMZ+e7LFTP2edTifqjR8KkuJnjnveOp9MjplOgtmfd/CT/Vlz/VvBiQQKS4MdTEjAikbeyKfP9JEuJ5tcTueZv3eYU9ySjLJa9xpuyfEbt8uqVk/nOu6dzi8e3v+lFPQ/6bB/v7tXeu+D7r04l6No1dFB1OmHQ+nkxh+M41yexPMtxPdcjNvjU6pnQ/6u1Vy14nHtbP+XVD3IDQ407QQcj/lrXVH8qY0rq0ns6mF/xv1o/4vR/pdL8Skb2vtg2TrOonxyz8ediAlZFOMsriYxV9euqvLPZLl/FnJW8TtLUqU0eg6GsqgMZjH7WFj/HTkWA1nED1nLwLFYj7L4e9TRhCzW58ti5IwAwKuyrwuK34UuKJ7EvF+FimndzcpD9qb2XHVndnV/Z7i6P/lDrxdvsCTl079NTB2lqOgdfc2K61Ah2aX8uTHv6HZaV4qa8I5uf47qFo311+PvQErTHsni016vd7scj/v7E1X1T0PDjYwbNipL0SG88eTgZ/EE+JH3997fe1iprG/Yb9v2zYqW491IH5ZE7QEAjJj9HTszI6y3dTmJuHzv328lS0MV7xv9jxSU9J4+UFf3dD37CoFL43tdHfgYwvXkqlUDV63mzJu34++lG44t6/rEq7q4lg7EVvqxy8o2Ga7Ux7HrL/gsAADwcl2ZUYfH1//iUP2/rrUkYu3c2Ovu4VqeXh33L+knxZZnJ//Ooo8GAACvBzf4xFrt/MYKAq/9bnlzs1ztbLsm8J0fmcCrbbnGa3XcwNmutrZc0w78ju/4DdMOtOLV3NCEO+22H3RM3Q9M2w+9O/E3v5v0q99Dt1ltdTwnbDfcaugax291qk7H1LzQMe2dHzS8cNsN4o3Dtut4dc+pdjy/ZUJ/J3DckjGh6w4EejW31fHqXrTYMu3Aa1aDXfNjv7HTdE3NDZ3Aa3f8pMNsLK9V94Nm3G0p3xv3eQEAAF47j58ePrjb7e49OrlwKro0T9YcaULM6EJBj59GV+XRmnzaxBxBAAB8wRwX8Dk2Kr7AhAAAAAAAAAAAAAAAAAAAAAAAwIjZt/TNubA87mZBqb/m56fTNfqVjm8xHOnH0qITm2chN+9W2S0Rhw8+nhRT0N1T/TXZ4R+MOXppO/ivr0lvxGuUrMkvfqxTU07ui1j43n5yRCfGRI1jm1b65yL/HP8cCpoZ8/AvE5p6vV5v+hArw8ewMLSDuWmD5iU9Ksx9CgojL1EAX1WfBQAA//843TOC") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') pread64(r1, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0) io_submit(r2, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x23, 0x1, 0x20, 0x0, 0x0, 0x7, 0x20008, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x8, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='xen_mmu_write_cr3\x00', r8, 0x0, 0x2}, 0x18) sendmmsg$inet(r6, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='9', 0x1}], 0x1}}], 0x2, 0x4008440) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4dfd, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRESOCT=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYRES32=r1, @ANYBLOB='(\x00\x00\x00( \x00\x00', @ANYRES32=r4, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="f7e11cc07b7e6ece50847c60145935c8acca64d13f5e38c52d6011215edc68e870a94bb64352053111a5d4ac8c5c2f8aec2b74a62815d70216e1dbd5ed3d01d03186f29901d6bff800f738a7492e25be09369473bd5455898edd1dcf11947471c5abf302d5654a6039af0cd70205bd09a9cfbb04879065a3162dfed4172b860b320cc0c187b9b8344697632785735dfdc4e9983d27e5d5d4119991a348f6a6056fb7da3330eae3f0a398870907c1e72b3e2893686ec62ccb753e2d4462ea078fe1ffadc3ec0a25468d9a424ddff061f5123554f2e7704c2958113f40af668e6fba3de5ed573cd8c8cedc80bd", @ANYRES64=0x0], 0x20) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) 1.349218944s ago: executing program 5 (id=9122): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) 1.303597894s ago: executing program 6 (id=9124): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000004000000040000000400010000007084", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000600"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r8, @ANYRESDEC=r13, @ANYRESHEX=r14, @ANYRESDEC, @ANYRES32=r12, @ANYRES8=r11, @ANYRES64=r11, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES8=r14], 0x0, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000a00)={r11, 0xfffffffffffffff7}) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r16, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x38, r15, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}}, 0x0) r17 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)=""/58, 0x105, 0x3a, 0x1, 0x9}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x17, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@jmp={0x5, 0x0, 0xa, 0x4, 0xb, 0x4, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x7f}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x93, &(0x7f00000004c0)=""/147, 0x41000, 0x4, '\x00', r9, 0x0, r17, 0x8, &(0x7f0000000600)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0xf, 0x5, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000800)=[{0x4, 0x1, 0xb, 0x7}, {0x1, 0x3, 0xc, 0x2}, {0x0, 0x4, 0xc, 0x9}, {0x1, 0x3, 0x2, 0x5}], 0x10, 0x7}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000044f8ffff430000000800000009000000000400120400000002000000000000090400000000000000010000060400000008000000ac0c00000700004bc1cb380bfffc0000050000000000000c05000000005f30615f613000"], &(0x7f00000005c0)=""/222, 0x64, 0xde, 0x1, 0x2, 0x10000}, 0x28) r18 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r18, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r18}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x20) 1.089882738s ago: executing program 6 (id=9131): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 1.065437129s ago: executing program 6 (id=9132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000002340)=0x0) io_submit(r2, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x23, 0x1, 0x20, 0x0, 0x0, 0x7, 0x20008, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x8, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='xen_mmu_write_cr3\x00', r8, 0x0, 0x2}, 0x18) sendmmsg$inet(r6, &(0x7f0000000600)=[{{0x0, 0x4102, &(0x7f0000000140)=[{&(0x7f0000000080)="a9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='9', 0x1}], 0x1}}], 0x2, 0x4008440) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4dfd, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYRES32=r1, @ANYBLOB='(\x00\x00\x00( \x00\x00', @ANYRES32=r4, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="f7e11cc07b7e6ece50847c60145935c8acca64d13f5e38c52d6011215edc68e870a94bb64352053111a5d4ac8c5c2f8aec2b74a62815d70216e1dbd5ed3d01d03186f29901d6bff800f738a7492e25be09369473bd5455898edd1dcf11947471c5abf302d5654a6039af0cd70205bd09a9cfbb04879065a3162dfed4172b860b320cc0c187b9b8344697632785735dfdc4e9983d27e5d5d4119991a348f6a6056fb7da3330eae3f0a398870907c1e72b3e2893686ec62ccb753e2d4462ea078fe1ffadc3ec0a25468d9a424ddff061f5123554f2e7704c2958113f40af668e6fba3de5ed573cd8c8cedc80bd", @ANYRES64=0x0], 0x20) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, 0x0, 0x0) 1.065147049s ago: executing program 3 (id=9133): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) 992.710961ms ago: executing program 1 (id=9134): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff088) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000002e40)=ANY=[], 0x18) 979.823981ms ago: executing program 6 (id=9135): r0 = socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) socket$kcm(0xa, 0x3, 0x3a) r3 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) io_setup(0x8, &(0x7f00000002c0)=0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x1000}]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) rename(0x0, &(0x7f0000000080)='./file2\x00') getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0x2, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0xd}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r7, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084) 876.002823ms ago: executing program 6 (id=9137): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) 782.360154ms ago: executing program 5 (id=9138): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b1f00000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r5}, 0x8) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000006, &(0x7f0000000d40)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x5}}], [{@flag='sync'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@seclabel}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fowner_lt={'fowner<', r7}}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") setresuid(r4, 0xffffffffffffffff, r7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000204004d1504"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x40010) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r3, 0x4010744d, &(0x7f0000000080)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3213}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) sync_file_range(0xffffffffffffffff, 0x80, 0x6, 0x1) 684.055876ms ago: executing program 6 (id=9139): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000640)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000700)=0x60) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x30}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) unshare(0x62040200) 572.687738ms ago: executing program 1 (id=9140): shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) 525.513669ms ago: executing program 1 (id=9141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 113.626367ms ago: executing program 5 (id=9142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 112.975457ms ago: executing program 0 (id=9143): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x2, {{0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x342}}}, 0x88) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18027a0000000000000000003b00000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x2, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x35, r2, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000380)=[{0x3, 0x3, 0x5, 0xb}, {0x4, 0x1, 0x3, 0x6}, {0x1, 0x5, 0xe, 0xc}, {0x2, 0x1, 0x3}], 0x10, 0x6}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) write$cgroup_int(r9, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000002d0bef31000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x10000, 0x16de, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) close(0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 55.334878ms ago: executing program 5 (id=9144): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @b}}) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0) 0s ago: executing program 1 (id=9145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff088) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000002e40)=ANY=[], 0x18) kernel console output (not intermixed with test programs): multicast mode [ 492.106718][T25877] bridge_slave_0: left promiscuous mode [ 492.112561][T25877] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.725697][T25877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.736163][T25877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.745819][T25877] bond0 (unregistering): Released all slaves [ 492.754949][T25877] bond1 (unregistering): Released all slaves [ 492.764172][T25877] bond2 (unregistering): Released all slaves [ 492.774454][T25877] bond3 (unregistering): Released all slaves [ 492.782724][T25877] bond4 (unregistering): Released all slaves [ 492.791466][T25877] bond5 (unregistering): Released all slaves [ 492.800407][T29759] team0: Port device team_slave_0 added [ 492.809156][T29759] team0: Port device team_slave_1 added [ 492.828930][T29759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.835976][T29759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.861959][T29759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.874171][T29759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.881185][T29759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.907179][T29759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.945062][T30043] 9p: Unknown access argument 00000000000000000000f: -22 [ 492.963615][T29759] hsr_slave_0: entered promiscuous mode [ 492.970240][T29759] hsr_slave_1: entered promiscuous mode [ 492.977324][T29759] debugfs: 'hsr0' already exists in 'hsr' [ 492.983114][T29759] Cannot create hsr debugfs directory [ 492.988805][T25877] tipc: Disabling bearer [ 492.993790][T25877] tipc: Left network mode [ 493.078871][T30087] 9p: Unknown access argument 00000000000000000000f: -22 [ 493.142251][T25877] hsr_slave_0: left promiscuous mode [ 493.158490][T25877] hsr_slave_1: left promiscuous mode [ 493.167637][T25877] veth1_macvtap: left promiscuous mode [ 493.174391][T25877] veth0_macvtap: left promiscuous mode [ 493.180529][T25877] veth1_vlan: left promiscuous mode [ 493.185836][T25877] veth0_vlan: left promiscuous mode [ 493.228201][T30064] loop1: detected capacity change from 0 to 512 [ 493.237715][T30064] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 493.283982][T30064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 493.293496][T30064] System zones: 1-12 [ 493.297754][T25877] team0 (unregistering): Port device team_slave_1 removed [ 493.310636][T30064] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8578: corrupted in-inode xattr: e_value size too large [ 493.326809][T30064] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8578: couldn't read orphan inode 15 (err -117) [ 493.329344][T25877] team0 (unregistering): Port device team_slave_0 removed [ 493.441360][T30143] loop0: detected capacity change from 0 to 164 [ 493.449022][T30143] Unable to read rock-ridge attributes [ 493.521371][T30163] Unable to read rock-ridge attributes [ 493.527269][T30163] syz.0.8588: attempt to access beyond end of device [ 493.527269][T30163] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 493.536194][T30165] syzkaller1: entered promiscuous mode [ 493.547985][T30165] syzkaller1: entered allmulticast mode [ 493.555013][T30163] syz.0.8588: attempt to access beyond end of device [ 493.555013][T30163] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 493.643607][T25877] IPVS: stop unused estimator thread 0... [ 493.733203][T30180] loop1: detected capacity change from 0 to 512 [ 493.740928][T30180] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 493.780017][T29759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 493.790114][T29759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 493.802478][T29759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 493.803090][T30199] loop1: detected capacity change from 0 to 164 [ 493.817063][T30199] Unable to read rock-ridge attributes [ 493.818235][T29759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 493.872241][T29759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.884258][T30207] Unable to read rock-ridge attributes [ 493.886795][T29759] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.898242][T30207] syz.1.8595: attempt to access beyond end of device [ 493.898242][T30207] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 493.912841][T30207] syz.1.8595: attempt to access beyond end of device [ 493.912841][T30207] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 493.927794][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.934913][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.944479][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.951620][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.025667][T29759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.042090][T30214] __nla_validate_parse: 24 callbacks suppressed [ 494.042112][T30214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8596'. [ 494.058889][T30214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8596'. [ 494.068561][T30214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8596'. [ 494.078443][T30214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8596'. [ 494.172324][T30228] netlink: 7 bytes leftover after parsing attributes in process `syz.6.8597'. [ 494.179143][T29759] veth0_vlan: entered promiscuous mode [ 494.186941][T30228] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8597'. [ 494.190321][T29759] veth1_vlan: entered promiscuous mode [ 494.197091][T30228] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8597'. [ 494.212590][T29759] veth0_macvtap: entered promiscuous mode [ 494.214732][T29759] veth1_macvtap: entered promiscuous mode [ 494.238840][T29759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.251649][T29759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.271143][ T1389] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.284965][ T1389] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.298134][ T1389] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.312098][ T1389] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.325413][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8598'. [ 494.336529][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8598'. [ 494.347318][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8598'. [ 494.421923][T30246] syzkaller0: entered promiscuous mode [ 494.427479][T30246] syzkaller0: entered allmulticast mode [ 494.435905][T30252] loop0: detected capacity change from 0 to 512 [ 494.442791][T30252] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 494.654652][T30273] syzkaller1: entered promiscuous mode [ 494.660248][T30273] syzkaller1: entered allmulticast mode [ 494.738407][T30283] FAULT_INJECTION: forcing a failure. [ 494.738407][T30283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.752773][T30283] CPU: 0 UID: 0 PID: 30283 Comm: syz.1.8612 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 494.752861][T30283] Tainted: [W]=WARN [ 494.752869][T30283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.752882][T30283] Call Trace: [ 494.752889][T30283] [ 494.752896][T30283] __dump_stack+0x1d/0x30 [ 494.752917][T30283] dump_stack_lvl+0xe8/0x140 [ 494.752935][T30283] dump_stack+0x15/0x1b [ 494.752971][T30283] should_fail_ex+0x265/0x280 [ 494.752998][T30283] should_fail+0xb/0x20 [ 494.753023][T30283] should_fail_usercopy+0x1a/0x20 [ 494.753115][T30283] _copy_from_user+0x1c/0xb0 [ 494.753164][T30283] tipc_setsockopt+0x388/0x620 [ 494.753188][T30283] ? __pfx_tipc_setsockopt+0x10/0x10 [ 494.753210][T30283] __sys_setsockopt+0x181/0x200 [ 494.753251][T30283] __x64_sys_setsockopt+0x64/0x80 [ 494.753357][T30283] x64_sys_call+0x20ec/0x2ff0 [ 494.753382][T30283] do_syscall_64+0xd2/0x200 [ 494.753416][T30283] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 494.753444][T30283] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 494.753484][T30283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.753510][T30283] RIP: 0033:0x7f352058eba9 [ 494.753527][T30283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.753548][T30283] RSP: 002b:00007f351efef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 494.753595][T30283] RAX: ffffffffffffffda RBX: 00007f35207d5fa0 RCX: 00007f352058eba9 [ 494.753610][T30283] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 494.753624][T30283] RBP: 00007f351efef090 R08: 0000000000000010 R09: 0000000000000000 [ 494.753638][T30283] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 494.753651][T30283] R13: 00007f35207d6038 R14: 00007f35207d5fa0 R15: 00007fff62309b28 [ 494.753672][T30283] [ 495.067693][T30294] loop1: detected capacity change from 0 to 512 [ 495.077113][T30296] syzkaller0: entered promiscuous mode [ 495.083806][T30296] syzkaller0: entered allmulticast mode [ 495.092035][T30294] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 495.103589][T30294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 495.113213][T30294] System zones: 1-12 [ 495.126447][T30294] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8615: corrupted in-inode xattr: e_value size too large [ 495.140904][T30294] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8615: couldn't read orphan inode 15 (err -117) [ 495.171658][T30307] 9p: Unknown access argument 00000000000000000000f: -22 [ 495.243356][T30308] lo speed is unknown, defaulting to 1000 [ 495.753608][T30350] loop1: detected capacity change from 0 to 512 [ 495.806679][T30359] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 495.822892][T30359] loop0: detected capacity change from 0 to 1024 [ 495.830968][T30359] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 495.883179][T30359] EXT4-fs (loop0): shut down requested (2) [ 495.889790][T30359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 495.898843][T30359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 495.908268][T30359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 495.918899][T30359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 495.930431][T30359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 495.939674][T30359] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 496.038265][T30381] syzkaller0: entered promiscuous mode [ 496.043941][T30381] syzkaller0: entered allmulticast mode [ 496.067855][T30387] loop0: detected capacity change from 0 to 512 [ 496.075352][T30387] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 496.090679][T30387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 496.098631][T30387] System zones: 1-12 [ 496.105833][T30387] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.8631: corrupted in-inode xattr: e_value size too large [ 496.121508][T30387] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.8631: couldn't read orphan inode 15 (err -117) [ 496.180200][T30402] 9pnet_fd: Insufficient options for proto=fd [ 496.205392][T30409] loop1: detected capacity change from 0 to 164 [ 496.213691][T30409] Unable to read rock-ridge attributes [ 496.293599][T30414] bond0 (unregistering): Released all slaves [ 496.348749][T30414] loop6: detected capacity change from 0 to 1024 [ 496.356445][T30414] EXT4-fs: Ignoring removed orlov option [ 496.372409][T30414] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.386761][T30414] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.8640: lblock 0 mapped to illegal pblock 0 (length 1) [ 496.401360][T30414] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 496.414925][T30414] EXT4-fs (loop6): This should not happen!! Data will be lost [ 496.414925][T30414] [ 496.426221][T30414] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.8640: lblock 0 mapped to illegal pblock 0 (length 1) [ 496.441035][T30414] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 496.453479][T30414] EXT4-fs (loop6): This should not happen!! Data will be lost [ 496.453479][T30414] [ 496.466270][T30414] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.8640: lblock 0 mapped to illegal pblock 0 (length 1) [ 496.484601][T30414] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 496.496962][T30414] EXT4-fs (loop6): This should not happen!! Data will be lost [ 496.496962][T30414] [ 496.507071][T30414] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.8640: lblock 0 mapped to illegal pblock 0 (length 1) [ 496.520990][T30414] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 496.533354][T30414] EXT4-fs (loop6): This should not happen!! Data will be lost [ 496.533354][T30414] [ 496.591214][T25872] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm kworker/u8:26: lblock 0 mapped to illegal pblock 0 (length 1) [ 496.607652][T25872] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 496.621287][T25872] EXT4-fs (loop6): This should not happen!! Data will be lost [ 496.621287][T25872] [ 496.641209][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 496.641227][ T29] audit: type=1326 audit(1758079357.116:38666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30468 comm="syz.6.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 496.671514][ T29] audit: type=1326 audit(1758079357.116:38667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30468 comm="syz.6.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 496.695243][ T29] audit: type=1326 audit(1758079357.116:38668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30468 comm="syz.6.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 496.696204][T30462] loop3: detected capacity change from 0 to 512 [ 496.718854][ T29] audit: type=1326 audit(1758079357.116:38669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30468 comm="syz.6.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 496.718888][ T29] audit: type=1326 audit(1758079357.116:38670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30468 comm="syz.6.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 496.718945][ T29] audit: type=1326 audit(1758079357.116:38671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30468 comm="syz.6.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 496.718973][ T29] audit: type=1326 audit(1758079357.116:38672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30468 comm="syz.6.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 496.719004][ T29] audit: type=1326 audit(1758079357.116:38673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30468 comm="syz.6.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 496.719042][ T29] audit: type=1326 audit(1758079357.116:38674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30468 comm="syz.6.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 496.719072][ T29] audit: type=1326 audit(1758079357.116:38675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30468 comm="syz.6.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 496.779977][T30475] syzkaller0: entered promiscuous mode [ 496.803160][T30462] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 496.823174][T30475] syzkaller0: entered allmulticast mode [ 496.936199][T30462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 496.955629][T30484] loop6: detected capacity change from 0 to 512 [ 496.963939][T30484] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 496.981989][T30484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 496.990086][T30462] System zones: 1-12 [ 496.995347][T30484] System zones: 1-12 [ 496.997283][T30462] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.8643: corrupted in-inode xattr: e_value size too large [ 497.006153][T30484] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8649: corrupted in-inode xattr: e_value size too large [ 497.030998][T30484] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8649: couldn't read orphan inode 15 (err -117) [ 497.030998][T30462] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8643: couldn't read orphan inode 15 (err -117) [ 497.216277][T30518] syzkaller0: entered promiscuous mode [ 497.221956][T30518] syzkaller0: entered allmulticast mode [ 497.305422][T30524] 9p: Unknown access argument 00000000000000000000f: -22 [ 497.344610][T30515] syzkaller0: entered promiscuous mode [ 497.350597][T30515] syzkaller0: entered allmulticast mode [ 497.400228][T30537] loop3: detected capacity change from 0 to 164 [ 497.418227][T30537] Unable to read rock-ridge attributes [ 497.471794][T30542] loop1: detected capacity change from 0 to 512 [ 497.490801][T30542] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 497.560490][T30542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 497.583905][T30542] System zones: 1-12 [ 497.594641][T30542] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8664: corrupted in-inode xattr: e_value size too large [ 497.628320][T30542] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8664: couldn't read orphan inode 15 (err -117) [ 497.643309][T30555] loop0: detected capacity change from 0 to 1024 [ 497.650792][T30555] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 497.661747][T30555] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 497.693491][T30555] JBD2: no valid journal superblock found [ 497.699325][T30555] EXT4-fs (loop0): Could not load journal inode [ 497.845050][T30569] loop1: detected capacity change from 0 to 512 [ 497.852808][T30569] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 497.875757][T30569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 497.885170][T30569] System zones: 1-12 [ 497.890872][T30569] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8670: corrupted in-inode xattr: e_value size too large [ 497.906584][T30569] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8670: couldn't read orphan inode 15 (err -117) [ 498.008994][T30583] syzkaller0: entered promiscuous mode [ 498.015407][T30583] syzkaller0: entered allmulticast mode [ 498.152406][T30596] syzkaller0: entered promiscuous mode [ 498.157913][T30596] syzkaller0: entered allmulticast mode [ 498.291725][T30606] loop1: detected capacity change from 0 to 512 [ 498.317532][T30606] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 498.330367][T30606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 498.338340][T30606] System zones: 1-12 [ 498.343310][T30606] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8680: corrupted in-inode xattr: e_value size too large [ 498.366184][T30606] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8680: couldn't read orphan inode 15 (err -117) [ 498.592207][T30624] loop5: detected capacity change from 0 to 1024 [ 498.599718][T30624] EXT4-fs: Ignoring removed bh option [ 498.605489][T30624] EXT4-fs: inline encryption not supported [ 498.612335][T30624] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 498.624355][T30624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 498.634904][T30624] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.8684: lblock 2 mapped to illegal pblock 2 (length 1) [ 498.669864][T30629] loop3: detected capacity change from 0 to 2048 [ 498.677179][T30629] EXT4-fs: inline encryption not supported [ 498.684789][T30624] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.8684: lblock 0 mapped to illegal pblock 48 (length 1) [ 498.716547][T30624] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8684: Failed to acquire dquot type 0 [ 498.728852][T30624] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 498.760982][T30624] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.8684: mark_inode_dirty error [ 498.837575][T30624] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 498.883554][T30624] EXT4-fs (loop5): 1 orphan inode deleted [ 498.912267][ T1389] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 498.929102][ T1389] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 498.974724][T29759] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 498.991623][T29759] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 499.010553][T29759] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 499.104494][T30655] FAULT_INJECTION: forcing a failure. [ 499.104494][T30655] name failslab, interval 1, probability 0, space 0, times 0 [ 499.117273][T30655] CPU: 1 UID: 0 PID: 30655 Comm: syz.6.8693 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 499.117363][T30655] Tainted: [W]=WARN [ 499.117370][T30655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.117390][T30655] Call Trace: [ 499.117397][T30655] [ 499.117406][T30655] __dump_stack+0x1d/0x30 [ 499.117433][T30655] dump_stack_lvl+0xe8/0x140 [ 499.117456][T30655] dump_stack+0x15/0x1b [ 499.117477][T30655] should_fail_ex+0x265/0x280 [ 499.117579][T30655] ? kobject_uevent_env+0x1c0/0x570 [ 499.117610][T30655] should_failslab+0x8c/0xb0 [ 499.117637][T30655] __kmalloc_cache_noprof+0x4c/0x320 [ 499.117670][T30655] kobject_uevent_env+0x1c0/0x570 [ 499.117751][T30655] ? device_pm_check_callbacks+0x683/0x6a0 [ 499.117787][T30655] kobject_uevent+0x1d/0x30 [ 499.117816][T30655] device_del+0x710/0x790 [ 499.117891][T30655] device_unregister+0x15/0x40 [ 499.117922][T30655] bdi_unregister+0x307/0x3a0 [ 499.117956][T30655] __del_gendisk+0x2c3/0x570 [ 499.117991][T30655] del_gendisk+0xac/0xf0 [ 499.118101][T30655] loop_remove+0x26/0x80 [ 499.118120][T30655] loop_control_ioctl+0x3b3/0x3f0 [ 499.118144][T30655] ? __pfx_loop_control_ioctl+0x10/0x10 [ 499.118162][T30655] __se_sys_ioctl+0xce/0x140 [ 499.118183][T30655] __x64_sys_ioctl+0x43/0x50 [ 499.118205][T30655] x64_sys_call+0x1816/0x2ff0 [ 499.118231][T30655] do_syscall_64+0xd2/0x200 [ 499.118293][T30655] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 499.118316][T30655] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 499.118345][T30655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.118365][T30655] RIP: 0033:0x7f37da40eba9 [ 499.118397][T30655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.118432][T30655] RSP: 002b:00007f37d8e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.118457][T30655] RAX: ffffffffffffffda RBX: 00007f37da655fa0 RCX: 00007f37da40eba9 [ 499.118473][T30655] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 499.118488][T30655] RBP: 00007f37d8e77090 R08: 0000000000000000 R09: 0000000000000000 [ 499.118503][T30655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.118525][T30655] R13: 00007f37da656038 R14: 00007f37da655fa0 R15: 00007ffd6452ce78 [ 499.118591][T30655] [ 499.183247][T30657] loop1: detected capacity change from 0 to 164 [ 499.374521][T30657] Unable to read rock-ridge attributes [ 499.491412][T30675] __nla_validate_parse: 12 callbacks suppressed [ 499.491493][T30675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8701'. [ 499.537798][T30683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8702'. [ 499.547282][T30683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8702'. [ 499.558318][T30683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8702'. [ 499.572634][T30686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8704'. [ 499.610277][T30683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8702'. [ 499.633440][T30690] lo speed is unknown, defaulting to 1000 [ 499.809826][T30715] loop3: detected capacity change from 0 to 512 [ 499.817823][T30715] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 499.828600][T30715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 499.836808][T30715] System zones: 1-12 [ 499.843439][T30715] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.8706: corrupted in-inode xattr: e_value size too large [ 499.858367][T30715] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8706: couldn't read orphan inode 15 (err -117) [ 499.910869][T30719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8707'. [ 500.176242][T30752] FAULT_INJECTION: forcing a failure. [ 500.176242][T30752] name failslab, interval 1, probability 0, space 0, times 0 [ 500.189034][T30752] CPU: 1 UID: 0 PID: 30752 Comm: syz.0.8713 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 500.189107][T30752] Tainted: [W]=WARN [ 500.189115][T30752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 500.189172][T30752] Call Trace: [ 500.189179][T30752] [ 500.189188][T30752] __dump_stack+0x1d/0x30 [ 500.189222][T30752] dump_stack_lvl+0xe8/0x140 [ 500.189267][T30752] dump_stack+0x15/0x1b [ 500.189316][T30752] should_fail_ex+0x265/0x280 [ 500.189342][T30752] should_failslab+0x8c/0xb0 [ 500.189371][T30752] kmem_cache_alloc_noprof+0x50/0x310 [ 500.189398][T30752] ? audit_log_start+0x365/0x6c0 [ 500.189434][T30752] audit_log_start+0x365/0x6c0 [ 500.189488][T30752] audit_seccomp+0x48/0x100 [ 500.189518][T30752] ? __seccomp_filter+0x68c/0x10d0 [ 500.189543][T30752] __seccomp_filter+0x69d/0x10d0 [ 500.189640][T30752] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 500.189734][T30752] ? vfs_write+0x7e8/0x960 [ 500.189759][T30752] ? __rcu_read_unlock+0x4f/0x70 [ 500.189784][T30752] ? __fget_files+0x184/0x1c0 [ 500.189852][T30752] __secure_computing+0x82/0x150 [ 500.189876][T30752] syscall_trace_enter+0xcf/0x1e0 [ 500.189904][T30752] do_syscall_64+0xac/0x200 [ 500.189940][T30752] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 500.190025][T30752] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 500.190056][T30752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.190081][T30752] RIP: 0033:0x7f2ce932eba9 [ 500.190203][T30752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.190224][T30752] RSP: 002b:00007f2ce7d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 500.190326][T30752] RAX: ffffffffffffffda RBX: 00007f2ce9575fa0 RCX: 00007f2ce932eba9 [ 500.190340][T30752] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 500.190355][T30752] RBP: 00007f2ce7d97090 R08: 0000000000000000 R09: 0000000000000000 [ 500.190369][T30752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.190384][T30752] R13: 00007f2ce9576038 R14: 00007f2ce9575fa0 R15: 00007ffdcd4fb468 [ 500.190404][T30752] [ 500.500765][T30761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8717'. [ 500.511567][T30761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8717'. [ 500.540866][T30759] FAULT_INJECTION: forcing a failure. [ 500.540866][T30759] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 500.554500][T30759] CPU: 1 UID: 0 PID: 30759 Comm: syz.5.8715 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 500.554538][T30759] Tainted: [W]=WARN [ 500.554545][T30759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 500.554558][T30759] Call Trace: [ 500.554565][T30759] [ 500.554572][T30759] __dump_stack+0x1d/0x30 [ 500.554596][T30759] dump_stack_lvl+0xe8/0x140 [ 500.554668][T30759] dump_stack+0x15/0x1b [ 500.554687][T30759] should_fail_ex+0x265/0x280 [ 500.554713][T30759] should_fail_alloc_page+0xf2/0x100 [ 500.554742][T30759] __alloc_frozen_pages_noprof+0xff/0x360 [ 500.554782][T30759] alloc_pages_mpol+0xb3/0x250 [ 500.554879][T30759] alloc_pages_noprof+0x90/0x130 [ 500.554914][T30759] pte_alloc_one+0x2d/0x120 [ 500.554939][T30759] __pte_alloc+0x32/0x2b0 [ 500.555001][T30759] handle_mm_fault+0x1c55/0x2c20 [ 500.555035][T30759] do_user_addr_fault+0x636/0x1090 [ 500.555138][T30759] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 500.555173][T30759] exc_page_fault+0x62/0xa0 [ 500.555204][T30759] asm_exc_page_fault+0x26/0x30 [ 500.555224][T30759] RIP: 0033:0x7f231c720c46 [ 500.555241][T30759] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 500.555307][T30759] RSP: 002b:00007f231b2be4a0 EFLAGS: 00010246 [ 500.555325][T30759] RAX: 0000000000000001 RBX: 00007f231b2be540 RCX: 0000000000000101 [ 500.555339][T30759] RDX: 0000000000000030 RSI: 0000000000000001 RDI: 00007f231b2be5e0 [ 500.555353][T30759] RBP: 0000000000000102 R08: 00007f2312e9f000 R09: 0000000000000000 [ 500.555366][T30759] R10: 0000000000000000 R11: 00007f231b2be550 R12: 0000000000000001 [ 500.555380][T30759] R13: 00007f231c8fda00 R14: 0000000000000000 R15: 00007f231b2be5e0 [ 500.555399][T30759] [ 500.555463][T30759] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 500.745152][T30761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8717'. [ 500.754272][T30759] loop5: detected capacity change from 0 to 512 [ 500.754597][T30759] EXT4-fs: Ignoring removed nobh option [ 500.781760][T30759] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.8715: corrupted inode contents [ 500.802654][T30759] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.8715: mark_inode_dirty error [ 500.822728][T30759] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.8715: corrupted inode contents [ 500.835941][T30759] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.8715: mark_inode_dirty error [ 500.852148][T30759] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8715: Failed to acquire dquot type 0 [ 500.866572][T30759] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8715: corrupted inode contents [ 500.882873][T30759] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.8715: mark_inode_dirty error [ 500.906116][T30759] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8715: corrupted inode contents [ 500.935792][T30759] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8715: mark_inode_dirty error [ 501.002606][T30774] syzkaller0: entered promiscuous mode [ 501.008205][T30774] syzkaller0: entered allmulticast mode [ 501.015412][T30759] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8715: corrupted inode contents [ 501.062839][T30759] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 501.087202][T30759] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8715: corrupted inode contents [ 501.094210][T30783] loop3: detected capacity change from 0 to 512 [ 501.100566][T30759] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.8715: mark_inode_dirty error [ 501.118513][T30783] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 501.128670][T30759] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 501.141321][T30759] EXT4-fs (loop5): 1 truncate cleaned up [ 501.147439][T30759] EXT4-fs mount: 28 callbacks suppressed [ 501.147456][T30759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.173813][T30759] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.202717][T30792] loop6: detected capacity change from 0 to 512 [ 501.211297][T30792] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 501.240103][T29759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.250546][T30792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 501.253779][T30790] syzkaller0: entered promiscuous mode [ 501.258484][T30792] System zones: [ 501.263990][T30790] syzkaller0: entered allmulticast mode [ 501.275456][T30792] 1-12 [ 501.278503][T30792] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8726: corrupted in-inode xattr: e_value size too large [ 501.297090][T30792] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8726: couldn't read orphan inode 15 (err -117) [ 501.311004][T30792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.353030][T26405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.381937][T30813] loop6: detected capacity change from 0 to 1024 [ 501.501340][T30813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.602463][T30836] lo speed is unknown, defaulting to 1000 [ 501.719301][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 501.719321][ T29] audit: type=1326 audit(1758079362.036:39100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30830 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce932eba9 code=0x7ffc0000 [ 501.749139][ T29] audit: type=1326 audit(1758079362.036:39101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30830 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce932eba9 code=0x7ffc0000 [ 501.772775][ T29] audit: type=1326 audit(1758079362.036:39102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30830 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ce932eba9 code=0x7ffc0000 [ 501.796353][ T29] audit: type=1326 audit(1758079362.036:39103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30830 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce932eba9 code=0x7ffc0000 [ 501.819982][ T29] audit: type=1326 audit(1758079362.036:39104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30830 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce932eba9 code=0x7ffc0000 [ 501.843704][ T29] audit: type=1326 audit(1758079362.036:39105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30830 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ce932eba9 code=0x7ffc0000 [ 501.867326][ T29] audit: type=1326 audit(1758079362.036:39106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30830 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce932eba9 code=0x7ffc0000 [ 501.890963][ T29] audit: type=1326 audit(1758079362.036:39107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30830 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce932eba9 code=0x7ffc0000 [ 501.914548][ T29] audit: type=1326 audit(1758079362.036:39108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30830 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ce932eba9 code=0x7ffc0000 [ 501.938351][ T29] audit: type=1326 audit(1758079362.036:39109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30830 comm="syz.0.8733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce932eba9 code=0x7ffc0000 [ 501.977537][T26405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.052446][T30866] syzkaller0: entered promiscuous mode [ 502.058002][T30866] syzkaller0: entered allmulticast mode [ 502.084618][T30869] lo speed is unknown, defaulting to 1000 [ 502.433091][T30928] loop1: detected capacity change from 0 to 512 [ 502.457712][T30928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.494189][T19541] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.624277][T30958] loop1: detected capacity change from 0 to 512 [ 502.631405][T30958] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 502.693262][T30968] netlink: 'syz.1.8759': attribute type 10 has an invalid length. [ 502.795223][T30978] 9p: Unknown access argument 00000000000000000000f: -22 [ 502.847159][T30980] loop1: detected capacity change from 0 to 512 [ 502.862386][T30980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.891390][T30987] loop6: detected capacity change from 0 to 164 [ 502.898587][T30987] Unable to read rock-ridge attributes [ 502.907040][T19541] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.974857][T30998] usb usb1: usbfs: process 30998 (syz.1.8767) did not claim interface 0 before use [ 502.986101][T30998] netlink: 'syz.1.8767': attribute type 10 has an invalid length. [ 503.076487][T31005] loop1: detected capacity change from 0 to 512 [ 503.084029][T31005] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 503.140664][T31016] loop1: detected capacity change from 0 to 512 [ 503.147711][T31016] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 503.157810][T31016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 503.165918][T31016] System zones: 1-12 [ 503.171269][T31016] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8771: corrupted in-inode xattr: e_value size too large [ 503.186716][T31016] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8771: couldn't read orphan inode 15 (err -117) [ 503.199108][T31016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.241930][T19541] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.255031][T31021] 9p: Unknown access argument 00000000000000000000f: -22 [ 503.282562][T31026] loop1: detected capacity change from 0 to 512 [ 503.303806][T31026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.382508][T19541] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.385599][T31041] syzkaller1: entered promiscuous mode [ 503.398041][T31041] syzkaller1: entered allmulticast mode [ 503.527911][T31063] loop1: detected capacity change from 0 to 512 [ 503.535264][T31063] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 503.553644][T31063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 503.555826][T31070] 9p: Unknown access argument 00000000000000000000f: -22 [ 503.571658][T31063] System zones: 1-12 [ 503.598783][T31063] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8783: corrupted in-inode xattr: e_value size too large [ 503.620565][T31063] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8783: couldn't read orphan inode 15 (err -117) [ 503.638164][T31063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.702667][T19541] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.874651][T31092] syzkaller1: entered promiscuous mode [ 503.881384][T31092] syzkaller1: entered allmulticast mode [ 504.904537][T31089] lo speed is unknown, defaulting to 1000 [ 504.992996][T31135] 9p: Unknown access argument 00000000000000000000f: -22 [ 505.037363][T31164] loop5: detected capacity change from 0 to 164 [ 505.067814][T25877] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.132295][T31089] chnl_net:caif_netlink_parms(): no params data found [ 505.150528][T31164] Unable to read rock-ridge attributes [ 505.158205][T25877] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.188739][T31255] loop3: detected capacity change from 0 to 512 [ 505.205901][T31255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.232312][T25877] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.255894][T31089] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.263045][T31089] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.271855][T31089] bridge_slave_0: entered allmulticast mode [ 505.278539][T31089] bridge_slave_0: entered promiscuous mode [ 505.291858][T31089] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.299043][T31089] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.306987][T31089] bridge_slave_1: entered allmulticast mode [ 505.314822][T31089] bridge_slave_1: entered promiscuous mode [ 505.327219][T31286] Unable to read rock-ridge attributes [ 505.328349][T25877] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.341027][T31286] syz.5.8802: attempt to access beyond end of device [ 505.341027][T31286] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 505.359417][T31286] syz.5.8802: attempt to access beyond end of device [ 505.359417][T31286] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 505.395232][T31089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.407302][T31089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.456706][T25877] bridge_slave_1: left allmulticast mode [ 505.462653][T25877] bridge_slave_1: left promiscuous mode [ 505.468798][T25877] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.478636][T25877] bridge_slave_0: left allmulticast mode [ 505.484654][T25877] bridge_slave_0: left promiscuous mode [ 505.490655][T25877] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.558127][T19345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.578215][T25877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.588780][T25877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.598833][T25877] bond0 (unregistering): Released all slaves [ 505.607733][T25877] bond1 (unregistering): Released all slaves [ 505.616367][T25877] bond2 (unregistering): Released all slaves [ 505.627907][T25877] bond3 (unregistering): Released all slaves [ 505.638587][T25877] bond4 (unregistering): Released all slaves [ 505.651199][T31089] team0: Port device team_slave_0 added [ 505.659793][T31089] team0: Port device team_slave_1 added [ 505.686797][T25877] tipc: Disabling bearer [ 505.691877][T25877] tipc: Left network mode [ 505.696655][T31089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.703643][T31089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.729612][T31089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.741044][T31089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.748064][T31089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.774097][T31089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.885264][T25877] hsr_slave_0: left promiscuous mode [ 505.893897][T25877] hsr_slave_1: left promiscuous mode [ 505.905244][T25877] veth1_vlan: left promiscuous mode [ 505.913045][T25877] veth0_vlan: left promiscuous mode [ 505.997896][T25877] team0 (unregistering): Port device team_slave_1 removed [ 506.010824][T31436] loop6: detected capacity change from 0 to 512 [ 506.018084][T25877] team0 (unregistering): Port device team_slave_0 removed [ 506.018346][T31436] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 506.046786][T31436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 506.055996][T31436] System zones: 1-12 [ 506.060269][T31436] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8811: corrupted in-inode xattr: e_value size too large [ 506.075197][T31436] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8811: couldn't read orphan inode 15 (err -117) [ 506.076880][T31089] hsr_slave_0: entered promiscuous mode [ 506.088139][T31436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.111057][T31089] hsr_slave_1: entered promiscuous mode [ 506.133837][T26405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.177041][T31489] __nla_validate_parse: 30 callbacks suppressed [ 506.177059][T31489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8812'. [ 506.196333][T31489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8812'. [ 506.206995][T31489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8812'. [ 506.219016][T31489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8812'. [ 506.573954][T25877] IPVS: stop unused estimator thread 0... [ 506.595770][T31528] loop6: detected capacity change from 0 to 512 [ 506.641469][T31089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 506.653280][T31089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 506.663068][T31528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.679092][T31089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 506.689556][T31089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 506.775329][T26405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.795143][T31089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.817436][T31089] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.828854][T25877] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.835995][T25877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.868213][T25877] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.875317][T25877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.952481][T31561] loop3: detected capacity change from 0 to 164 [ 506.970233][T31561] Unable to read rock-ridge attributes [ 507.042320][T31570] Unable to read rock-ridge attributes [ 507.044860][T31089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.056052][T31570] syz.3.8818: attempt to access beyond end of device [ 507.056052][T31570] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 507.083317][T31570] syz.3.8818: attempt to access beyond end of device [ 507.083317][T31570] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 507.154918][ T29] kauditd_printk_skb: 537 callbacks suppressed [ 507.154936][ T29] audit: type=1326 audit(1758079367.626:39647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31575 comm="syz.5.8821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 507.156484][T31576] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8821'. [ 507.168326][ T29] audit: type=1326 audit(1758079367.626:39648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31575 comm="syz.5.8821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 507.219651][ T29] audit: type=1326 audit(1758079367.626:39649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31575 comm="syz.5.8821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 507.243779][ T29] audit: type=1326 audit(1758079367.626:39650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31575 comm="syz.5.8821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 507.267429][ T29] audit: type=1326 audit(1758079367.626:39651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31575 comm="syz.5.8821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 507.291124][ T29] audit: type=1326 audit(1758079367.626:39652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31575 comm="syz.5.8821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 507.304193][T31089] veth0_vlan: entered promiscuous mode [ 507.314739][ T29] audit: type=1326 audit(1758079367.626:39653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31575 comm="syz.5.8821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 507.325048][T31089] veth1_vlan: entered promiscuous mode [ 507.343844][ T29] audit: type=1326 audit(1758079367.626:39654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31575 comm="syz.5.8821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 507.366491][T31089] veth0_macvtap: entered promiscuous mode [ 507.372934][ T29] audit: type=1326 audit(1758079367.626:39655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31575 comm="syz.5.8821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 507.382872][T31089] veth1_macvtap: entered promiscuous mode [ 507.402181][ T29] audit: type=1326 audit(1758079367.626:39656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31575 comm="syz.5.8821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 507.421498][T31089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.432594][T31576] loop5: detected capacity change from 0 to 1024 [ 507.447033][T31576] EXT4-fs: Ignoring removed i_version option [ 507.453136][T31576] ext4: Unknown parameter 'uid>00000000000000000000' [ 507.465274][T31089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.486512][T25880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.495972][T25880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.505527][T25880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.516323][T25880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.564006][T31590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8823'. [ 507.575290][T31590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8823'. [ 507.584718][T31590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8823'. [ 507.594005][T31590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8823'. [ 507.606929][T31594] ./file0: Can't open blockdev [ 507.631736][T31576] 9pnet_fd: Insufficient options for proto=fd [ 507.688660][T31599] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8826'. [ 507.706221][T31597] loop5: detected capacity change from 0 to 512 [ 507.720963][T31600] loop1: detected capacity change from 0 to 512 [ 507.728283][T31600] ext4: Unknown parameter 'appraise' [ 507.823306][T31597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.896134][T31601] lo speed is unknown, defaulting to 1000 [ 507.978470][T25880] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.000904][T31639] FAULT_INJECTION: forcing a failure. [ 508.000904][T31639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.015267][T31639] CPU: 0 UID: 0 PID: 31639 Comm: syz.6.8833 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 508.015381][T31639] Tainted: [W]=WARN [ 508.015388][T31639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.015402][T31639] Call Trace: [ 508.015410][T31639] [ 508.015419][T31639] __dump_stack+0x1d/0x30 [ 508.015470][T31639] dump_stack_lvl+0xe8/0x140 [ 508.015495][T31639] dump_stack+0x15/0x1b [ 508.015516][T31639] should_fail_ex+0x265/0x280 [ 508.015566][T31639] should_fail+0xb/0x20 [ 508.015586][T31639] should_fail_usercopy+0x1a/0x20 [ 508.015613][T31639] _copy_to_user+0x20/0xa0 [ 508.015715][T31639] simple_read_from_buffer+0xb5/0x130 [ 508.015744][T31639] proc_fail_nth_read+0x10e/0x150 [ 508.015778][T31639] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.015854][T31639] vfs_read+0x1a8/0x770 [ 508.015878][T31639] ? __rcu_read_unlock+0x4f/0x70 [ 508.015904][T31639] ? __fget_files+0x184/0x1c0 [ 508.015936][T31639] ksys_read+0xda/0x1a0 [ 508.016010][T31639] __x64_sys_read+0x40/0x50 [ 508.016031][T31639] x64_sys_call+0x27bc/0x2ff0 [ 508.016052][T31639] do_syscall_64+0xd2/0x200 [ 508.016115][T31639] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 508.016138][T31639] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 508.016164][T31639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.016214][T31639] RIP: 0033:0x7f37da40d5bc [ 508.016233][T31639] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 508.016254][T31639] RSP: 002b:00007f37d8e77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 508.016279][T31639] RAX: ffffffffffffffda RBX: 00007f37da655fa0 RCX: 00007f37da40d5bc [ 508.016295][T31639] RDX: 000000000000000f RSI: 00007f37d8e770a0 RDI: 0000000000000004 [ 508.016311][T31639] RBP: 00007f37d8e77090 R08: 0000000000000000 R09: 0000000000000000 [ 508.016349][T31639] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.016372][T31639] R13: 00007f37da656038 R14: 00007f37da655fa0 R15: 00007ffd6452ce78 [ 508.016389][T31639] [ 508.396355][T25880] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.451681][T25880] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.464210][T31601] chnl_net:caif_netlink_parms(): no params data found [ 508.501437][T25880] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.556077][T31751] loop6: detected capacity change from 0 to 512 [ 508.595656][T31751] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 508.621739][T31601] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.628879][T31601] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.641313][T31751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 508.649469][T31751] System zones: 1-12 [ 508.654705][T31751] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8836: corrupted in-inode xattr: e_value size too large [ 508.671078][T31601] bridge_slave_0: entered allmulticast mode [ 508.677997][T31601] bridge_slave_0: entered promiscuous mode [ 508.687106][T31751] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8836: couldn't read orphan inode 15 (err -117) [ 508.782631][T31751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.812021][T26405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.882108][T29759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.915210][T31822] loop6: detected capacity change from 0 to 164 [ 508.923402][T31822] Unable to read rock-ridge attributes [ 508.961294][T25880] bond1 (unregistering): Released all slaves [ 508.969968][T25880] bond2 (unregistering): Released all slaves [ 508.980113][T25880] bond3 (unregistering): Released all slaves [ 508.984983][T31833] Unable to read rock-ridge attributes [ 508.991985][T31833] syz.6.8840: attempt to access beyond end of device [ 508.991985][T31833] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 509.006050][T31833] syz.6.8840: attempt to access beyond end of device [ 509.006050][T31833] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 509.019689][T31601] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.026791][T31601] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.035067][T31601] bridge_slave_1: entered allmulticast mode [ 509.042254][T31601] bridge_slave_1: entered promiscuous mode [ 509.070015][T31601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.082294][T31601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.110951][T25880] hsr_slave_0: left promiscuous mode [ 509.116706][T25880] hsr_slave_1: left promiscuous mode [ 509.126652][T25880] veth1_vlan: left promiscuous mode [ 509.134628][T25880] veth0_vlan: left promiscuous mode [ 509.274968][T31870] syzkaller0: entered promiscuous mode [ 509.280608][T31870] syzkaller0: entered allmulticast mode [ 509.311380][T31867] syzkaller0: entered promiscuous mode [ 509.316866][T31867] syzkaller0: entered allmulticast mode [ 509.325180][T31601] team0: Port device team_slave_0 added [ 509.332546][T31601] team0: Port device team_slave_1 added [ 509.370581][T31601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.377556][T31601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.403657][T31601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.415166][T31601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.422181][T31601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.448277][T31601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.492599][T31601] hsr_slave_0: entered promiscuous mode [ 509.499021][T31601] hsr_slave_1: entered promiscuous mode [ 509.505140][T31601] debugfs: 'hsr0' already exists in 'hsr' [ 509.510941][T31601] Cannot create hsr debugfs directory [ 509.591180][T25880] IPVS: stop unused estimator thread 0... [ 509.626159][T32036] loop1: detected capacity change from 0 to 512 [ 509.637916][T32036] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 509.648511][T32036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 509.656710][T32036] System zones: 1-12 [ 509.661013][T32036] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8851: corrupted in-inode xattr: e_value size too large [ 509.675776][T32036] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8851: couldn't read orphan inode 15 (err -117) [ 509.689045][T32036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.778072][T31089] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.821136][T32065] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32065 comm=syz.1.8857 [ 509.870015][T31601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 509.882319][T31601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 509.891525][T31601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 509.902583][T31601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 509.941227][T32103] loop3: detected capacity change from 0 to 164 [ 509.961227][T31601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.972352][T32103] Unable to read rock-ridge attributes [ 509.988838][T31601] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.000945][T25883] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.008157][T25883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.022263][T25883] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.029478][T25883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.069538][T32109] Unable to read rock-ridge attributes [ 510.082296][T32109] syz.3.8866: attempt to access beyond end of device [ 510.082296][T32109] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 510.106372][T32109] syz.3.8866: attempt to access beyond end of device [ 510.106372][T32109] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 510.153846][T31601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.256721][T32121] Driver unsupported XDP return value 0 on prog (id 4788) dev N/A, expect packet loss! [ 510.262137][T31601] veth0_vlan: entered promiscuous mode [ 510.276559][T31601] veth1_vlan: entered promiscuous mode [ 510.296409][T31601] veth0_macvtap: entered promiscuous mode [ 510.304691][T31601] veth1_macvtap: entered promiscuous mode [ 510.317904][T31601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.330921][T31601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.342173][T25877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.354382][T25877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.366895][T32126] FAULT_INJECTION: forcing a failure. [ 510.366895][T32126] name failslab, interval 1, probability 0, space 0, times 0 [ 510.368880][T25877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.379763][T32126] CPU: 0 UID: 0 PID: 32126 Comm: syz.1.8870 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 510.379798][T32126] Tainted: [W]=WARN [ 510.379805][T32126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 510.379817][T32126] Call Trace: [ 510.379824][T32126] [ 510.379831][T32126] __dump_stack+0x1d/0x30 [ 510.379854][T32126] dump_stack_lvl+0xe8/0x140 [ 510.379933][T32126] dump_stack+0x15/0x1b [ 510.379950][T32126] should_fail_ex+0x265/0x280 [ 510.379975][T32126] should_failslab+0x8c/0xb0 [ 510.380002][T32126] kmem_cache_alloc_noprof+0x50/0x310 [ 510.380029][T32126] ? getname_flags+0x80/0x3b0 [ 510.380082][T32126] getname_flags+0x80/0x3b0 [ 510.380148][T32126] do_sys_openat2+0x60/0x110 [ 510.380181][T32126] __x64_sys_open+0xe6/0x110 [ 510.380213][T32126] x64_sys_call+0x1457/0x2ff0 [ 510.380255][T32126] do_syscall_64+0xd2/0x200 [ 510.380286][T32126] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 510.380311][T32126] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 510.380432][T32126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.380468][T32126] RIP: 0033:0x7f0e23faeba9 [ 510.380485][T32126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.380504][T32126] RSP: 002b:00007f0e22a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 510.380526][T32126] RAX: ffffffffffffffda RBX: 00007f0e241f5fa0 RCX: 00007f0e23faeba9 [ 510.380539][T32126] RDX: 0000000000000050 RSI: 0000000000008000 RDI: 00002000000000c0 [ 510.380553][T32126] RBP: 00007f0e22a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 510.380566][T32126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.380640][T32126] R13: 00007f0e241f6038 R14: 00007f0e241f5fa0 R15: 00007ffd1fa373a8 [ 510.380659][T32126] [ 510.573605][T25880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.714636][T32150] loop5: detected capacity change from 0 to 512 [ 510.735185][T32152] lo speed is unknown, defaulting to 1000 [ 510.739325][T32150] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 510.767259][T32150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 510.792623][T32150] System zones: 1-12 [ 510.803560][T32150] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.8879: corrupted in-inode xattr: e_value size too large [ 510.820084][T32150] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.8879: couldn't read orphan inode 15 (err -117) [ 510.836758][T32182] FAULT_INJECTION: forcing a failure. [ 510.836758][T32182] name failslab, interval 1, probability 0, space 0, times 0 [ 510.849528][T32182] CPU: 1 UID: 0 PID: 32182 Comm: syz.0.8882 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 510.849565][T32182] Tainted: [W]=WARN [ 510.849573][T32182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 510.849585][T32182] Call Trace: [ 510.849591][T32182] [ 510.849599][T32182] __dump_stack+0x1d/0x30 [ 510.849659][T32182] dump_stack_lvl+0xe8/0x140 [ 510.849677][T32182] dump_stack+0x15/0x1b [ 510.849692][T32182] should_fail_ex+0x265/0x280 [ 510.849735][T32182] should_failslab+0x8c/0xb0 [ 510.849824][T32182] kmem_cache_alloc_noprof+0x50/0x310 [ 510.849850][T32182] ? prepare_creds+0x37/0x4c0 [ 510.849872][T32182] prepare_creds+0x37/0x4c0 [ 510.849973][T32182] copy_creds+0x8f/0x3f0 [ 510.850081][T32182] copy_process+0x658/0x2000 [ 510.850107][T32182] ? copy_clone_args_from_user+0x3ce/0x490 [ 510.850199][T32182] kernel_clone+0x16c/0x5c0 [ 510.850226][T32182] __se_sys_clone3+0x1c2/0x200 [ 510.850262][T32182] __x64_sys_clone3+0x31/0x40 [ 510.850313][T32182] x64_sys_call+0x1fc9/0x2ff0 [ 510.850335][T32182] do_syscall_64+0xd2/0x200 [ 510.850363][T32182] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 510.850386][T32182] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 510.850469][T32182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.850488][T32182] RIP: 0033:0x7f490380eba9 [ 510.850504][T32182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.850521][T32182] RSP: 002b:00007f490226ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 510.850595][T32182] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f490380eba9 [ 510.850607][T32182] RDX: 00007f490226ef20 RSI: 0000000000000058 RDI: 00007f490226ef20 [ 510.850619][T32182] RBP: 00007f490226f090 R08: 0000000000000000 R09: 0000000000000058 [ 510.850683][T32182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.850694][T32182] R13: 00007f4903a56038 R14: 00007f4903a55fa0 R15: 00007fff8daa4cc8 [ 510.850712][T32182] [ 510.859414][T32184] loop3: detected capacity change from 0 to 1024 [ 510.885711][T32150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.905309][T32184] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 511.090622][T32184] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 511.101883][T32184] JBD2: no valid journal superblock found [ 511.107627][T32184] EXT4-fs (loop3): Could not load journal inode [ 511.123078][T32184] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 511.133574][T32184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65530 sclass=netlink_route_socket pid=32184 comm=syz.3.8881 [ 511.184271][T32195] FAULT_INJECTION: forcing a failure. [ 511.184271][T32195] name failslab, interval 1, probability 0, space 0, times 0 [ 511.197079][T32195] CPU: 0 UID: 0 PID: 32195 Comm: syz.0.8886 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 511.197193][T32195] Tainted: [W]=WARN [ 511.197200][T32195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.197212][T32195] Call Trace: [ 511.197245][T32195] [ 511.197252][T32195] __dump_stack+0x1d/0x30 [ 511.197274][T32195] dump_stack_lvl+0xe8/0x140 [ 511.197293][T32195] dump_stack+0x15/0x1b [ 511.197319][T32195] should_fail_ex+0x265/0x280 [ 511.197421][T32195] should_failslab+0x8c/0xb0 [ 511.197507][T32195] kmem_cache_alloc_node_noprof+0x57/0x320 [ 511.197547][T32195] ? __alloc_skb+0x101/0x320 [ 511.197573][T32195] __alloc_skb+0x101/0x320 [ 511.197593][T32195] ? audit_log_start+0x365/0x6c0 [ 511.197629][T32195] audit_log_start+0x380/0x6c0 [ 511.197668][T32195] audit_seccomp+0x48/0x100 [ 511.197745][T32195] ? __seccomp_filter+0x68c/0x10d0 [ 511.197765][T32195] __seccomp_filter+0x69d/0x10d0 [ 511.197786][T32195] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 511.197924][T32195] ? vfs_write+0x7e8/0x960 [ 511.197947][T32195] ? __rcu_read_unlock+0x4f/0x70 [ 511.197973][T32195] ? __fget_files+0x184/0x1c0 [ 511.198103][T32195] __secure_computing+0x82/0x150 [ 511.198124][T32195] syscall_trace_enter+0xcf/0x1e0 [ 511.198148][T32195] do_syscall_64+0xac/0x200 [ 511.198178][T32195] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 511.198225][T32195] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 511.198260][T32195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.198283][T32195] RIP: 0033:0x7f490380eba9 [ 511.198302][T32195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.198329][T32195] RSP: 002b:00007f490226f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 511.198383][T32195] RAX: ffffffffffffffda RBX: 00007f4903a55fa0 RCX: 00007f490380eba9 [ 511.198398][T32195] RDX: 00000000000000c8 RSI: 0000200000000240 RDI: 0000000000000003 [ 511.198414][T32195] RBP: 00007f490226f090 R08: 0000000000000000 R09: 0000000000000000 [ 511.198428][T32195] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000001 [ 511.198443][T32195] R13: 00007f4903a56038 R14: 00007f4903a55fa0 R15: 00007fff8daa4cc8 [ 511.198463][T32195] [ 511.422700][T32197] __nla_validate_parse: 4 callbacks suppressed [ 511.422718][T32197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8883'. [ 511.437986][T32197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8883'. [ 511.492508][T29759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.556151][T32214] loop1: detected capacity change from 0 to 164 [ 511.577527][T32214] Unable to read rock-ridge attributes [ 511.593096][T32222] loop5: detected capacity change from 0 to 1024 [ 511.603503][T32225] FAULT_INJECTION: forcing a failure. [ 511.603503][T32225] name failslab, interval 1, probability 0, space 0, times 0 [ 511.616226][T32225] CPU: 1 UID: 0 PID: 32225 Comm: syz.3.8894 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 511.616264][T32225] Tainted: [W]=WARN [ 511.616272][T32225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.616285][T32225] Call Trace: [ 511.616358][T32225] [ 511.616367][T32225] __dump_stack+0x1d/0x30 [ 511.616392][T32225] dump_stack_lvl+0xe8/0x140 [ 511.616416][T32225] dump_stack+0x15/0x1b [ 511.616436][T32225] should_fail_ex+0x265/0x280 [ 511.616493][T32225] should_failslab+0x8c/0xb0 [ 511.616523][T32225] kmem_cache_alloc_noprof+0x50/0x310 [ 511.616551][T32225] ? prepare_creds+0x37/0x4c0 [ 511.616574][T32225] prepare_creds+0x37/0x4c0 [ 511.616596][T32225] copy_creds+0x8f/0x3f0 [ 511.616701][T32225] copy_process+0x658/0x2000 [ 511.616729][T32225] ? copy_clone_args_from_user+0x3ce/0x490 [ 511.616837][T32225] kernel_clone+0x16c/0x5c0 [ 511.616928][T32225] __se_sys_clone3+0x1c2/0x200 [ 511.617027][T32225] __x64_sys_clone3+0x31/0x40 [ 511.617073][T32225] x64_sys_call+0x1fc9/0x2ff0 [ 511.617095][T32225] do_syscall_64+0xd2/0x200 [ 511.617129][T32225] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 511.617230][T32225] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 511.617257][T32225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.617328][T32225] RIP: 0033:0x7fddd5f2eba9 [ 511.617346][T32225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.617368][T32225] RSP: 002b:00007fddd498ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 511.617391][T32225] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fddd5f2eba9 [ 511.617407][T32225] RDX: 00007fddd498ef20 RSI: 0000000000000058 RDI: 00007fddd498ef20 [ 511.617498][T32225] RBP: 00007fddd498f090 R08: 0000000000000000 R09: 0000000000000058 [ 511.617513][T32225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.617528][T32225] R13: 00007fddd6176038 R14: 00007fddd6175fa0 R15: 00007ffe2d376f08 [ 511.617548][T32225] [ 511.632382][T32222] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 511.711177][T32230] Unable to read rock-ridge attributes [ 511.826039][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8897'. [ 511.844700][T32230] syz.1.8892: attempt to access beyond end of device [ 511.844700][T32230] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 511.846266][T32222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.874559][T32230] syz.1.8892: attempt to access beyond end of device [ 511.874559][T32230] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 511.883040][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8897'. [ 511.897435][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8897'. [ 511.906755][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8897'. [ 511.928668][T32222] EXT4-fs (loop5): shut down requested (2) [ 511.935033][T32222] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 511.944091][T32222] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 511.953186][T32222] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 511.962375][T32222] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 511.971343][T32222] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 511.980303][T32222] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 512.001313][T29759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.080544][T32254] 9p: Unknown access argument 00000000000000000000f: -22 [ 512.193869][ T29] kauditd_printk_skb: 510 callbacks suppressed [ 512.193888][ T29] audit: type=1400 audit(1758079372.666:40165): avc: denied { read write } for pid=32263 comm="syz.0.8908" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 512.224010][ T29] audit: type=1400 audit(1758079372.666:40166): avc: denied { open } for pid=32263 comm="syz.0.8908" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 512.316986][T32275] lo speed is unknown, defaulting to 1000 [ 512.622397][T32303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8910'. [ 512.658259][T32303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8910'. [ 512.686577][T32303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8910'. [ 512.697049][T32303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8910'. [ 512.888667][T32307] loop3: detected capacity change from 0 to 512 [ 512.898885][T32307] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 512.961324][T32307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 512.991389][T32307] System zones: 1-12 [ 513.000063][T32307] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.8912: corrupted in-inode xattr: e_value size too large [ 513.030391][T32307] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8912: couldn't read orphan inode 15 (err -117) [ 513.060327][T32307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.101773][ T29] audit: type=1400 audit(1758079373.576:40167): avc: denied { create } for pid=32312 comm="syz.5.8914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 513.140125][ T29] audit: type=1400 audit(1758079373.616:40168): avc: denied { write } for pid=32312 comm="syz.5.8914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 513.163776][T32313] loop5: detected capacity change from 0 to 512 [ 513.174767][T32313] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 513.232031][T19345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.252601][T32313] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.8914: Invalid block bitmap block 0 in block_group 0 [ 513.270683][T32313] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 513.298802][T32313] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.8914: attempt to clear invalid blocks 983261 len 1 [ 513.317696][T32313] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.8914: Invalid inode table block 0 in block_group 0 [ 513.319368][ T29] audit: type=1326 audit(1758079373.776:40169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32325 comm="syz.6.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 513.354036][ T29] audit: type=1326 audit(1758079373.776:40170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32325 comm="syz.6.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 513.377765][ T29] audit: type=1326 audit(1758079373.776:40171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32325 comm="syz.6.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 513.387840][T32313] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 513.401507][ T29] audit: type=1326 audit(1758079373.776:40172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32325 comm="syz.6.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 513.411629][T32313] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 513.434558][ T29] audit: type=1326 audit(1758079373.776:40173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32325 comm="syz.6.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 513.466719][ T29] audit: type=1326 audit(1758079373.776:40174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32325 comm="syz.6.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 513.498458][T32313] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.8914: Invalid inode table block 0 in block_group 0 [ 513.520513][T32313] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 513.530265][T32313] EXT4-fs error (device loop5): ext4_truncate:4666: inode #11: comm syz.5.8914: mark_inode_dirty error [ 513.542732][T32313] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 513.553795][T32313] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.8914: Invalid inode table block 0 in block_group 0 [ 513.567429][T32313] EXT4-fs (loop5): 1 truncate cleaned up [ 513.573458][T32313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.589649][T32336] wireguard0: entered promiscuous mode [ 513.595172][T32336] wireguard0: entered allmulticast mode [ 513.622303][T29759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.832433][T32378] loop6: detected capacity change from 0 to 512 [ 513.840569][T32378] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 513.915132][T32382] lo speed is unknown, defaulting to 1000 [ 514.071555][T32378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 514.084225][T32378] System zones: 1-12 [ 514.088424][T32378] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8933: corrupted in-inode xattr: e_value size too large [ 514.104024][T32378] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8933: couldn't read orphan inode 15 (err -117) [ 514.117240][T32378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.188141][T26405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.257294][T32421] loop6: detected capacity change from 0 to 164 [ 514.266656][T32421] Unable to read rock-ridge attributes [ 514.327753][T32430] Unable to read rock-ridge attributes [ 514.333804][T32430] syz.6.8938: attempt to access beyond end of device [ 514.333804][T32430] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 514.348051][T32430] syz.6.8938: attempt to access beyond end of device [ 514.348051][T32430] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 514.746481][T32451] syzkaller0: entered promiscuous mode [ 514.752115][T32451] syzkaller0: entered allmulticast mode [ 515.155014][T32461] syzkaller1: entered promiscuous mode [ 515.160588][T32461] syzkaller1: entered allmulticast mode [ 515.297159][T32480] loop3: detected capacity change from 0 to 512 [ 515.307487][T32480] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 515.340185][T32480] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 515.348382][T32480] System zones: 1-12 [ 515.372040][T32480] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.8950: corrupted in-inode xattr: e_value size too large [ 515.387990][T32480] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8950: couldn't read orphan inode 15 (err -117) [ 515.405156][T32480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.800960][T32496] loop1: detected capacity change from 0 to 512 [ 515.808429][T32496] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 515.808574][T19345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.829111][T32496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 515.837445][T32496] System zones: 1-12 [ 515.849316][T32496] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.8957: corrupted in-inode xattr: e_value size too large [ 515.863777][T32496] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8957: couldn't read orphan inode 15 (err -117) [ 515.878042][T32496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.894691][T32504] loop5: detected capacity change from 0 to 512 [ 515.902896][T32504] EXT4-fs: Ignoring removed nobh option [ 515.921653][T32504] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.8959: corrupted inode contents [ 515.933822][T32504] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.8959: mark_inode_dirty error [ 515.945516][T32504] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.8959: corrupted inode contents [ 515.959559][T32504] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.8959: mark_inode_dirty error [ 515.990212][T32504] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8959: Failed to acquire dquot type 0 [ 516.002640][T32504] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8959: corrupted inode contents [ 516.020961][T32504] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.8959: mark_inode_dirty error [ 516.033493][T32504] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8959: corrupted inode contents [ 516.049158][T32504] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8959: mark_inode_dirty error [ 516.061258][T32504] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8959: corrupted inode contents [ 516.082870][T32504] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 516.092750][T32504] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8959: corrupted inode contents [ 516.130886][T32504] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.8959: mark_inode_dirty error [ 516.142597][T31089] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.172196][T32504] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 516.182154][T32504] EXT4-fs (loop5): 1 truncate cleaned up [ 516.189575][T32504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.195973][T32519] syzkaller1: entered promiscuous mode [ 516.202200][T32504] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.218101][T32519] syzkaller1: entered allmulticast mode [ 516.251355][T29759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.560296][T32541] 9p: Unknown access argument 00000000000000000000f: -22 [ 516.627367][T32545] loop3: detected capacity change from 0 to 512 [ 516.634518][T32545] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 516.643923][T32545] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c118, mo2=0002] [ 516.651886][T32545] System zones: 1-12 [ 516.656217][T32545] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.8970: corrupted in-inode xattr: e_value size too large [ 516.670601][T32545] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8970: couldn't read orphan inode 15 (err -117) [ 516.683072][T32545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.963920][T32563] syzkaller0: entered promiscuous mode [ 516.969563][T32563] syzkaller0: entered allmulticast mode [ 517.294474][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 517.294490][ T29] audit: type=1326 audit(1758079377.766:40462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32591 comm="syz.5.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 517.324812][ T29] audit: type=1326 audit(1758079377.766:40463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32591 comm="syz.5.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 517.348477][ T29] audit: type=1326 audit(1758079377.766:40464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32591 comm="syz.5.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 517.372167][ T29] audit: type=1326 audit(1758079377.766:40465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32591 comm="syz.5.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 517.395807][ T29] audit: type=1326 audit(1758079377.766:40466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32591 comm="syz.5.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 517.419437][ T29] audit: type=1326 audit(1758079377.766:40467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32591 comm="syz.5.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 517.443158][ T29] audit: type=1326 audit(1758079377.766:40468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32591 comm="syz.5.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 517.466972][ T29] audit: type=1326 audit(1758079377.766:40469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32591 comm="syz.5.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f231c85eba9 code=0x7ffc0000 [ 517.495330][ T29] audit: type=1326 audit(1758079377.826:40470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32568 comm="syz.0.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490380eba9 code=0x7ffc0000 [ 517.519058][ T29] audit: type=1326 audit(1758079377.826:40471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32568 comm="syz.0.8978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490380eba9 code=0x7ffc0000 [ 517.579653][T19345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.653620][T32599] syzkaller0: entered promiscuous mode [ 517.659272][T32599] syzkaller0: entered allmulticast mode [ 517.719534][T32607] __nla_validate_parse: 20 callbacks suppressed [ 517.719552][T32607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8989'. [ 517.736161][T32607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8989'. [ 517.745305][T32607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8989'. [ 517.755402][T32607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8989'. [ 517.870139][T32614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8992'. [ 517.890197][T32614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8992'. [ 517.899706][T32614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8992'. [ 517.908950][T32614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8992'. [ 518.102222][T32624] loop6: detected capacity change from 0 to 512 [ 518.109503][T32624] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 518.127202][T32624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 518.135288][T32624] System zones: 1-12 [ 518.139662][T32624] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8996: corrupted in-inode xattr: e_value size too large [ 518.154271][T32624] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8996: couldn't read orphan inode 15 (err -117) [ 518.167974][T32624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.250839][T26405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.323413][T32639] syzkaller0: entered promiscuous mode [ 518.328915][T32639] syzkaller0: entered allmulticast mode [ 518.527746][T32647] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9001'. [ 518.804364][T32660] loop3: detected capacity change from 0 to 164 [ 518.812865][T32660] Unable to read rock-ridge attributes [ 518.877578][T32667] Unable to read rock-ridge attributes [ 518.887934][T32667] syz.3.9007: attempt to access beyond end of device [ 518.887934][T32667] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 518.896627][T32669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9008'. [ 518.909848][T32667] syz.3.9007: attempt to access beyond end of device [ 518.909848][T32667] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 519.034660][T32676] FAULT_INJECTION: forcing a failure. [ 519.034660][T32676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.047891][T32676] CPU: 0 UID: 0 PID: 32676 Comm: syz.6.9012 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 519.048022][T32676] Tainted: [W]=WARN [ 519.048031][T32676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 519.048045][T32676] Call Trace: [ 519.048052][T32676] [ 519.048061][T32676] __dump_stack+0x1d/0x30 [ 519.048087][T32676] dump_stack_lvl+0xe8/0x140 [ 519.048109][T32676] dump_stack+0x15/0x1b [ 519.048208][T32676] should_fail_ex+0x265/0x280 [ 519.048237][T32676] should_fail+0xb/0x20 [ 519.048262][T32676] should_fail_usercopy+0x1a/0x20 [ 519.048354][T32676] _copy_from_user+0x1c/0xb0 [ 519.048460][T32676] bpf_test_init+0xdf/0x160 [ 519.048490][T32676] bpf_prog_test_run_xdp+0x274/0x910 [ 519.048519][T32676] ? kstrtouint+0x76/0xc0 [ 519.048547][T32676] ? __rcu_read_unlock+0x4f/0x70 [ 519.048574][T32676] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 519.048668][T32676] bpf_prog_test_run+0x227/0x390 [ 519.048698][T32676] __sys_bpf+0x4b9/0x7b0 [ 519.048736][T32676] __x64_sys_bpf+0x41/0x50 [ 519.048828][T32676] x64_sys_call+0x2aea/0x2ff0 [ 519.048854][T32676] do_syscall_64+0xd2/0x200 [ 519.048913][T32676] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 519.048944][T32676] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 519.049001][T32676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.049027][T32676] RIP: 0033:0x7f37da40eba9 [ 519.049044][T32676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.049114][T32676] RSP: 002b:00007f37d8e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 519.049140][T32676] RAX: ffffffffffffffda RBX: 00007f37da655fa0 RCX: 00007f37da40eba9 [ 519.049156][T32676] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 519.049171][T32676] RBP: 00007f37d8e77090 R08: 0000000000000000 R09: 0000000000000000 [ 519.049186][T32676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.049207][T32676] R13: 00007f37da656038 R14: 00007f37da655fa0 R15: 00007ffd6452ce78 [ 519.049285][T32676] [ 519.296323][T32680] loop6: detected capacity change from 0 to 1024 [ 519.306190][T32680] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 519.321997][T32680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.336178][T32680] EXT4-fs (loop6): shut down requested (2) [ 519.343092][T32680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 519.352001][T32680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 519.361331][T32680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=14 [ 519.372883][T32680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 519.377667][T32691] vhci_hcd: invalid port number 12 [ 519.381972][T32680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 519.395867][T32680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=14 [ 519.417607][T26405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.463759][T32701] loop5: detected capacity change from 0 to 512 [ 519.491754][T32701] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 519.502200][T32701] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 519.510331][T32701] System zones: 1-12 [ 519.514667][T32701] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.9017: corrupted in-inode xattr: e_value size too large [ 519.532374][T32701] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.9017: couldn't read orphan inode 15 (err -117) [ 519.544875][T32701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.597689][T29759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.612800][T32714] 9p: Unknown access argument 00000000000000000000f: -22 [ 519.660925][T32724] 9p: Unknown access argument 00000000000000000000f: -22 [ 519.702441][T32726] loop6: detected capacity change from 0 to 1024 [ 519.710532][T32726] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 519.730970][T32726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.746798][T32726] EXT4-fs (loop6): shut down requested (2) [ 519.754179][T32726] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 519.770042][T32726] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 519.779037][T32726] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=14 [ 519.790577][T32726] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 519.799687][T32726] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 519.809008][T32726] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=14 [ 519.864796][T32740] atomic_op ffff88812e6f8928 conn xmit_atomic 0000000000000000 [ 519.936962][T26405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.987137][T32743] FAULT_INJECTION: forcing a failure. [ 519.987137][T32743] name failslab, interval 1, probability 0, space 0, times 0 [ 520.000447][T32743] CPU: 1 UID: 0 PID: 32743 Comm: syz.3.9033 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 520.000483][T32743] Tainted: [W]=WARN [ 520.000490][T32743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.000502][T32743] Call Trace: [ 520.000507][T32743] [ 520.000515][T32743] __dump_stack+0x1d/0x30 [ 520.000546][T32743] dump_stack_lvl+0xe8/0x140 [ 520.000569][T32743] dump_stack+0x15/0x1b [ 520.000589][T32743] should_fail_ex+0x265/0x280 [ 520.000673][T32743] ? sctp_add_bind_addr+0x71/0x1e0 [ 520.000701][T32743] should_failslab+0x8c/0xb0 [ 520.000795][T32743] __kmalloc_cache_noprof+0x4c/0x320 [ 520.000828][T32743] sctp_add_bind_addr+0x71/0x1e0 [ 520.000862][T32743] sctp_copy_local_addr_list+0x199/0x220 [ 520.000970][T32743] sctp_copy_one_addr+0x7f/0x280 [ 520.001061][T32743] sctp_bind_addr_copy+0x79/0x290 [ 520.001096][T32743] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 520.001203][T32743] sctp_connect_new_asoc+0x1c3/0x3a0 [ 520.001232][T32743] sctp_sendmsg+0xf10/0x18d0 [ 520.001257][T32743] ? selinux_socket_sendmsg+0xc1/0x1b0 [ 520.001286][T32743] ? __pfx_sctp_sendmsg+0x10/0x10 [ 520.001327][T32743] inet_sendmsg+0xc5/0xd0 [ 520.001356][T32743] __sock_sendmsg+0x102/0x180 [ 520.001464][T32743] __sys_sendto+0x268/0x330 [ 520.001498][T32743] __x64_sys_sendto+0x76/0x90 [ 520.001587][T32743] x64_sys_call+0x2d05/0x2ff0 [ 520.001611][T32743] do_syscall_64+0xd2/0x200 [ 520.001646][T32743] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 520.001674][T32743] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 520.001772][T32743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.001796][T32743] RIP: 0033:0x7fddd5f2eba9 [ 520.001815][T32743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.001894][T32743] RSP: 002b:00007fddd498f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 520.001914][T32743] RAX: ffffffffffffffda RBX: 00007fddd6175fa0 RCX: 00007fddd5f2eba9 [ 520.002006][T32743] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000005 [ 520.002019][T32743] RBP: 00007fddd498f090 R08: 0000200000000140 R09: 000000000000001c [ 520.002031][T32743] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 520.002044][T32743] R13: 00007fddd6176038 R14: 00007fddd6175fa0 R15: 00007ffe2d376f08 [ 520.002071][T32743] [ 520.465519][T32761] loop1: detected capacity change from 0 to 764 [ 520.488840][T32762] loop3: detected capacity change from 0 to 512 [ 520.530077][T32767] loop1: detected capacity change from 0 to 164 [ 520.543516][ T305] loop5: detected capacity change from 0 to 512 [ 520.550427][T32767] Unable to read rock-ridge attributes [ 520.561607][T32762] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 520.562639][ T305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.594670][ T305] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.605465][ T305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.612911][ T313] syzkaller0: entered promiscuous mode [ 520.619948][ T313] syzkaller0: entered allmulticast mode [ 520.620844][T32762] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 520.633820][T32762] System zones: 1-12 [ 520.640735][T32762] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.9036: corrupted in-inode xattr: e_value size too large [ 520.655749][T32762] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.9036: couldn't read orphan inode 15 (err -117) [ 520.669125][T32762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.695315][ T323] Unable to read rock-ridge attributes [ 520.701110][ T323] syz.1.9039: attempt to access beyond end of device [ 520.701110][ T323] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 520.736973][ T323] syz.1.9039: attempt to access beyond end of device [ 520.736973][ T323] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 520.801078][T19345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.888033][ T351] loop3: detected capacity change from 0 to 512 [ 520.894958][ T351] EXT4-fs: Ignoring removed orlov option [ 520.902060][ T351] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 520.946282][ T351] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 520.956088][ T351] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.9050: corrupted in-inode xattr: e_value size too large [ 520.970566][ T351] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.9050: couldn't read orphan inode 15 (err -117) [ 520.983446][ T351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.007693][T19345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.420354][ T372] FAULT_INJECTION: forcing a failure. [ 521.420354][ T372] name failslab, interval 1, probability 0, space 0, times 0 [ 521.433131][ T372] CPU: 1 UID: 0 PID: 372 Comm: syz.1.9055 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 521.433168][ T372] Tainted: [W]=WARN [ 521.433175][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 521.433236][ T372] Call Trace: [ 521.433244][ T372] [ 521.433253][ T372] __dump_stack+0x1d/0x30 [ 521.433277][ T372] dump_stack_lvl+0xe8/0x140 [ 521.433297][ T372] dump_stack+0x15/0x1b [ 521.433312][ T372] should_fail_ex+0x265/0x280 [ 521.433349][ T372] should_failslab+0x8c/0xb0 [ 521.433376][ T372] __kmalloc_noprof+0xa5/0x3e0 [ 521.433407][ T372] ? cond_policydb_dup+0xa3/0x4e0 [ 521.433440][ T372] cond_policydb_dup+0xa3/0x4e0 [ 521.433513][ T372] security_set_bools+0xa0/0x340 [ 521.433542][ T372] sel_commit_bools_write+0x1ea/0x270 [ 521.433569][ T372] vfs_writev+0x406/0x8b0 [ 521.433640][ T372] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 521.433671][ T372] ? mutex_lock+0xd/0x30 [ 521.433696][ T372] do_writev+0xe7/0x210 [ 521.433736][ T372] __x64_sys_writev+0x45/0x50 [ 521.433786][ T372] x64_sys_call+0x1e9a/0x2ff0 [ 521.433810][ T372] do_syscall_64+0xd2/0x200 [ 521.433913][ T372] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 521.433948][ T372] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 521.433977][ T372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.434067][ T372] RIP: 0033:0x7f0e23faeba9 [ 521.434086][ T372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.434107][ T372] RSP: 002b:00007f0e22a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 521.434127][ T372] RAX: ffffffffffffffda RBX: 00007f0e241f5fa0 RCX: 00007f0e23faeba9 [ 521.434205][ T372] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 521.434221][ T372] RBP: 00007f0e22a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 521.434235][ T372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.434265][ T372] R13: 00007f0e241f6038 R14: 00007f0e241f5fa0 R15: 00007ffd1fa373a8 [ 521.434286][ T372] [ 521.768492][ T388] loop1: detected capacity change from 0 to 1024 [ 521.779415][ T388] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 521.811834][ T386] loop6: detected capacity change from 0 to 512 [ 521.818884][ T386] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 521.828294][ T386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 521.835259][ T384] syzkaller0: entered promiscuous mode [ 521.837016][ T386] System zones: 1-12 [ 521.841790][ T384] syzkaller0: entered allmulticast mode [ 521.855716][ T388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.868533][ T386] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.9060: corrupted in-inode xattr: e_value size too large [ 521.884364][ T386] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.9060: couldn't read orphan inode 15 (err -117) [ 521.892930][ T388] EXT4-fs (loop1): shut down requested (2) [ 521.896808][ T386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.923436][ T388] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 521.935959][ T408] FAULT_INJECTION: forcing a failure. [ 521.935959][ T408] name failslab, interval 1, probability 0, space 0, times 0 [ 521.940684][ T388] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 521.948685][ T408] CPU: 1 UID: 0 PID: 408 Comm: syz.3.9065 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 521.948801][ T408] Tainted: [W]=WARN [ 521.948809][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 521.948822][ T408] Call Trace: [ 521.948829][ T408] [ 521.948838][ T408] __dump_stack+0x1d/0x30 [ 521.948861][ T408] dump_stack_lvl+0xe8/0x140 [ 521.948881][ T408] dump_stack+0x15/0x1b [ 521.948934][ T408] should_fail_ex+0x265/0x280 [ 521.948959][ T408] should_failslab+0x8c/0xb0 [ 521.949033][ T408] __kmalloc_noprof+0xa5/0x3e0 [ 521.949062][ T408] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 521.949096][ T408] ? __kfree_skb+0x109/0x150 [ 521.949151][ T408] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 521.949261][ T408] ? nlmon_xmit+0x4f/0x60 [ 521.949350][ T408] genl_family_rcv_msg_doit+0x48/0x1b0 [ 521.949383][ T408] ? genl_get_cmd+0x639/0x660 [ 521.949486][ T408] genl_rcv_msg+0x422/0x460 [ 521.949571][ T408] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 521.949600][ T408] netlink_rcv_skb+0x120/0x220 [ 521.949623][ T408] ? __pfx_genl_rcv_msg+0x10/0x10 [ 521.949664][ T408] genl_rcv+0x28/0x40 [ 521.949692][ T408] netlink_unicast+0x5c0/0x690 [ 521.949783][ T408] netlink_sendmsg+0x58b/0x6b0 [ 521.949808][ T408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.949832][ T408] __sock_sendmsg+0x142/0x180 [ 521.949879][ T408] ____sys_sendmsg+0x31e/0x4e0 [ 521.949907][ T408] ___sys_sendmsg+0x17b/0x1d0 [ 521.949944][ T408] __x64_sys_sendmsg+0xd4/0x160 [ 521.950036][ T408] x64_sys_call+0x191e/0x2ff0 [ 521.950059][ T408] do_syscall_64+0xd2/0x200 [ 521.950134][ T408] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 521.950159][ T408] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 521.950199][ T408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.950221][ T408] RIP: 0033:0x7fddd5f2eba9 [ 521.950238][ T408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.950257][ T408] RSP: 002b:00007fddd498f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.950278][ T408] RAX: ffffffffffffffda RBX: 00007fddd6175fa0 RCX: 00007fddd5f2eba9 [ 521.950322][ T408] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 521.950388][ T408] RBP: 00007fddd498f090 R08: 0000000000000000 R09: 0000000000000000 [ 521.950401][ T408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.950414][ T408] R13: 00007fddd6176038 R14: 00007fddd6175fa0 R15: 00007ffe2d376f08 [ 521.950434][ T408] [ 522.207795][ T388] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 522.216708][ T388] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 522.225522][ T388] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 522.234416][ T388] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 522.253136][T26405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.274120][T31089] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.300201][ T421] tipc: Started in network mode [ 522.305241][ T421] tipc: Node identity ac14140f, cluster identity 4711 [ 522.313077][ T421] tipc: New replicast peer: 255.255.255.255 [ 522.319364][ T421] tipc: Enabled bearer , priority 10 [ 522.386527][ T433] syzkaller1: entered promiscuous mode [ 522.392109][ T433] syzkaller1: entered allmulticast mode [ 522.415362][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 522.415383][ T29] audit: type=1400 audit(1758079382.886:40634): avc: denied { map } for pid=429 comm="syz.6.9073" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 522.445077][ T29] audit: type=1326 audit(1758079382.886:40635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=429 comm="syz.6.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 522.468560][ T29] audit: type=1326 audit(1758079382.886:40636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=429 comm="syz.6.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 522.492083][ T29] audit: type=1326 audit(1758079382.886:40637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=429 comm="syz.6.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 522.515535][ T29] audit: type=1326 audit(1758079382.886:40638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=429 comm="syz.6.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 522.539008][ T29] audit: type=1326 audit(1758079382.886:40639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=429 comm="syz.6.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 522.562735][ T29] audit: type=1326 audit(1758079382.886:40640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=429 comm="syz.6.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 522.565144][ T443] tipc: Enabling of bearer rejected, already enabled [ 522.586252][ T29] audit: type=1326 audit(1758079382.886:40641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=429 comm="syz.6.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 522.586292][ T29] audit: type=1326 audit(1758079382.886:40642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=429 comm="syz.6.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 522.586325][ T29] audit: type=1326 audit(1758079382.886:40643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=429 comm="syz.6.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37da40eba9 code=0x7ffc0000 [ 522.986923][ T454] syzkaller0: entered promiscuous mode [ 522.992477][ T454] syzkaller0: entered allmulticast mode [ 523.068167][ T463] loop1: detected capacity change from 0 to 512 [ 523.077703][ T463] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 523.090469][ T463] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 523.098551][ T463] System zones: 1-12 [ 523.103738][ T463] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.9077: corrupted in-inode xattr: e_value size too large [ 523.118126][ T463] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.9077: couldn't read orphan inode 15 (err -117) [ 523.163480][ T469] __nla_validate_parse: 24 callbacks suppressed [ 523.163498][ T469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9080'. [ 523.332392][ T23] tipc: Node number set to 2886997007 [ 523.364009][ T490] syzkaller1: entered promiscuous mode [ 523.369773][ T490] syzkaller1: entered allmulticast mode [ 523.400815][ T500] netlink: 'syz.3.9085': attribute type 1 has an invalid length. [ 523.496697][ T500] bond6: entered promiscuous mode [ 523.501930][ T500] bond6: entered allmulticast mode [ 523.513259][ T485] geneve2: entered allmulticast mode [ 523.525854][ T485] bond6: (slave geneve2): making interface the new active one [ 523.533489][ T485] geneve2: entered promiscuous mode [ 523.595582][ T485] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 523.721549][ T491] loop3: detected capacity change from 0 to 512 [ 523.748832][ T491] EXT4-fs: Ignoring removed nobh option [ 523.754501][ T491] EXT4-fs: inline encryption not supported [ 523.817533][ T491] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 523.863240][ T491] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.9085: invalid indirect mapped block 2683928664 (level 1) [ 523.983868][ T491] EXT4-fs (loop3): 1 truncate cleaned up [ 524.014713][ T550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9091'. [ 524.051470][ T551] 9p: Unknown access argument 00000000000000000000f: -22 [ 524.085506][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9091'. [ 524.137147][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9091'. [ 524.147757][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9091'. [ 524.242970][ T564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9095'. [ 524.395329][ T569] loop6: detected capacity change from 0 to 1024 [ 524.403192][ T564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9095'. [ 524.412867][ T569] EXT4-fs: inline encryption not supported [ 524.419404][ T569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 524.428742][ T569] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 524.438622][ T569] EXT4-fs (loop6): group descriptors corrupted! [ 524.458090][ T564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9095'. [ 524.471102][ T564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9095'. [ 524.752725][ T580] syzkaller1: entered promiscuous mode [ 524.758284][ T580] syzkaller1: entered allmulticast mode [ 524.970529][ T600] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 524.977131][ T600] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 524.984609][ T600] vhci_hcd vhci_hcd.0: Device attached [ 524.992921][ T600] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 525.002437][ T600] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 525.009137][ T600] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 525.016733][ T600] vhci_hcd vhci_hcd.0: Device attached [ 525.023608][ T600] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 525.030217][ T600] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 525.037950][ T600] vhci_hcd vhci_hcd.0: Device attached [ 525.054621][ T612] netlink: 204 bytes leftover after parsing attributes in process `syz.6.9107'. [ 525.065193][ T600] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 525.068600][ T617] 9p: Unknown access argument 00000000000000000000f: -22 [ 525.071824][ T600] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 525.071918][ T600] vhci_hcd vhci_hcd.0: Device attached [ 525.094529][ T612] sd 0:0:1:0: device reset [ 525.098705][ T600] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 525.112683][ T613] vhci_hcd: connection closed [ 525.112899][T25880] vhci_hcd: stop threads [ 525.122184][T25880] vhci_hcd: release socket [ 525.123147][ T609] vhci_hcd: connection closed [ 525.126624][T25880] vhci_hcd: disconnect device [ 525.129906][ T602] vhci_hcd: connection closed [ 525.132361][ T605] vhci_hcd: connection closed [ 525.142238][T25880] vhci_hcd: stop threads [ 525.151290][T25880] vhci_hcd: release socket [ 525.155777][T25880] vhci_hcd: disconnect device [ 525.160638][T25880] vhci_hcd: stop threads [ 525.164900][T25880] vhci_hcd: release socket [ 525.169497][T25880] vhci_hcd: disconnect device [ 525.174382][ T36] vhci_hcd: vhci_device speed not set [ 525.180341][T25880] vhci_hcd: stop threads [ 525.184654][T25880] vhci_hcd: release socket [ 525.189078][T25880] vhci_hcd: disconnect device [ 525.203588][ T625] loop6: detected capacity change from 0 to 1024 [ 525.210922][ T625] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 525.247626][ T625] EXT4-fs (loop6): shut down requested (2) [ 525.254613][ T625] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 525.263565][ T625] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 525.273243][ T625] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=14 [ 525.282180][ T625] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 525.291361][ T625] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 525.300496][ T625] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=14 [ 525.436772][ T644] lo speed is unknown, defaulting to 1000 [ 525.861981][ T679] 9p: Unknown access argument 00000000000000000000f: -22 [ 525.955822][ T682] syzkaller0: entered promiscuous mode [ 525.961795][ T682] syzkaller0: entered allmulticast mode [ 526.005176][ T695] loop1: detected capacity change from 0 to 1024 [ 526.013040][ T695] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 526.083328][ T699] loop5: detected capacity change from 0 to 164 [ 526.092150][ T699] Unable to read rock-ridge attributes [ 526.106921][ T699] Unable to read rock-ridge attributes [ 526.114969][ T695] EXT4-fs (loop1): shut down requested (2) [ 526.121055][ T699] syz.5.9127: attempt to access beyond end of device [ 526.121055][ T699] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 526.135078][ T699] syz.5.9127: attempt to access beyond end of device [ 526.135078][ T699] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 526.181805][ T695] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 526.191431][ T695] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 526.200939][ T695] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 526.210117][ T695] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 526.219577][ T695] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 526.228471][ T695] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 526.424112][ T739] syzkaller0: entered promiscuous mode [ 526.429737][ T739] syzkaller0: entered allmulticast mode [ 526.488936][ T753] netlink: 'syz.5.9138': attribute type 8 has an invalid length. [ 526.503485][ T736] lo speed is unknown, defaulting to 1000 [ 526.535662][ T753] loop5: detected capacity change from 0 to 1024 [ 526.574947][ T753] ext4: Unknown parameter 'func' [ 526.655070][ T736] chnl_net:caif_netlink_parms(): no params data found [ 526.720502][T25870] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.732756][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.739905][ T736] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.748058][ T736] bridge_slave_0: entered allmulticast mode [ 526.756042][ T736] bridge_slave_0: entered promiscuous mode [ 526.764996][ T736] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.772506][ T736] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.791190][ T736] bridge_slave_1: entered allmulticast mode [ 526.799220][ T736] bridge_slave_1: entered promiscuous mode [ 526.819906][ T926] lo speed is unknown, defaulting to 1000 [ 526.973588][ T736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.985484][ T736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.026002][ T736] team0: Port device team_slave_0 added [ 527.038119][T25870] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.054633][ T736] team0: Port device team_slave_1 added [ 527.092073][ T736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.099087][ T736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.125156][ T736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.145388][T25870] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.157318][ T736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.164357][ T736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.190318][ T736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.216373][T25870] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.226935][ T1025] loop5: detected capacity change from 0 to 1024 [ 527.242690][ T1025] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 527.243512][ T736] hsr_slave_0: entered promiscuous mode [ 527.258749][ T736] hsr_slave_1: entered promiscuous mode [ 527.264983][ T736] debugfs: 'hsr0' already exists in 'hsr' [ 527.270779][ T736] Cannot create hsr debugfs directory [ 527.313652][ T1025] EXT4-fs (loop5): shut down requested (2) [ 527.347503][ T1389] ================================================================== [ 527.355609][ T1389] BUG: KCSAN: data-race in copy_process / free_pid [ 527.362121][ T1389] [ 527.364450][ T1389] read-write to 0xffffffff8685fc48 of 4 bytes by task 1117 on cpu 1: [ 527.372511][ T1389] free_pid+0x77/0x180 [ 527.376588][ T1389] free_pids+0x7a/0xb0 [ 527.380661][ T1389] release_task+0x9a9/0xb60 [ 527.385173][ T1389] do_exit+0xd81/0x15c0 [ 527.389336][ T1389] call_usermodehelper_exec_async+0x247/0x250 [ 527.395414][ T1389] ret_from_fork+0x11f/0x1b0 [ 527.400009][ T1389] ret_from_fork_asm+0x1a/0x30 [ 527.404781][ T1389] [ 527.407103][ T1389] read to 0xffffffff8685fc48 of 4 bytes by task 1389 on cpu 0: [ 527.414646][ T1389] copy_process+0x14a6/0x2000 [ 527.419328][ T1389] kernel_clone+0x16c/0x5c0 [ 527.423835][ T1389] user_mode_thread+0x7d/0xb0 [ 527.428520][ T1389] call_usermodehelper_exec_work+0x41/0x160 [ 527.434428][ T1389] process_scheduled_works+0x4cb/0x9d0 [ 527.439899][ T1389] worker_thread+0x582/0x770 [ 527.444498][ T1389] kthread+0x489/0x510 [ 527.448571][ T1389] ret_from_fork+0x11f/0x1b0 [ 527.453163][ T1389] ret_from_fork_asm+0x1a/0x30 [ 527.457930][ T1389] [ 527.460252][ T1389] value changed: 0x8000016a -> 0x80000169 [ 527.465965][ T1389] [ 527.468282][ T1389] Reported by Kernel Concurrency Sanitizer on: [ 527.474432][ T1389] CPU: 0 UID: 0 PID: 1389 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 527.485896][ T1389] Tainted: [W]=WARN [ 527.489704][ T1389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 527.499758][ T1389] Workqueue: events_unbound call_usermodehelper_exec_work [ 527.506887][ T1389] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 527.527552][ T1025] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 527.536556][ T1025] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 527.546364][ T1025] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 527.555182][ T1025] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 527.564066][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 527.564080][ T29] audit: type=1400 audit(1758079388.026:40907): avc: denied { write } for pid=3273 comm="syz-executor" path="pipe:[789]" dev="pipefs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 527.594980][T25870] bridge_slave_1: left allmulticast mode [ 527.600700][T25870] bridge_slave_1: left promiscuous mode [ 527.606430][T25870] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.623498][ T29] audit: type=1400 audit(1758079388.046:40908): avc: denied { recv } for pid=3273 comm="syz-executor" saddr=10.128.0.163 src=41560 daddr=10.128.0.156 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 527.652104][T25870] bridge_slave_0: left allmulticast mode [ 527.657816][T25870] bridge_slave_0: left promiscuous mode [ 527.663690][T25870] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.685967][ T1025] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 527.755852][T25870] bond6 (unregistering): (slave geneve2): Releasing active interface [ 527.764588][ T1025] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=14 [ 527.765006][T25870] geneve2 (unregistering): left promiscuous mode [ 527.783482][T25870] team0: Port device geneve1 removed [ 527.901748][T25870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.911598][T25870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.921391][T25870] bond0 (unregistering): Released all slaves [ 527.929323][T25870] bond1 (unregistering): Released all slaves [ 527.937410][T25870] bond2 (unregistering): Released all slaves [ 527.945343][T25870] bond3 (unregistering): Released all slaves [ 527.953900][T25870] bond4 (unregistering): Released all slaves [ 527.962057][T25870] bond5 (unregistering): Released all slaves [ 527.970385][T25870] bond6 (unregistering): Released all slaves [ 528.022751][T25870] tipc: Left network mode [ 528.044235][T25870] hsr_slave_0: left promiscuous mode [ 528.052779][T25870] hsr_slave_1: left promiscuous mode [ 528.060819][T25870] veth1_macvtap: left promiscuous mode [ 528.066288][T25870] veth0_macvtap: left promiscuous mode [ 528.071903][T25870] veth1_vlan: left promiscuous mode [ 528.077191][T25870] veth0_vlan: left promiscuous mode [ 528.132062][T25870] team0 (unregistering): Port device team_slave_1 removed [ 528.142447][T25870] team0 (unregistering): Port device team_slave_0 removed [ 528.331794][T25870] IPVS: stop unused estimator thread 0... [ 528.383429][T25870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.422108][T25870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.461939][T25870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.532401][T25870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.594216][T25870] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.651942][T25870] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.701732][T25870] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.761639][T25870] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.814202][T25870] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.851924][T25870] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.912533][T25870] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.971319][T25870] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.232581][T25870] bridge_slave_1: left allmulticast mode [ 529.238232][T25870] bridge_slave_1: left promiscuous mode [ 529.243926][T25870] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.251678][T25870] bridge_slave_0: left allmulticast mode [ 529.257310][T25870] bridge_slave_0: left promiscuous mode [ 529.263066][T25870] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.271242][T25870] bridge_slave_1: left allmulticast mode [ 529.276898][T25870] bridge_slave_1: left promiscuous mode [ 529.282674][T25870] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.290554][T25870] bridge_slave_0: left allmulticast mode [ 529.296232][T25870] bridge_slave_0: left promiscuous mode [ 529.301953][T25870] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.310493][T25870] bridge_slave_1: left allmulticast mode [ 529.316172][T25870] bridge_slave_1: left promiscuous mode [ 529.321857][T25870] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.329786][T25870] bridge_slave_0: left allmulticast mode [ 529.335513][T25870] bridge_slave_0: left promiscuous mode [ 529.341214][T25870] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.349412][T25870] bridge_slave_1: left allmulticast mode [ 529.355173][T25870] bridge_slave_1: left promiscuous mode [ 529.360876][T25870] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.368692][T25870] bridge_slave_0: left allmulticast mode [ 529.374454][T25870] bridge_slave_0: left promiscuous mode [ 529.380209][T25870] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.501271][T25870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.511304][T25870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.520691][T25870] bond0 (unregistering): Released all slaves [ 529.599356][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 529.607927][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 529.651052][T25870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.660716][T25870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.670182][T25870] bond0 (unregistering): Released all slaves [ 529.701357][T25870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.711163][T25870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.720546][T25870] bond0 (unregistering): Released all slaves [ 529.781476][T25870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.791438][T25870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.800931][T25870] bond0 (unregistering): Released all slaves [ 529.904976][T25870] tipc: Disabling bearer [ 529.910006][T25870] tipc: Left network mode [ 529.914633][T25870] tipc: Disabling bearer [ 529.919638][T25870] tipc: Left network mode [ 530.008477][T25870] hsr_slave_0: left promiscuous mode [ 530.014279][T25870] hsr_slave_1: left promiscuous mode [ 530.020280][T25870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.027798][T25870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.035465][T25870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.042948][T25870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.052039][T25870] hsr_slave_0: left promiscuous mode [ 530.057749][T25870] hsr_slave_1: left promiscuous mode [ 530.063527][T25870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.071115][T25870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.078719][T25870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.086123][T25870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.095360][T25870] hsr_slave_0: left promiscuous mode [ 530.101135][T25870] hsr_slave_1: left promiscuous mode [ 530.106878][T25870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.114557][T25870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.123964][T25870] hsr_slave_0: left promiscuous mode [ 530.130005][T25870] hsr_slave_1: left promiscuous mode [ 530.135576][T25870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.143081][T25870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.150688][T25870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.158063][T25870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.166933][T25870] hsr_slave_0: left promiscuous mode [ 530.172596][T25870] hsr_slave_1: left promiscuous mode [ 530.186320][T25870] veth1_macvtap: left promiscuous mode [ 530.191820][T25870] veth0_macvtap: left promiscuous mode [ 530.197313][T25870] veth1_vlan: left promiscuous mode [ 530.202551][T25870] veth0_vlan: left promiscuous mode [ 530.208121][T25870] veth1_macvtap: left promiscuous mode [ 530.213692][T25870] veth0_macvtap: left promiscuous mode [ 530.219315][T25870] veth1_vlan: left promiscuous mode [ 530.224553][T25870] veth0_vlan: left promiscuous mode [ 530.230438][T25870] veth1_macvtap: left promiscuous mode [ 530.235901][T25870] veth0_macvtap: left promiscuous mode [ 530.241440][T25870] veth1_vlan: left promiscuous mode [ 530.246679][T25870] veth0_vlan: left promiscuous mode [ 530.368310][T25870] team0 (unregistering): Port device team_slave_1 removed [ 530.377497][T25870] team0 (unregistering): Port device team_slave_0 removed [ 530.427826][T25870] team0 (unregistering): Port device team_slave_1 removed [ 530.437285][T25870] team0 (unregistering): Port device team_slave_0 removed [ 530.484605][T25870] team0 (unregistering): Port device team_slave_1 removed [ 530.494173][T25870] team0 (unregistering): Port device team_slave_0 removed [ 530.542242][T25870] team0 (unregistering): Port device team_slave_1 removed [ 530.551487][T25870] team0 (unregistering): Port device team_slave_0 removed [ 531.606321][T25870] IPVS: stop unused estimator thread 0...