last executing test programs: 7m1.471265111s ago: executing program 3 (id=349): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2e4}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 7m1.296212765s ago: executing program 3 (id=353): symlink(&(0x7f0000000180)='./bus\x00', &(0x7f00000002c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") syz_emit_ethernet(0x1f6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) 7m1.202036067s ago: executing program 3 (id=357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x7}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 7m1.127635648s ago: executing program 3 (id=360): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x8, 0xc8f, 0x6, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 7m1.00210416s ago: executing program 3 (id=362): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3000091, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES8, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRESOCT], 0x0, 0x23e, &(0x7f0000000600)="$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") connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 7m0.778637165s ago: executing program 3 (id=371): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x4000, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) 7m0.771013165s ago: executing program 32 (id=371): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x4000, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) 6m49.167948568s ago: executing program 5 (id=556): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) unshare(0x2a020600) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r4) sendmsg$NFC_CMD_GET_DEVICE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r6 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) io_setup(0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7}, 0x18) write(r0, 0x0, 0x0) 6m49.109022609s ago: executing program 5 (id=558): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000880)={0x8, &(0x7f0000000800)=[{0x9, 0x6, 0x8, 0xfffffff8}, {0xbcf, 0xd6, 0x6, 0xffff}, {0x8, 0x3, 0x2, 0x1000}, {0x3, 0x7, 0x40, 0x9}, {0x8, 0xf7, 0x92, 0x4}, {0x81, 0x1, 0xb, 0x8}, {0x7, 0x2f, 0x9, 0x800}, {0x2, 0xf8, 0x6, 0x2}]}) 6m49.108608289s ago: executing program 5 (id=559): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 6m49.05490556s ago: executing program 5 (id=560): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="008000050000000000000000000000dee6def7", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1}, 0x20) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) fchmod(r3, 0xa0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r4 = io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES32=r6], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x19, &(0x7f0000000300), 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) 6m48.458179852s ago: executing program 5 (id=568): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6m48.138607688s ago: executing program 5 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 6m48.130815738s ago: executing program 33 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1.858068684s ago: executing program 6 (id=7186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) getpid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x47c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x450, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1f60, 0x16, 0x621a, 0x0, 0xc, 0x8, 0x7, 0x6, 0x2, 0x200, 0x3, 0xffffff01, 0x0, 0x100, 0xfffffffa, 0x1, 0x2, 0x8, 0x2, 0xffffafbe, 0x3, 0x6, 0x2, 0x31, 0x7d, 0x19f, 0x0, 0x5, 0x46e, 0x1, 0x9, 0x1000, 0x4, 0x8001, 0xa, 0xf, 0x7f2, 0x893, 0xfffffffc, 0x9, 0x4, 0x2, 0x1000, 0x0, 0x8, 0x0, 0x8, 0x8, 0xd72, 0xfff, 0x5, 0xe0000, 0x5, 0x100, 0x0, 0x0, 0x6, 0xef, 0xbde7, 0x1a4, 0x7, 0x400, 0x8, 0x2, 0x200, 0x9, 0x5606, 0x333969c9, 0x8, 0x8f0, 0x200, 0x4b7d, 0x9, 0x8, 0xffffff7f, 0x81, 0x2, 0x1, 0x3, 0xd, 0x1, 0x7fff, 0x7, 0xfffffff7, 0x5, 0x729e, 0x7ff, 0x2, 0x5ff, 0x2, 0x0, 0x4, 0xfffffff9, 0x9, 0x6, 0x1010, 0x4, 0x0, 0x1ff, 0x6, 0x4, 0x5, 0x3, 0x6, 0xa5, 0x1, 0x2, 0x19, 0xf18, 0x864, 0x0, 0x8, 0x45, 0x7, 0x1, 0x80000000, 0x2, 0x3, 0x7fffffff, 0x6, 0x1ff, 0x7, 0x3, 0x1, 0x4, 0x9, 0x7, 0x0, 0x2, 0x4, 0x7ff, 0x6, 0x1, 0x2, 0x6c6b, 0x200, 0x4, 0x80000000, 0x5b4, 0x9, 0x1, 0x7, 0xffffffff, 0x3, 0x3, 0x4, 0x8, 0x3, 0x7b5, 0x6e8, 0x80, 0x8, 0x1, 0x3, 0x4, 0x1ff, 0x4, 0x2, 0x8000, 0x6, 0x8c2b3531, 0x2, 0xa7, 0x0, 0x200, 0x8ca4, 0x4, 0x7, 0x4, 0x8001, 0x22c, 0x400, 0x5, 0x9, 0x5, 0x9, 0x399e, 0x0, 0x81, 0x100, 0x200, 0x4, 0x101, 0x9, 0xe, 0x81, 0x3, 0x4, 0x200, 0x3, 0xe7e, 0x3, 0x9, 0x40, 0x80000001, 0x1, 0x2, 0x5, 0x8, 0x8e1f, 0x7, 0x4, 0x3, 0xa, 0x3f, 0x5, 0x6, 0x1, 0xfffffffb, 0x8, 0x5, 0x2, 0xffff, 0x4, 0x296, 0xe9, 0xdb, 0x9, 0x2, 0x2856, 0x662, 0xe, 0x8, 0x4, 0x0, 0x9, 0x1, 0xd9a0333f, 0x3ff, 0xfffffffd, 0x72c6, 0xfffffffd, 0x1, 0x0, 0x3, 0xc, 0x4, 0x1fe0000, 0x40, 0x8000, 0x9, 0x2, 0xfffffff7, 0x401, 0x2, 0x2, 0x0, 0x6, 0x94, 0x3, 0x6, 0x7fff, 0x9, 0x8, 0x8, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0xfffff161, 0xcc0, 0x8, {0x1, 0x1, 0x4, 0x2, 0x1a, 0x7}, {0x40, 0x2, 0x2, 0xff, 0xfffd, 0x26}, 0x8, 0x3, 0x6}}]}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r7}, 0x14) dup2(r0, r1) 1.806499355s ago: executing program 6 (id=7189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000067a30000000000000e000000000000000000ff7fd550ba507d8e8b0bc975004b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000faffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$tipc(r1, &(0x7f0000000600)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x4}}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) fchdir(r1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x680041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'veth1_to_bond\x00', 0x1000}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf2517000000700001800d0001007564703a73797a31000000000800030021382df4380004001400010002004e237f0000010000000000000000200002000a004e2000000001fe8000000000000000000000000000bb02"], 0x84}, 0x1, 0x0, 0x0, 0xc080}, 0xc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 934.905362ms ago: executing program 6 (id=7216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) getpid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x47c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x450, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1f60, 0x16, 0x621a, 0x0, 0xc, 0x8, 0x7, 0x6, 0x2, 0x200, 0x3, 0xffffff01, 0x0, 0x100, 0xfffffffa, 0x1, 0x2, 0x8, 0x2, 0xffffafbe, 0x3, 0x6, 0x2, 0x31, 0x7d, 0x19f, 0x0, 0x5, 0x46e, 0x1, 0x9, 0x1000, 0x4, 0x8001, 0xa, 0xf, 0x7f2, 0x893, 0xfffffffc, 0x9, 0x4, 0x2, 0x1000, 0x0, 0x8, 0x0, 0x8, 0x8, 0xd72, 0xfff, 0x5, 0xe0000, 0x5, 0x100, 0x0, 0x0, 0x6, 0xef, 0xbde7, 0x1a4, 0x7, 0x400, 0x8, 0x2, 0x200, 0x9, 0x5606, 0x333969c9, 0x8, 0x8f0, 0x200, 0x4b7d, 0x9, 0x8, 0xffffff7f, 0x81, 0x2, 0x1, 0x3, 0xd, 0x1, 0x7fff, 0x7, 0xfffffff7, 0x5, 0x729e, 0x7ff, 0x2, 0x5ff, 0x2, 0x0, 0x4, 0xfffffff9, 0x9, 0x6, 0x1010, 0x4, 0x0, 0x1ff, 0x6, 0x4, 0x5, 0x3, 0x6, 0xa5, 0x1, 0x2, 0x19, 0xf18, 0x864, 0x0, 0x8, 0x45, 0x7, 0x1, 0x80000000, 0x2, 0x3, 0x7fffffff, 0x6, 0x1ff, 0x7, 0x3, 0x1, 0x4, 0x9, 0x7, 0x0, 0x2, 0x4, 0x7ff, 0x6, 0x1, 0x2, 0x6c6b, 0x200, 0x4, 0x80000000, 0x5b4, 0x9, 0x1, 0x7, 0xffffffff, 0x3, 0x3, 0x4, 0x8, 0x3, 0x7b5, 0x6e8, 0x80, 0x8, 0x1, 0x3, 0x4, 0x1ff, 0x4, 0x2, 0x8000, 0x6, 0x8c2b3531, 0x2, 0xa7, 0x0, 0x200, 0x8ca4, 0x4, 0x7, 0x4, 0x8001, 0x22c, 0x400, 0x5, 0x9, 0x5, 0x9, 0x399e, 0x0, 0x81, 0x100, 0x200, 0x4, 0x101, 0x9, 0xe, 0x81, 0x3, 0x4, 0x200, 0x3, 0xe7e, 0x3, 0x9, 0x40, 0x80000001, 0x1, 0x2, 0x5, 0x8, 0x8e1f, 0x7, 0x4, 0x3, 0xa, 0x3f, 0x5, 0x6, 0x1, 0xfffffffb, 0x8, 0x5, 0x2, 0xffff, 0x4, 0x296, 0xe9, 0xdb, 0x9, 0x2, 0x2856, 0x662, 0xe, 0x8, 0x4, 0x0, 0x9, 0x1, 0xd9a0333f, 0x3ff, 0xfffffffd, 0x72c6, 0xfffffffd, 0x1, 0x0, 0x3, 0xc, 0x4, 0x1fe0000, 0x40, 0x8000, 0x9, 0x2, 0xfffffff7, 0x401, 0x2, 0x2, 0x0, 0x6, 0x94, 0x3, 0x6, 0x7fff, 0x9, 0x8, 0x8, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0xfffff161, 0xcc0, 0x8, {0x1, 0x1, 0x4, 0x2, 0x1a, 0x7}, {0x40, 0x2, 0x2, 0xff, 0xfffd, 0x26}, 0x8, 0x3, 0x6}}]}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r0, r1) 803.761994ms ago: executing program 6 (id=7221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getgroups(0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0]) 775.577085ms ago: executing program 6 (id=7224): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10005}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0xffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c2000000bf09000000000000550901000000002095000000000000001776000004000000180000000200000000000000100000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x2f}, 0x94) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10005}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0xffffffff, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c2000000bf09000000000000550901000000002095000000000000001776000004000000180000000200000000000000100000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x2f}, 0x94) (async) 687.581527ms ago: executing program 6 (id=7226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, 0x0, &(0x7f00000005c0)}, 0x20) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x6}, 0x0, 0xc8, 0xfffffffe, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x28, 0x0, &(0x7f0000000080)="c1188e83b95d02ff4284860186ddcc1dff325e38b3faeea92998be7b96fffe53fe38db276ef146f3", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x7, 0x9) write$P9_RWRITE(r12, &(0x7f0000000040)={0xb}, 0x11000) read(r11, &(0x7f0000032440)=""/102364, 0x18fdc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) 609.202968ms ago: executing program 1 (id=7229): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x71c}, 0x100b28, 0x6, 0x0, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x2000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000507000/0x2000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) 542.32652ms ago: executing program 4 (id=7234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getgroups(0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0]) 513.71919ms ago: executing program 1 (id=7236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@local, 0x33, r2}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@private1, r2}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x9d}, 0x18) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0xbe}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000013c0)=@newtaction={0x898, 0x30, 0x937, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 513.04795ms ago: executing program 4 (id=7237): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001c0000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x70}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff8000000000, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0x8f71, 0x10100, 0x3, 0x3cd}, &(0x7f0000000000), &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r7, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38) 460.688621ms ago: executing program 1 (id=7239): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x90) close(r0) (async) close(r0) 442.071191ms ago: executing program 0 (id=7241): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000480)={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/20, 0x14}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000580)=""/242, 0xf2}], &(0x7f0000000280)=[0x10, 0xffffffff, 0x3, 0x8, 0x800000], 0x3}, 0x20) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x800, 0x0, 0x8000020e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/676], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0x100e, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x64040011, 0x1}) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) syz_emit_ethernet(0x82, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x74, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x1, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private}, {@remote}, {@local}]}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$P9_RLERROR(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09007d38c43c5f631d"], 0x9) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c00)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r12, @ANYBLOB="08000500", @ANYRES32=r12], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') msgget$private(0x0, 0x184) 374.564853ms ago: executing program 2 (id=7242): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @empty}}}, 0x32) writev(r0, &(0x7f0000000000), 0xffffffffffffef0) 374.123803ms ago: executing program 2 (id=7243): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000077deff00850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x21, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000019c0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f0000000900)=""/168, 0xa8}, {&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000380)=""/124, 0x7c}], 0x5}, 0x100) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) setitimer(0x2, 0x0, 0x0) 372.208773ms ago: executing program 2 (id=7244): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x51}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r2 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r3 = socket(0x10, 0x803, 0x0) close_range(r3, r2, 0x2) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800004482c8e278e8680d6447b20000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x1) 348.982483ms ago: executing program 4 (id=7245): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 319.941013ms ago: executing program 4 (id=7246): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x71c}, 0x100b28, 0x6, 0x0, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x2000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000507000/0x2000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) 299.875444ms ago: executing program 0 (id=7247): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) 247.312695ms ago: executing program 2 (id=7248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getgroups(0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0]) 219.398976ms ago: executing program 0 (id=7249): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x4a140, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r5, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 208.520696ms ago: executing program 2 (id=7250): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x54) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c", 0xf8}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 160.278407ms ago: executing program 1 (id=7251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) getpid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x47c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x450, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1f60, 0x16, 0x621a, 0x0, 0xc, 0x8, 0x7, 0x6, 0x2, 0x200, 0x3, 0xffffff01, 0x0, 0x100, 0xfffffffa, 0x1, 0x2, 0x8, 0x2, 0xffffafbe, 0x3, 0x6, 0x2, 0x31, 0x7d, 0x19f, 0x0, 0x5, 0x46e, 0x1, 0x9, 0x1000, 0x4, 0x8001, 0xa, 0xf, 0x7f2, 0x893, 0xfffffffc, 0x9, 0x4, 0x2, 0x1000, 0x0, 0x8, 0x0, 0x8, 0x8, 0xd72, 0xfff, 0x5, 0xe0000, 0x5, 0x100, 0x0, 0x0, 0x6, 0xef, 0xbde7, 0x1a4, 0x7, 0x400, 0x8, 0x2, 0x200, 0x9, 0x5606, 0x333969c9, 0x8, 0x8f0, 0x200, 0x4b7d, 0x9, 0x8, 0xffffff7f, 0x81, 0x2, 0x1, 0x3, 0xd, 0x1, 0x7fff, 0x7, 0xfffffff7, 0x5, 0x729e, 0x7ff, 0x2, 0x5ff, 0x2, 0x0, 0x4, 0xfffffff9, 0x9, 0x6, 0x1010, 0x4, 0x0, 0x1ff, 0x6, 0x4, 0x5, 0x3, 0x6, 0xa5, 0x1, 0x2, 0x19, 0xf18, 0x864, 0x0, 0x8, 0x45, 0x7, 0x1, 0x80000000, 0x2, 0x3, 0x7fffffff, 0x6, 0x1ff, 0x7, 0x3, 0x1, 0x4, 0x9, 0x7, 0x0, 0x2, 0x4, 0x7ff, 0x6, 0x1, 0x2, 0x6c6b, 0x200, 0x4, 0x80000000, 0x5b4, 0x9, 0x1, 0x7, 0xffffffff, 0x3, 0x3, 0x4, 0x8, 0x3, 0x7b5, 0x6e8, 0x80, 0x8, 0x1, 0x3, 0x4, 0x1ff, 0x4, 0x2, 0x8000, 0x6, 0x8c2b3531, 0x2, 0xa7, 0x0, 0x200, 0x8ca4, 0x4, 0x7, 0x4, 0x8001, 0x22c, 0x400, 0x5, 0x9, 0x5, 0x9, 0x399e, 0x0, 0x81, 0x100, 0x200, 0x4, 0x101, 0x9, 0xe, 0x81, 0x3, 0x4, 0x200, 0x3, 0xe7e, 0x3, 0x9, 0x40, 0x80000001, 0x1, 0x2, 0x5, 0x8, 0x8e1f, 0x7, 0x4, 0x3, 0xa, 0x3f, 0x5, 0x6, 0x1, 0xfffffffb, 0x8, 0x5, 0x2, 0xffff, 0x4, 0x296, 0xe9, 0xdb, 0x9, 0x2, 0x2856, 0x662, 0xe, 0x8, 0x4, 0x0, 0x9, 0x1, 0xd9a0333f, 0x3ff, 0xfffffffd, 0x72c6, 0xfffffffd, 0x1, 0x0, 0x3, 0xc, 0x4, 0x1fe0000, 0x40, 0x8000, 0x9, 0x2, 0xfffffff7, 0x401, 0x2, 0x2, 0x0, 0x6, 0x94, 0x3, 0x6, 0x7fff, 0x9, 0x8, 0x8, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0xfffff161, 0xcc0, 0x8, {0x1, 0x1, 0x4, 0x2, 0x1a, 0x7}, {0x40, 0x2, 0x2, 0xff, 0xfffd, 0x26}, 0x8, 0x3, 0x6}}]}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r0, r1) 159.799047ms ago: executing program 0 (id=7252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x101040, 0x0) unshare(0x24020400) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0xfffffffd, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000840000000010000000db5c4896e0b276bf42adc7ac008f9d61a939bb13ab44c2529714919af12478e931701acf78ff12cbb4da8c18eef94187364da4407b67afd1f18233b1b9646534237a7a6f651a25553962560e9f61669894f67e0bfd756d6d05cce99e3fe15035aae4d4ff9880ec3e39b4e07ab76417800a55fd6ac1923b28eb15a75ea4348f0e6b6fa1520c2535dcbadf74e0d7cad55bc1310cbe01c93169b6309025604c3b3901b16c3e198cb288ac107bc3852037fe5cb6cd77f617e612e567cd75f84bf6309ae98ade5f4ca882921cd9b01d50cedcf06c7b76b3affe52de6a5456c78f56fef", @ANYRES8=r2, @ANYRES8, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="000000005e000000b703009700000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) connect$netlink(r1, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x8001}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x64, r7, 0x1c77b3ffb7919603, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000100}, 0x24000000) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411eff0ffffffffffffff00000000", 0x39}, {&(0x7f0000000200)="840d519d558cb7d4ee8f8e290d7db7e74adeacc8b6d2a1e1cc5e6a5344929e06b14b1db32315cbf7fbec4be0adf84472f0706f609e7f1b8514f7aee00ca9b8f47574e0d3e039b569ea49907a48bfa734731e9fb0bcde95e3feb74ffcfdba9f84a3998de4ea9aa3add750098127daca003754b62bcc48b57861ea1a1c4cb13d51073cf2af7a67f6e9ae", 0x89}, {&(0x7f00000002c0)="28cddb6c1c58fbba8fd7c58b41aa843014cecda240e0c90c2fd27c8b8b9bb986a8b2c1ee647694aa177c82399b491a6837e6db4192278e3bc4e7c5a2553ba59381543c1c76190d5e2ee8ad126c067cb995", 0x51}], 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 159.442257ms ago: executing program 2 (id=7253): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x54) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 155.063317ms ago: executing program 0 (id=7254): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000077deff00850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x21, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000019c0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f0000000900)=""/168, 0xa8}, {&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000380)=""/124, 0x7c}], 0x5}, 0x100) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) setitimer(0x2, 0x0, 0x0) 131.830207ms ago: executing program 4 (id=7255): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_ethernet(0x82, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000004", @ANYRES32], 0x48) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x80000000, 0x4) sendto$unix(r0, 0x0, 0xfffffffffffffceb, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_open_dev$loop(&(0x7f0000000000), 0xea14, 0x400100) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x814}, 0x44010) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x814}, 0x44010) 131.204497ms ago: executing program 0 (id=7256): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001c0000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x70}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff8000000000, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) syz_io_uring_setup(0x6d3b, &(0x7f0000000340)={0x0, 0x8f71, 0x10100, 0x3, 0x3cd}, &(0x7f0000000000), &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38) 66.277698ms ago: executing program 4 (id=7257): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000480)={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/20, 0x14}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000580)=""/242, 0xf2}], &(0x7f0000000280)=[0x10, 0xffffffff, 0x3, 0x8, 0x800000], 0x3}, 0x20) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x800, 0x0, 0x8000020e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/676], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0x100e, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x64040011, 0x1}) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) syz_emit_ethernet(0x82, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x74, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x1, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private}, {@remote}, {@local}]}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$P9_RLERROR(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09007d38c43c5f631d"], 0x9) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c00)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r12, @ANYBLOB="08000500", @ANYRES32=r12], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') msgget$private(0x0, 0x184) 44.105919ms ago: executing program 1 (id=7258): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 0s ago: executing program 1 (id=7259): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x51}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r2 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r3 = socket(0x10, 0x803, 0x0) close_range(r3, r2, 0x2) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800004482c8e278e8680d6447b20000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x1) kernel console output (not intermixed with test programs): ink: 4 bytes leftover after parsing attributes in process `syz.0.6225'. [ 430.213948][T21250] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 430.269580][T14516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.383380][T21286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6234'. [ 430.407646][T21286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6234'. [ 430.413847][ T8560] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.436048][ T8560] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.466550][ T8560] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.475930][ T8560] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.512935][T21292] loop6: detected capacity change from 0 to 512 [ 430.534733][T21292] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.6236: casefold flag without casefold feature [ 430.584949][T21292] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6236: couldn't read orphan inode 15 (err -117) [ 430.617319][T21292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.729121][T21302] lo speed is unknown, defaulting to 1000 [ 430.742021][T21302] lo speed is unknown, defaulting to 1000 [ 430.770366][T21309] loop4: detected capacity change from 0 to 512 [ 430.777733][T21309] EXT4-fs: Ignoring removed mblk_io_submit option [ 430.793604][T21309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.808060][T21309] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.821060][T14516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.832532][T21309] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6239: corrupted xattr block 33: e_value out of bounds [ 430.848477][T21309] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 430.873654][T21309] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6239: corrupted xattr block 33: e_value out of bounds [ 430.897686][T21309] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 430.907859][T21314] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 430.918495][T21314] 9pnet_fd: Insufficient options for proto=fd [ 430.929267][T21314] SELinux: failed to load policy [ 430.929977][T21309] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 430.965742][T21309] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.6239: corrupted xattr block 33: e_value out of bounds [ 430.981002][T21309] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 431.022220][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.234095][T21338] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 431.247555][T21340] lo speed is unknown, defaulting to 1000 [ 431.260543][T21340] lo speed is unknown, defaulting to 1000 [ 431.299949][T21342] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 431.336869][T21342] 9pnet_fd: Insufficient options for proto=fd [ 431.355936][T21342] SELinux: failed to load policy [ 431.383858][T21348] lo speed is unknown, defaulting to 1000 [ 431.390153][T21348] lo speed is unknown, defaulting to 1000 [ 431.468112][T21356] FAULT_INJECTION: forcing a failure. [ 431.468112][T21356] name failslab, interval 1, probability 0, space 0, times 0 [ 431.481110][T21356] CPU: 1 UID: 0 PID: 21356 Comm: syz.0.6260 Not tainted syzkaller #0 PREEMPT(voluntary) [ 431.481144][T21356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 431.481161][T21356] Call Trace: [ 431.481169][T21356] [ 431.481179][T21356] __dump_stack+0x1d/0x30 [ 431.481206][T21356] dump_stack_lvl+0xe8/0x140 [ 431.481232][T21356] dump_stack+0x15/0x1b [ 431.481251][T21356] should_fail_ex+0x265/0x280 [ 431.481274][T21356] should_failslab+0x8c/0xb0 [ 431.481293][T21356] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 431.481330][T21356] ? key_alloc+0x2b8/0x9a0 [ 431.481443][T21356] kmemdup_noprof+0x2b/0x70 [ 431.481489][T21356] key_alloc+0x2b8/0x9a0 [ 431.481519][T21356] keyring_alloc+0x45/0xb0 [ 431.481605][T21356] lookup_user_key+0x35f/0xd10 [ 431.481688][T21356] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 431.481766][T21356] __se_sys_add_key+0x263/0x350 [ 431.481804][T21356] __x64_sys_add_key+0x67/0x80 [ 431.481875][T21356] x64_sys_call+0x28c8/0x3000 [ 431.481953][T21356] do_syscall_64+0xd2/0x200 [ 431.482010][T21356] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 431.482087][T21356] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 431.482118][T21356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.482150][T21356] RIP: 0033:0x7f0ef585eec9 [ 431.482167][T21356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.482227][T21356] RSP: 002b:00007f0ef42c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 431.482249][T21356] RAX: ffffffffffffffda RBX: 00007f0ef5ab5fa0 RCX: 00007f0ef585eec9 [ 431.482266][T21356] RDX: 0000200000000f80 RSI: 0000000000000000 RDI: 0000200000000500 [ 431.482279][T21356] RBP: 00007f0ef42c7090 R08: fffffffffffffffe R09: 0000000000000000 [ 431.482294][T21356] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 431.482310][T21356] R13: 00007f0ef5ab6038 R14: 00007f0ef5ab5fa0 R15: 00007fffbc0c7f78 [ 431.482336][T21356] [ 431.816026][T21372] loop4: detected capacity change from 0 to 512 [ 431.840548][T21372] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 431.913201][T21372] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.963956][T21372] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.073419][T21372] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.153710][T21372] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.241128][T21413] macvtap0: refused to change device tx_queue_len [ 432.258260][T21417] FAULT_INJECTION: forcing a failure. [ 432.258260][T21417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.271491][T21417] CPU: 0 UID: 0 PID: 21417 Comm: syz.6.6286 Not tainted syzkaller #0 PREEMPT(voluntary) [ 432.271528][T21417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.271544][T21417] Call Trace: [ 432.271553][T21417] [ 432.271628][T21417] __dump_stack+0x1d/0x30 [ 432.271657][T21417] dump_stack_lvl+0xe8/0x140 [ 432.271690][T21417] dump_stack+0x15/0x1b [ 432.271712][T21417] should_fail_ex+0x265/0x280 [ 432.271742][T21417] should_fail+0xb/0x20 [ 432.271783][T21417] should_fail_usercopy+0x1a/0x20 [ 432.271843][T21417] strncpy_from_user+0x25/0x230 [ 432.271884][T21417] ? __fget_files+0x184/0x1c0 [ 432.271909][T21417] __se_sys_add_key+0x86/0x350 [ 432.271965][T21417] __x64_sys_add_key+0x67/0x80 [ 432.272007][T21417] x64_sys_call+0x28c8/0x3000 [ 432.272121][T21417] do_syscall_64+0xd2/0x200 [ 432.272176][T21417] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 432.272202][T21417] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 432.272229][T21417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.272288][T21417] RIP: 0033:0x7f40559eeec9 [ 432.272302][T21417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.272372][T21417] RSP: 002b:00007f405444f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 432.272389][T21417] RAX: ffffffffffffffda RBX: 00007f4055c45fa0 RCX: 00007f40559eeec9 [ 432.272403][T21417] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 432.272437][T21417] RBP: 00007f405444f090 R08: ffffffffffffffff R09: 0000000000000000 [ 432.272455][T21417] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 432.272471][T21417] R13: 00007f4055c46038 R14: 00007f4055c45fa0 R15: 00007fff00c7b828 [ 432.272497][T21417] [ 432.786497][T21467] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 432.797208][T21467] 9pnet_fd: Insufficient options for proto=fd [ 432.803941][T21467] SELinux: failed to load policy [ 432.884292][T21475] lo speed is unknown, defaulting to 1000 [ 432.890748][T21475] lo speed is unknown, defaulting to 1000 [ 432.920886][T21477] FAULT_INJECTION: forcing a failure. [ 432.920886][T21477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.934363][T21477] CPU: 1 UID: 0 PID: 21477 Comm: syz.6.6311 Not tainted syzkaller #0 PREEMPT(voluntary) [ 432.934399][T21477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.934431][T21477] Call Trace: [ 432.934494][T21477] [ 432.934503][T21477] __dump_stack+0x1d/0x30 [ 432.934531][T21477] dump_stack_lvl+0xe8/0x140 [ 432.934556][T21477] dump_stack+0x15/0x1b [ 432.934578][T21477] should_fail_ex+0x265/0x280 [ 432.934649][T21477] should_fail+0xb/0x20 [ 432.934723][T21477] should_fail_usercopy+0x1a/0x20 [ 432.934754][T21477] _copy_from_user+0x1c/0xb0 [ 432.934787][T21477] ___sys_sendmsg+0xc1/0x1d0 [ 432.934897][T21477] __x64_sys_sendmsg+0xd4/0x160 [ 432.934936][T21477] x64_sys_call+0x191e/0x3000 [ 432.934960][T21477] do_syscall_64+0xd2/0x200 [ 432.935056][T21477] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 432.935125][T21477] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 432.935164][T21477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.935190][T21477] RIP: 0033:0x7f40559eeec9 [ 432.935221][T21477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.935244][T21477] RSP: 002b:00007f405444f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.935267][T21477] RAX: ffffffffffffffda RBX: 00007f4055c45fa0 RCX: 00007f40559eeec9 [ 432.935283][T21477] RDX: 000000000000c010 RSI: 0000200000006040 RDI: 0000000000000005 [ 432.935301][T21477] RBP: 00007f405444f090 R08: 0000000000000000 R09: 0000000000000000 [ 432.935317][T21477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.935332][T21477] R13: 00007f4055c46038 R14: 00007f4055c45fa0 R15: 00007fff00c7b828 [ 432.935354][T21477] [ 434.126990][T21538] loop6: detected capacity change from 0 to 512 [ 434.144312][T21538] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 434.152649][T21538] EXT4-fs (loop6): orphan cleanup on readonly fs [ 434.161384][T21538] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6337: corrupted inode contents [ 434.173583][T21538] EXT4-fs (loop6): Remounting filesystem read-only [ 434.178471][T21543] __nla_validate_parse: 35 callbacks suppressed [ 434.178493][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6338'. [ 434.180419][T21538] EXT4-fs (loop6): 1 truncate cleaned up [ 434.187255][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6338'. [ 434.195874][ T8565] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 434.220764][ T8565] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 434.232120][ T8565] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 434.244309][T21538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.272563][T14516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.367300][T21556] loop6: detected capacity change from 0 to 1024 [ 434.383518][T21556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.418477][T21556] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.6343: Allocating blocks 449-513 which overlap fs metadata [ 434.499268][T21555] EXT4-fs (loop6): pa ffff888107261e70: logic 48, phys. 177, len 21 [ 434.507497][T21555] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 434.530501][T14516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.568191][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 434.568236][ T29] audit: type=1400 audit(1759395025.567:19939): avc: denied { connect } for pid=21561 comm="syz.2.6346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 434.594653][ T29] audit: type=1326 audit(1759395025.567:19940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21561 comm="syz.2.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 434.618606][ T29] audit: type=1326 audit(1759395025.567:19941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21561 comm="syz.2.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 434.624001][T21562] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6344'. [ 434.642593][ T29] audit: type=1326 audit(1759395025.567:19942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21561 comm="syz.2.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 434.674890][ T29] audit: type=1326 audit(1759395025.567:19943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21561 comm="syz.2.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 434.698523][ T29] audit: type=1326 audit(1759395025.567:19944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21561 comm="syz.2.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 434.723259][T21562] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6344'. [ 434.803693][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6345'. [ 434.857492][T21573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6349'. [ 434.866605][T21573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6349'. [ 434.951059][T21595] loop6: detected capacity change from 0 to 512 [ 434.965060][T21595] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.6355: casefold flag without casefold feature [ 434.977964][ T29] audit: type=1400 audit(1759395025.967:19945): avc: denied { create } for pid=21596 comm="syz.1.6356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 435.000068][T21595] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6355: couldn't read orphan inode 15 (err -117) [ 435.013186][ T29] audit: type=1400 audit(1759395026.007:19946): avc: denied { bind } for pid=21596 comm="syz.1.6356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 435.033363][ T29] audit: type=1400 audit(1759395026.007:19947): avc: denied { name_bind } for pid=21596 comm="syz.1.6356" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 435.055710][T21595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.083232][ T4227] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.096646][ T4227] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.108099][ T4227] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.142041][ T4227] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.166081][ T29] audit: type=1326 audit(1759395026.167:19948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21610 comm="syz.4.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 435.194962][T14516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.284012][T21613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6362'. [ 435.293108][T21613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6362'. [ 435.328514][T21623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6363'. [ 435.371826][T21633] netlink: 'syz.1.6369': attribute type 7 has an invalid length. [ 435.379656][T21633] netlink: 'syz.1.6369': attribute type 8 has an invalid length. [ 435.459102][T21641] loop4: detected capacity change from 0 to 1024 [ 435.477868][T21641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.509722][T21641] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6374: Allocating blocks 449-513 which overlap fs metadata [ 435.694046][T21660] netlink: 'syz.6.6380': attribute type 10 has an invalid length. [ 435.704150][T21660] bond0: (slave dummy0): Releasing backup interface [ 435.706417][T21670] netlink: 'syz.1.6383': attribute type 3 has an invalid length. [ 435.723744][T21660] team0: Port device dummy0 added [ 435.780140][T21676] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.823216][ T1037] hid_parser_main: 8 callbacks suppressed [ 435.823235][ T1037] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 435.836932][ T1037] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 435.844408][ T1037] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 435.851880][ T1037] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 435.859381][ T1037] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 435.866866][ T1037] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 435.874463][ T1037] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 435.882021][ T1037] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 435.889517][ T1037] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 435.897111][ T1037] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 435.905914][ T1037] hid-generic 0003:0003:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 435.916294][T21681] FAULT_INJECTION: forcing a failure. [ 435.916294][T21681] name failslab, interval 1, probability 0, space 0, times 0 [ 435.929466][T21681] CPU: 1 UID: 0 PID: 21681 Comm: syz.0.6386 Not tainted syzkaller #0 PREEMPT(voluntary) [ 435.929503][T21681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 435.929519][T21681] Call Trace: [ 435.929527][T21681] [ 435.929537][T21681] __dump_stack+0x1d/0x30 [ 435.929623][T21681] dump_stack_lvl+0xe8/0x140 [ 435.929722][T21681] dump_stack+0x15/0x1b [ 435.929743][T21681] should_fail_ex+0x265/0x280 [ 435.929771][T21681] ? audit_log_d_path+0x8d/0x150 [ 435.929795][T21681] should_failslab+0x8c/0xb0 [ 435.929820][T21681] __kmalloc_cache_noprof+0x4c/0x320 [ 435.929876][T21681] audit_log_d_path+0x8d/0x150 [ 435.929901][T21681] audit_log_d_path_exe+0x42/0x70 [ 435.929979][T21681] audit_log_task+0x1e9/0x250 [ 435.930026][T21681] ? kstrtouint+0x76/0xc0 [ 435.930119][T21681] audit_seccomp+0x61/0x100 [ 435.930156][T21681] ? __seccomp_filter+0x82d/0x1250 [ 435.930191][T21681] __seccomp_filter+0x83e/0x1250 [ 435.930226][T21681] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 435.930306][T21681] ? vfs_write+0x7e8/0x960 [ 435.930347][T21681] ? __rcu_read_unlock+0x4f/0x70 [ 435.930423][T21681] ? __fget_files+0x184/0x1c0 [ 435.930452][T21681] __secure_computing+0x82/0x150 [ 435.930485][T21681] syscall_trace_enter+0xcf/0x1e0 [ 435.930521][T21681] do_syscall_64+0xac/0x200 [ 435.930639][T21681] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 435.930731][T21681] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 435.930769][T21681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.930796][T21681] RIP: 0033:0x7f0ef585eec9 [ 435.930811][T21681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.930830][T21681] RSP: 002b:00007f0ef42c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 435.930894][T21681] RAX: ffffffffffffffda RBX: 00007f0ef5ab5fa0 RCX: 00007f0ef585eec9 [ 435.930911][T21681] RDX: 0000000005000000 RSI: 0000000000002000 RDI: 0000200000ff5000 [ 435.930927][T21681] RBP: 00007f0ef42c7090 R08: 0000200000ffd000 R09: 0000000000000000 [ 435.930944][T21681] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 435.930960][T21681] R13: 00007f0ef5ab6038 R14: 00007f0ef5ab5fa0 R15: 00007fffbc0c7f78 [ 435.931006][T21681] [ 436.158671][T21676] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.185970][T21682] netlink: 'syz.6.6385': attribute type 5 has an invalid length. [ 436.193877][T21682] netlink: 'syz.6.6385': attribute type 8 has an invalid length. [ 436.216965][T21682] geneve2: entered promiscuous mode [ 436.222425][T21682] geneve2: entered allmulticast mode [ 436.229421][ T8565] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 436.239470][ T8565] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 436.248415][ T8565] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 436.258012][ T8565] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 436.267300][T21691] FAULT_INJECTION: forcing a failure. [ 436.267300][T21691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.280443][T21691] CPU: 0 UID: 0 PID: 21691 Comm: syz.0.6389 Not tainted syzkaller #0 PREEMPT(voluntary) [ 436.280475][T21691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 436.280490][T21691] Call Trace: [ 436.280497][T21691] [ 436.280506][T21691] __dump_stack+0x1d/0x30 [ 436.280533][T21691] dump_stack_lvl+0xe8/0x140 [ 436.280636][T21691] dump_stack+0x15/0x1b [ 436.280657][T21691] should_fail_ex+0x265/0x280 [ 436.280697][T21691] should_fail+0xb/0x20 [ 436.280722][T21691] should_fail_usercopy+0x1a/0x20 [ 436.280754][T21691] _copy_from_user+0x1c/0xb0 [ 436.280864][T21691] ___sys_sendmsg+0xc1/0x1d0 [ 436.280918][T21691] __x64_sys_sendmsg+0xd4/0x160 [ 436.281010][T21691] x64_sys_call+0x191e/0x3000 [ 436.281037][T21691] do_syscall_64+0xd2/0x200 [ 436.281078][T21691] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 436.281148][T21691] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 436.281234][T21691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.281262][T21691] RIP: 0033:0x7f0ef585eec9 [ 436.281281][T21691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.281305][T21691] RSP: 002b:00007f0ef4282038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.281330][T21691] RAX: ffffffffffffffda RBX: 00007f0ef5ab6090 RCX: 00007f0ef585eec9 [ 436.281364][T21691] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000007 [ 436.281380][T21691] RBP: 00007f0ef4282090 R08: 0000000000000000 R09: 0000000000000000 [ 436.281396][T21691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.281413][T21691] R13: 00007f0ef5ab6128 R14: 00007f0ef5ab6090 R15: 00007fffbc0c7f78 [ 436.281446][T21691] [ 436.453730][T21640] EXT4-fs (loop4): pa ffff888107261ee0: logic 48, phys. 177, len 21 [ 436.461970][T21640] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 436.476278][T21676] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.554159][T21676] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.612674][ T4227] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.624497][ T4227] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.635816][ T8565] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.647686][ T8565] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.849580][T21705] tipc: Started in network mode [ 436.854550][T21705] tipc: Node identity ea1bbcca7fe5, cluster identity 4711 [ 436.861804][T21705] tipc: Enabled bearer , priority 0 [ 436.871040][T21704] tipc: Resetting bearer [ 436.885409][T21704] tipc: Disabling bearer [ 437.825758][T21727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.877853][T21727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.954740][T21727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.014446][T21727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.033589][T21750] 9pnet_fd: Insufficient options for proto=fd [ 438.110674][ T4227] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.133515][ T4227] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.155263][ T4227] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.163816][ T4227] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.412349][T21797] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.483579][T21797] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.553576][T21797] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.593395][T21797] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.141970][T21818] syzkaller0: entered promiscuous mode [ 439.147568][T21818] syzkaller0: entered allmulticast mode [ 439.522281][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.542417][T21829] __nla_validate_parse: 17 callbacks suppressed [ 439.542432][T21829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6443'. [ 439.557768][T21829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6443'. [ 439.569708][T21829] bridge0: port 3(vlan2) entered blocking state [ 439.576055][T21829] bridge0: port 3(vlan2) entered disabled state [ 439.582714][T21829] vlan2: entered allmulticast mode [ 439.587933][T21829] bridge0: entered allmulticast mode [ 439.593883][T21829] vlan2: left allmulticast mode [ 439.598772][T21829] bridge0: left allmulticast mode [ 439.632580][T21830] syzkaller0: entered promiscuous mode [ 439.638076][T21830] syzkaller0: entered allmulticast mode [ 439.718829][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 439.718848][ T29] audit: type=1326 audit(1759395030.717:20275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.4.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 439.751743][ T29] audit: type=1326 audit(1759395030.717:20276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.4.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 439.775593][ T29] audit: type=1326 audit(1759395030.717:20277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.4.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 439.799384][ T29] audit: type=1326 audit(1759395030.717:20278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.4.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 439.811079][T21834] loop4: detected capacity change from 0 to 1024 [ 439.823164][ T29] audit: type=1326 audit(1759395030.717:20279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.4.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 439.830009][T21834] EXT4-fs: Ignoring removed nobh option [ 439.853607][ T29] audit: type=1326 audit(1759395030.717:20280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.4.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 439.883609][ T29] audit: type=1326 audit(1759395030.717:20281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.4.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 439.907784][ T29] audit: type=1326 audit(1759395030.717:20282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.4.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 439.915044][T21834] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 439.931667][ T29] audit: type=1326 audit(1759395030.717:20283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.4.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 439.965592][ T29] audit: type=1326 audit(1759395030.717:20284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21831 comm="syz.4.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 439.969001][T21834] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm wÞ£ÿ: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 440.008725][T21834] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm wÞ£ÿ: couldn't read orphan inode 11 (err -117) [ 440.023434][T21834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.057895][T21834] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm wÞ£ÿ: Invalid block bitmap block 0 in block_group 0 [ 440.071551][T21834] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm wÞ£ÿ: Failed to acquire dquot type 0 [ 440.107810][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.125492][T21844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6448'. [ 440.597625][T21874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6458'. [ 440.617359][T21880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=21880 comm=syz.0.6459 [ 440.900114][T21895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6463'. [ 441.244659][T21923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6472'. [ 441.354225][T21927] FAULT_INJECTION: forcing a failure. [ 441.354225][T21927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.367554][T21927] CPU: 1 UID: 0 PID: 21927 Comm: syz.6.6474 Not tainted syzkaller #0 PREEMPT(voluntary) [ 441.367607][T21927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 441.367621][T21927] Call Trace: [ 441.367629][T21927] [ 441.367638][T21927] __dump_stack+0x1d/0x30 [ 441.367718][T21927] dump_stack_lvl+0xe8/0x140 [ 441.367738][T21927] dump_stack+0x15/0x1b [ 441.367804][T21927] should_fail_ex+0x265/0x280 [ 441.367836][T21927] should_fail+0xb/0x20 [ 441.367856][T21927] should_fail_usercopy+0x1a/0x20 [ 441.367884][T21927] strncpy_from_user+0x25/0x230 [ 441.367983][T21927] ? kmem_cache_alloc_noprof+0x186/0x310 [ 441.368014][T21927] ? getname_flags+0x80/0x3b0 [ 441.368039][T21927] getname_flags+0xae/0x3b0 [ 441.368069][T21927] user_path_at+0x28/0x130 [ 441.368100][T21927] __se_sys_pivot_root+0xd0/0x710 [ 441.368143][T21927] __x64_sys_pivot_root+0x31/0x40 [ 441.368169][T21927] x64_sys_call+0x144/0x3000 [ 441.368198][T21927] do_syscall_64+0xd2/0x200 [ 441.368246][T21927] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 441.368283][T21927] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 441.368316][T21927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.368341][T21927] RIP: 0033:0x7f40559eeec9 [ 441.368361][T21927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.368429][T21927] RSP: 002b:00007f405444f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 441.368454][T21927] RAX: ffffffffffffffda RBX: 00007f4055c45fa0 RCX: 00007f40559eeec9 [ 441.368471][T21927] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 441.368489][T21927] RBP: 00007f405444f090 R08: 0000000000000000 R09: 0000000000000000 [ 441.368505][T21927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.368521][T21927] R13: 00007f4055c46038 R14: 00007f4055c45fa0 R15: 00007fff00c7b828 [ 441.368596][T21927] [ 441.639084][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6476'. [ 442.502158][ T8560] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.536702][ T8560] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.577342][ T8560] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.627313][ T8561] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.636421][T21958] lo speed is unknown, defaulting to 1000 [ 442.642595][T21964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6486'. [ 442.656224][T21965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6485'. [ 442.662176][T21958] lo speed is unknown, defaulting to 1000 [ 442.745113][T21965] loop4: detected capacity change from 0 to 512 [ 442.761868][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6488'. [ 442.772276][T21965] EXT4-fs: Ignoring removed mblk_io_submit option [ 442.822878][T21965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.874338][T21965] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.920348][T21958] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6485: corrupted xattr block 33: e_value out of bounds [ 442.954625][T21958] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 442.970806][T21958] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6485: corrupted xattr block 33: e_value out of bounds [ 442.996842][T21958] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 443.009191][T21958] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 443.025987][T21958] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.6485: corrupted xattr block 33: e_value out of bounds [ 443.040817][T21958] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 443.133102][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.176430][T21998] loop4: detected capacity change from 0 to 512 [ 443.693985][T21998] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6495: casefold flag without casefold feature [ 443.710231][T22006] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.725575][T21998] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6495: couldn't read orphan inode 15 (err -117) [ 443.759798][T21998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.812797][T22006] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.953155][T22006] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.029362][T22010] FAULT_INJECTION: forcing a failure. [ 444.029362][T22010] name failslab, interval 1, probability 0, space 0, times 0 [ 444.049767][T22010] CPU: 0 UID: 0 PID: 22010 Comm: syz.0.6499 Not tainted syzkaller #0 PREEMPT(voluntary) [ 444.049872][T22010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.049889][T22010] Call Trace: [ 444.049897][T22010] [ 444.049907][T22010] __dump_stack+0x1d/0x30 [ 444.049928][T22010] dump_stack_lvl+0xe8/0x140 [ 444.049949][T22010] dump_stack+0x15/0x1b [ 444.050032][T22010] should_fail_ex+0x265/0x280 [ 444.050092][T22010] ? audit_log_d_path+0x8d/0x150 [ 444.050117][T22010] should_failslab+0x8c/0xb0 [ 444.050144][T22010] __kmalloc_cache_noprof+0x4c/0x320 [ 444.050179][T22010] audit_log_d_path+0x8d/0x150 [ 444.050214][T22010] audit_log_d_path_exe+0x42/0x70 [ 444.050237][T22010] audit_log_task+0x1e9/0x250 [ 444.050273][T22010] audit_seccomp+0x61/0x100 [ 444.050323][T22010] ? __seccomp_filter+0x82d/0x1250 [ 444.050352][T22010] __seccomp_filter+0x83e/0x1250 [ 444.050383][T22010] ? read_tsc+0x9/0x20 [ 444.050399][T22010] ? ktime_get+0x1eb/0x210 [ 444.050500][T22010] ? lapic_next_event+0x11/0x20 [ 444.050578][T22010] ? clockevents_program_event+0x240/0x4e0 [ 444.050660][T22010] __secure_computing+0x82/0x150 [ 444.050694][T22010] syscall_trace_enter+0xcf/0x1e0 [ 444.050730][T22010] do_syscall_64+0xac/0x200 [ 444.050780][T22010] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 444.050861][T22010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.050890][T22010] RIP: 0033:0x7f0ef585eec9 [ 444.050911][T22010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.050996][T22010] RSP: 002b:00007f0ef42c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 444.051020][T22010] RAX: ffffffffffffffda RBX: 00007f0ef5ab5fa0 RCX: 00007f0ef585eec9 [ 444.051040][T22010] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000001 [ 444.051056][T22010] RBP: 00007f0ef42c7090 R08: 0000000000000000 R09: 0000000000000000 [ 444.051072][T22010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.051089][T22010] R13: 00007f0ef5ab6038 R14: 00007f0ef5ab5fa0 R15: 00007fffbc0c7f78 [ 444.051115][T22010] [ 444.289931][T22006] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.290880][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.334104][T22023] loop6: detected capacity change from 0 to 512 [ 444.340665][T22023] EXT4-fs: Ignoring removed nobh option [ 444.369629][T22023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.395014][T22023] ext4 filesystem being mounted at /597/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.707290][T22042] FAULT_INJECTION: forcing a failure. [ 444.707290][T22042] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 444.720635][T22042] CPU: 1 UID: 0 PID: 22042 Comm: syz.0.6509 Not tainted syzkaller #0 PREEMPT(voluntary) [ 444.720667][T22042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.720702][T22042] Call Trace: [ 444.720712][T22042] [ 444.720721][T22042] __dump_stack+0x1d/0x30 [ 444.720817][T22042] dump_stack_lvl+0xe8/0x140 [ 444.720843][T22042] dump_stack+0x15/0x1b [ 444.720865][T22042] should_fail_ex+0x265/0x280 [ 444.720896][T22042] should_fail_alloc_page+0xf2/0x100 [ 444.720923][T22042] __alloc_frozen_pages_noprof+0xff/0x360 [ 444.721007][T22042] alloc_pages_mpol+0xb3/0x250 [ 444.721043][T22042] vma_alloc_folio_noprof+0x1aa/0x300 [ 444.721076][T22042] handle_mm_fault+0xec2/0x2c20 [ 444.721163][T22042] ? __rcu_read_unlock+0x4f/0x70 [ 444.721255][T22042] do_user_addr_fault+0x3fe/0x1080 [ 444.721281][T22042] exc_page_fault+0x62/0xa0 [ 444.721372][T22042] asm_exc_page_fault+0x26/0x30 [ 444.721398][T22042] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 444.721425][T22042] Code: f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 444.721450][T22042] RSP: 0018:ffffc900024bfd50 EFLAGS: 00050206 [ 444.721471][T22042] RAX: ffff888116e26da0 RBX: 0000000000001000 RCX: 0000000000000200 [ 444.721488][T22042] RDX: 0000000000000000 RSI: ffff88810b0efe00 RDI: 0000200000005000 [ 444.721505][T22042] RBP: ffff88810b0ef000 R08: 00000000000008d4 R09: 0000000000000000 [ 444.721521][T22042] R10: 000188810b0ef000 R11: 000188810b0effff R12: 0000200000005200 [ 444.721538][T22042] R13: 00007ffffffff000 R14: 0000200000004200 R15: ffff88810b0ef000 [ 444.721562][T22042] _copy_to_user+0x7c/0xa0 [ 444.721604][T22042] pagemap_read+0x379/0x5e0 [ 444.721633][T22042] ? __pfx_pagemap_read+0x10/0x10 [ 444.721659][T22042] vfs_read+0x1a5/0x770 [ 444.721705][T22042] ? __fget_files+0x184/0x1c0 [ 444.721742][T22042] ? __rcu_read_unlock+0x4f/0x70 [ 444.721769][T22042] ? __fget_files+0x184/0x1c0 [ 444.721791][T22042] __x64_sys_pread64+0xfd/0x150 [ 444.721864][T22042] x64_sys_call+0x29e6/0x3000 [ 444.721946][T22042] do_syscall_64+0xd2/0x200 [ 444.721979][T22042] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 444.722012][T22042] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 444.722162][T22042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.722211][T22042] RIP: 0033:0x7f0ef585eec9 [ 444.722225][T22042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.722246][T22042] RSP: 002b:00007f0ef42c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 444.722267][T22042] RAX: ffffffffffffffda RBX: 00007f0ef5ab5fa0 RCX: 00007f0ef585eec9 [ 444.722280][T22042] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000005 [ 444.722292][T22042] RBP: 00007f0ef42c7090 R08: 0000000000000000 R09: 0000000000000000 [ 444.722308][T22042] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.722343][T22042] R13: 00007f0ef5ab6038 R14: 00007f0ef5ab5fa0 R15: 00007fffbc0c7f78 [ 444.722363][T22042] [ 445.069734][ T29] kauditd_printk_skb: 1587 callbacks suppressed [ 445.069754][ T29] audit: type=1326 audit(1759395036.067:21870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.0.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef585eec9 code=0x7ffc0000 [ 445.100788][ T29] audit: type=1326 audit(1759395036.067:21871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.0.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef585eec9 code=0x7ffc0000 [ 445.124871][ T29] audit: type=1326 audit(1759395036.077:21872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.0.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ef585eec9 code=0x7ffc0000 [ 445.148768][ T29] audit: type=1326 audit(1759395036.077:21873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.0.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef585eec9 code=0x7ffc0000 [ 445.172641][ T29] audit: type=1326 audit(1759395036.077:21874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.0.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ef585eec9 code=0x7ffc0000 [ 445.196247][ T29] audit: type=1326 audit(1759395036.077:21875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.0.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef585eec9 code=0x7ffc0000 [ 445.219891][ T29] audit: type=1326 audit(1759395036.077:21876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.0.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ef585eec9 code=0x7ffc0000 [ 445.253195][ T29] audit: type=1326 audit(1759395036.127:21877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.0.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef585eec9 code=0x7ffc0000 [ 445.277033][ T29] audit: type=1326 audit(1759395036.127:21878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.0.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f0ef585eec9 code=0x7ffc0000 [ 445.300734][ T29] audit: type=1326 audit(1759395036.127:21879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.0.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef585eec9 code=0x7ffc0000 [ 445.327245][T14516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.514994][T22067] __nla_validate_parse: 1 callbacks suppressed [ 445.515011][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6519'. [ 445.567085][T22048] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 445.577162][T22048] SELinux: failed to load policy [ 445.650696][T22082] loop4: detected capacity change from 0 to 512 [ 445.679336][T22082] EXT4-fs (loop4): too many log groups per flexible block group [ 445.688000][T22082] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 445.695186][T22082] EXT4-fs (loop4): mount failed [ 445.700741][T22071] lo speed is unknown, defaulting to 1000 [ 445.706961][T22071] lo speed is unknown, defaulting to 1000 [ 445.812067][T22071] chnl_net:caif_netlink_parms(): no params data found [ 445.857617][T22071] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.865102][T22071] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.872883][T22071] bridge_slave_0: entered allmulticast mode [ 445.879687][T22071] bridge_slave_0: entered promiscuous mode [ 445.886934][T22071] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.894122][T22071] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.901555][T22071] bridge_slave_1: entered allmulticast mode [ 445.908442][T22071] bridge_slave_1: entered promiscuous mode [ 445.930905][T22071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.946641][T22071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.979148][T22071] team0: Port device team_slave_0 added [ 445.988084][T22071] team0: Port device team_slave_1 added [ 446.013537][T22071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.020551][T22071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.046950][T22071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.064795][T22071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.071917][T22071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.098120][T22071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.133675][T22071] hsr_slave_0: entered promiscuous mode [ 446.140074][T22071] hsr_slave_1: entered promiscuous mode [ 446.148909][T22071] debugfs: 'hsr0' already exists in 'hsr' [ 446.155241][T22071] Cannot create hsr debugfs directory [ 446.272535][T22071] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.282643][T22071] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.292872][T22071] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.353183][T22071] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.363305][T22071] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.373108][T22071] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.424375][T22071] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.434401][T22071] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.444346][T22071] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.493918][T22071] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.503847][T22071] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.513737][T22071] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 446.573247][T22071] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 446.585707][T22071] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 446.595507][T22071] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 446.613429][T22071] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 446.653850][T22071] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.661062][T22071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.668459][T22071] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.675594][T22071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.682416][T22133] SELinux: failed to load policy [ 446.713576][T22071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.727069][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.737782][ T4233] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.775747][T22071] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.787356][T22141] IPVS: length: 24 != 696 [ 446.798777][ T4233] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.805898][ T4233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.821291][T22141] FAULT_INJECTION: forcing a failure. [ 446.821291][T22141] name failslab, interval 1, probability 0, space 0, times 0 [ 446.834064][T22141] CPU: 0 UID: 0 PID: 22141 Comm: syz.4.6538 Not tainted syzkaller #0 PREEMPT(voluntary) [ 446.834102][T22141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 446.834119][T22141] Call Trace: [ 446.834206][T22141] [ 446.834216][T22141] __dump_stack+0x1d/0x30 [ 446.834244][T22141] dump_stack_lvl+0xe8/0x140 [ 446.834272][T22141] dump_stack+0x15/0x1b [ 446.834295][T22141] should_fail_ex+0x265/0x280 [ 446.834326][T22141] should_failslab+0x8c/0xb0 [ 446.834397][T22141] kmem_cache_alloc_noprof+0x50/0x310 [ 446.834499][T22141] ? audit_log_start+0x342/0x720 [ 446.834554][T22141] audit_log_start+0x342/0x720 [ 446.834623][T22141] ? kstrtouint+0x76/0xc0 [ 446.834719][T22141] audit_seccomp+0x48/0x100 [ 446.834756][T22141] ? __seccomp_filter+0x82d/0x1250 [ 446.834788][T22141] __seccomp_filter+0x83e/0x1250 [ 446.834827][T22141] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 446.834892][T22141] ? vfs_write+0x7e8/0x960 [ 446.834934][T22141] ? __rcu_read_unlock+0x4f/0x70 [ 446.834965][T22141] ? __fget_files+0x184/0x1c0 [ 446.834992][T22141] __secure_computing+0x82/0x150 [ 446.835025][T22141] syscall_trace_enter+0xcf/0x1e0 [ 446.835092][T22141] do_syscall_64+0xac/0x200 [ 446.835135][T22141] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 446.835168][T22141] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 446.835267][T22141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.835322][T22141] RIP: 0033:0x7f178e99eec9 [ 446.835342][T22141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.835368][T22141] RSP: 002b:00007f178d3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 446.835394][T22141] RAX: ffffffffffffffda RBX: 00007f178ebf5fa0 RCX: 00007f178e99eec9 [ 446.835412][T22141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 446.835502][T22141] RBP: 00007f178d3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 446.835519][T22141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.835542][T22141] R13: 00007f178ebf6038 R14: 00007f178ebf5fa0 R15: 00007ffc0c64e588 [ 446.835567][T22141] [ 447.059996][T22146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6535'. [ 447.071960][ T4233] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.079139][ T4233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.100125][T22071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 447.110698][T22071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.171999][T22155] loop4: detected capacity change from 0 to 512 [ 447.179653][T22152] IPVS: length: 24 != 696 [ 447.185964][T22155] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6542: casefold flag without casefold feature [ 447.201197][T22155] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6542: couldn't read orphan inode 15 (err -117) [ 447.217092][T22155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.246596][T22071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.341232][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6543'. [ 447.351000][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6543'. [ 447.364072][T22165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6543'. [ 447.436447][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.515594][T22071] veth0_vlan: entered promiscuous mode [ 447.526812][T22071] veth1_vlan: entered promiscuous mode [ 447.548193][T22071] veth0_macvtap: entered promiscuous mode [ 447.559113][T22071] veth1_macvtap: entered promiscuous mode [ 447.580349][T22071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.596146][T22071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.611002][ T4233] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.631679][T22182] SELinux: policydb version -2101306585 does not match my version range 15-35 [ 447.642837][T22182] SELinux: failed to load policy [ 447.648566][ T4233] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.669066][ T4233] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.692686][ T4227] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.710438][ T4227] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.734546][ T4227] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.743677][ T4233] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.773709][ T4233] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.996581][T22195] netlink: 'syz.2.6551': attribute type 13 has an invalid length. [ 448.004744][T22195] netlink: 'syz.2.6551': attribute type 27 has an invalid length. [ 448.974071][T22213] netlink: 'syz.6.6559': attribute type 4 has an invalid length. [ 448.981950][T22213] netlink: 17 bytes leftover after parsing attributes in process `syz.6.6559'. [ 449.107891][T22226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22226 comm=syz.6.6562 [ 449.133578][T22228] openvswitch: netlink: Flow key attr not present in new flow. [ 449.196905][T22236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6566'. [ 449.202647][T22232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22232 comm=syz.1.6566 [ 449.278002][T22240] openvswitch: netlink: Flow key attr not present in new flow. [ 449.307592][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6571'. [ 449.317265][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6571'. [ 449.444929][T22250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.453787][T22250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.602269][T22139] geneve0: entered allmulticast mode [ 449.650671][T22257] FAULT_INJECTION: forcing a failure. [ 449.650671][T22257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.664408][T22257] CPU: 1 UID: 0 PID: 22257 Comm: syz.0.6576 Not tainted syzkaller #0 PREEMPT(voluntary) [ 449.664444][T22257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 449.664461][T22257] Call Trace: [ 449.664468][T22257] [ 449.664478][T22257] __dump_stack+0x1d/0x30 [ 449.664520][T22257] dump_stack_lvl+0xe8/0x140 [ 449.664545][T22257] dump_stack+0x15/0x1b [ 449.664567][T22257] should_fail_ex+0x265/0x280 [ 449.664647][T22257] should_fail+0xb/0x20 [ 449.664667][T22257] should_fail_usercopy+0x1a/0x20 [ 449.664697][T22257] _copy_from_user+0x1c/0xb0 [ 449.664764][T22257] ___sys_sendmsg+0xc1/0x1d0 [ 449.664829][T22257] __x64_sys_sendmsg+0xd4/0x160 [ 449.664864][T22257] x64_sys_call+0x191e/0x3000 [ 449.664886][T22257] do_syscall_64+0xd2/0x200 [ 449.664931][T22257] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 449.665026][T22257] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 449.665105][T22257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.665204][T22257] RIP: 0033:0x7f0ef585eec9 [ 449.665223][T22257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.665249][T22257] RSP: 002b:00007f0ef42c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.665274][T22257] RAX: ffffffffffffffda RBX: 00007f0ef5ab5fa0 RCX: 00007f0ef585eec9 [ 449.665288][T22257] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 449.665304][T22257] RBP: 00007f0ef42c7090 R08: 0000000000000000 R09: 0000000000000000 [ 449.665320][T22257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.665342][T22257] R13: 00007f0ef5ab6038 R14: 00007f0ef5ab5fa0 R15: 00007fffbc0c7f78 [ 449.665401][T22257] [ 449.950829][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6584'. [ 449.960605][T22275] 9pnet_fd: Insufficient options for proto=fd [ 450.077227][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 450.077241][ T29] audit: type=1400 audit(1759395041.077:22142): avc: denied { sys_module } for pid=22284 comm="syz.1.6590" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 450.175688][T22297] FAULT_INJECTION: forcing a failure. [ 450.175688][T22297] name failslab, interval 1, probability 0, space 0, times 0 [ 450.188466][T22297] CPU: 0 UID: 0 PID: 22297 Comm: syz.0.6591 Not tainted syzkaller #0 PREEMPT(voluntary) [ 450.188531][T22297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 450.188549][T22297] Call Trace: [ 450.188559][T22297] [ 450.188570][T22297] __dump_stack+0x1d/0x30 [ 450.188599][T22297] dump_stack_lvl+0xe8/0x140 [ 450.188667][T22297] dump_stack+0x15/0x1b [ 450.188689][T22297] should_fail_ex+0x265/0x280 [ 450.188760][T22297] should_failslab+0x8c/0xb0 [ 450.188788][T22297] kmem_cache_alloc_noprof+0x50/0x310 [ 450.188842][T22297] ? getname_flags+0x80/0x3b0 [ 450.188874][T22297] getname_flags+0x80/0x3b0 [ 450.188903][T22297] user_path_at+0x28/0x130 [ 450.188973][T22297] __se_sys_mount+0x25b/0x2e0 [ 450.189016][T22297] ? fput+0x8f/0xc0 [ 450.189205][T22297] __x64_sys_mount+0x67/0x80 [ 450.189248][T22297] x64_sys_call+0x2b51/0x3000 [ 450.189273][T22297] do_syscall_64+0xd2/0x200 [ 450.189312][T22297] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 450.189390][T22297] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 450.189422][T22297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.189444][T22297] RIP: 0033:0x7f0ef585eec9 [ 450.189463][T22297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.189492][T22297] RSP: 002b:00007f0ef42c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 450.189512][T22297] RAX: ffffffffffffffda RBX: 00007f0ef5ab5fa0 RCX: 00007f0ef585eec9 [ 450.189529][T22297] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 450.189545][T22297] RBP: 00007f0ef42c7090 R08: 0000200000000600 R09: 0000000000000000 [ 450.189562][T22297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.189629][T22297] R13: 00007f0ef5ab6038 R14: 00007f0ef5ab5fa0 R15: 00007fffbc0c7f78 [ 450.189649][T22297] [ 450.408131][T22277] loop6: detected capacity change from 0 to 256 [ 450.430025][ T29] audit: type=1326 audit(1759395041.427:22143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22305 comm="syz.4.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 450.453797][ T29] audit: type=1326 audit(1759395041.427:22144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22305 comm="syz.4.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 450.483236][T22277] FAT-fs (loop6): bogus number of FAT sectors [ 450.489895][T22277] FAT-fs (loop6): Can't find a valid FAT filesystem [ 450.509388][ T29] audit: type=1326 audit(1759395041.487:22145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22305 comm="syz.4.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 450.533332][ T29] audit: type=1326 audit(1759395041.487:22146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22305 comm="syz.4.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 450.556971][ T29] audit: type=1326 audit(1759395041.487:22147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22305 comm="syz.4.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 450.580636][ T29] audit: type=1326 audit(1759395041.487:22148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22305 comm="syz.4.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 450.604293][ T29] audit: type=1326 audit(1759395041.487:22149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22305 comm="syz.4.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 450.627953][ T29] audit: type=1326 audit(1759395041.487:22150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22305 comm="syz.4.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 450.651710][ T29] audit: type=1326 audit(1759395041.487:22151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22305 comm="syz.4.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 450.669296][T22316] FAULT_INJECTION: forcing a failure. [ 450.669296][T22316] name failslab, interval 1, probability 0, space 0, times 0 [ 450.688193][T22316] CPU: 1 UID: 0 PID: 22316 Comm: syz.0.6598 Not tainted syzkaller #0 PREEMPT(voluntary) [ 450.688239][T22316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 450.688307][T22316] Call Trace: [ 450.688316][T22316] [ 450.688327][T22316] __dump_stack+0x1d/0x30 [ 450.688356][T22316] dump_stack_lvl+0xe8/0x140 [ 450.688382][T22316] dump_stack+0x15/0x1b [ 450.688404][T22316] should_fail_ex+0x265/0x280 [ 450.688434][T22316] should_failslab+0x8c/0xb0 [ 450.688501][T22316] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 450.688536][T22316] ? sidtab_sid2str_get+0xa0/0x130 [ 450.688580][T22316] kmemdup_noprof+0x2b/0x70 [ 450.688607][T22316] sidtab_sid2str_get+0xa0/0x130 [ 450.688713][T22316] security_sid_to_context_core+0x1eb/0x2e0 [ 450.688755][T22316] security_sid_to_context+0x27/0x40 [ 450.688799][T22316] avc_audit_post_callback+0x10f/0x520 [ 450.688827][T22316] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 450.688856][T22316] common_lsm_audit+0x1bb/0x230 [ 450.688893][T22316] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 450.688966][T22316] slow_avc_audit+0x104/0x140 [ 450.689041][T22316] audit_inode_permission+0x111/0x150 [ 450.689128][T22316] selinux_inode_permission+0x69b/0x740 [ 450.689173][T22316] security_inode_permission+0x6d/0xb0 [ 450.689221][T22316] inode_permission+0x106/0x310 [ 450.689256][T22316] ? may_open+0x1ee/0x350 [ 450.689291][T22316] may_open+0x255/0x350 [ 450.689326][T22316] path_openat+0x1b4a/0x2170 [ 450.689419][T22316] do_filp_open+0x109/0x230 [ 450.689464][T22316] do_sys_openat2+0xa6/0x110 [ 450.689500][T22316] __x64_sys_openat+0xf2/0x120 [ 450.689535][T22316] x64_sys_call+0x2eab/0x3000 [ 450.689578][T22316] do_syscall_64+0xd2/0x200 [ 450.689623][T22316] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 450.689656][T22316] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 450.689743][T22316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.689771][T22316] RIP: 0033:0x7f0ef585eec9 [ 450.689790][T22316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.689815][T22316] RSP: 002b:00007f0ef42a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 450.689839][T22316] RAX: ffffffffffffffda RBX: 00007f0ef5ab6090 RCX: 00007f0ef585eec9 [ 450.689855][T22316] RDX: 0000000000002042 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 450.689937][T22316] RBP: 00007f0ef42a6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.689991][T22316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.690007][T22316] R13: 00007f0ef5ab6128 R14: 00007f0ef5ab6090 R15: 00007fffbc0c7f78 [ 450.690031][T22316] [ 450.694649][T22314] __nla_validate_parse: 1 callbacks suppressed [ 450.694669][T22314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6597'. [ 450.815847][T22318] loop6: detected capacity change from 0 to 4096 [ 450.951819][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6597'. [ 451.014004][T22318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.128939][T22327] netlink: 'syz.1.6601': attribute type 1 has an invalid length. [ 451.158608][T22337] SELinux: failed to load policy [ 451.173608][T22277] geneve0: entered allmulticast mode [ 451.232359][T22327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.239693][T22071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.264243][T22342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6606'. [ 451.285650][T22347] loop6: detected capacity change from 0 to 512 [ 451.295651][T22347] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.6607: casefold flag without casefold feature [ 451.311354][T22347] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6607: couldn't read orphan inode 15 (err -117) [ 451.326162][T22347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.361710][T22353] gre1: entered allmulticast mode [ 451.371204][T22353] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6610'. [ 451.437822][T22071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.505718][T22373] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 451.505718][T22373] [ 451.520331][T22372] lo speed is unknown, defaulting to 1000 [ 451.520696][T22372] lo speed is unknown, defaulting to 1000 [ 451.559268][T22375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6619'. [ 451.562983][T22375] loop6: detected capacity change from 0 to 512 [ 451.563271][T22375] EXT4-fs: Ignoring removed mblk_io_submit option [ 451.577757][T22375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.577830][T22375] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.578786][T22375] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.6619: corrupted xattr block 33: e_value out of bounds [ 451.579437][T22375] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 451.579465][T22375] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.6619: corrupted xattr block 33: e_value out of bounds [ 451.581016][T22375] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 451.585929][T22375] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 451.586146][T22375] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2962: inode #15: comm syz.6.6619: corrupted xattr block 33: e_value out of bounds [ 451.588108][T22375] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 451.748551][T22071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.806205][T22377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6620'. [ 451.827840][T22377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6620'. [ 451.870627][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6623'. [ 451.891906][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6623'. [ 451.954497][T22394] loop4: detected capacity change from 0 to 512 [ 452.004694][T22394] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6626: casefold flag without casefold feature [ 452.037848][T22394] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6626: couldn't read orphan inode 15 (err -117) [ 452.061089][T22404] loop6: detected capacity change from 0 to 128 [ 452.080035][T22394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.105695][T22404] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 452.137388][T22404] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 452.184543][T22071] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.235507][T22416] lo speed is unknown, defaulting to 1000 [ 452.245648][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.272501][T22416] lo speed is unknown, defaulting to 1000 [ 452.292047][T22418] openvswitch: netlink: Message has 6 unknown bytes. [ 452.323077][T22419] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6633'. [ 452.349198][T22419] loop6: detected capacity change from 0 to 512 [ 452.369531][T22419] EXT4-fs: Ignoring removed mblk_io_submit option [ 452.385008][T22419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.401775][T22419] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.422366][T22419] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.6633: corrupted xattr block 33: e_value out of bounds [ 452.450473][T22419] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 452.459837][T22419] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.6633: corrupted xattr block 33: e_value out of bounds [ 452.486364][T22419] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 452.496137][T22419] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 452.511049][T22419] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2962: inode #15: comm syz.6.6633: corrupted xattr block 33: e_value out of bounds [ 452.526333][T22419] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 452.590168][T22071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.601929][ T9318] IPVS: starting estimator thread 0... [ 452.668698][T22446] loop6: detected capacity change from 0 to 512 [ 452.696767][T22443] IPVS: using max 2256 ests per chain, 112800 per kthread [ 452.712978][T22446] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.6642: casefold flag without casefold feature [ 452.735940][T22446] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6642: couldn't read orphan inode 15 (err -117) [ 452.766278][T22446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.784358][T22454] 9pnet_fd: Insufficient options for proto=fd [ 452.841902][T22459] wireguard0: entered promiscuous mode [ 452.847451][T22459] wireguard0: entered allmulticast mode [ 452.878476][T22463] serio: Serial port ptm1 [ 452.915176][T22071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.991172][T22459] IPVS: Error joining to the multicast group [ 453.019737][T22478] openvswitch: netlink: Message has 6 unknown bytes. [ 453.124168][T22490] loop4: detected capacity change from 0 to 512 [ 453.132365][T22490] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6660: casefold flag without casefold feature [ 453.147622][T22490] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6660: couldn't read orphan inode 15 (err -117) [ 453.161495][T22490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.333965][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.375378][T22515] program syz.2.6669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.502885][T22514] loop6: detected capacity change from 0 to 8192 [ 453.521793][T22530] lo speed is unknown, defaulting to 1000 [ 453.534681][T22530] lo speed is unknown, defaulting to 1000 [ 454.354973][T22589] SELinux: failed to load policy [ 454.479517][T22604] lo speed is unknown, defaulting to 1000 [ 454.487186][T22604] lo speed is unknown, defaulting to 1000 [ 454.495638][T22608] FAULT_INJECTION: forcing a failure. [ 454.495638][T22608] name failslab, interval 1, probability 0, space 0, times 0 [ 454.500606][T22610] loop6: detected capacity change from 0 to 512 [ 454.508507][T22608] CPU: 1 UID: 0 PID: 22608 Comm: syz.2.6702 Not tainted syzkaller #0 PREEMPT(voluntary) [ 454.508543][T22608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.508562][T22608] Call Trace: [ 454.508573][T22608] [ 454.508584][T22608] __dump_stack+0x1d/0x30 [ 454.508616][T22608] dump_stack_lvl+0xe8/0x140 [ 454.508698][T22608] dump_stack+0x15/0x1b [ 454.508723][T22608] should_fail_ex+0x265/0x280 [ 454.508757][T22608] should_failslab+0x8c/0xb0 [ 454.508785][T22608] kmem_cache_alloc_noprof+0x50/0x310 [ 454.508836][T22608] ? alloc_empty_file+0x76/0x200 [ 454.508876][T22608] alloc_empty_file+0x76/0x200 [ 454.508912][T22608] alloc_file_pseudo+0xc6/0x160 [ 454.508950][T22608] sock_alloc_file+0x9c/0x1e0 [ 454.509077][T22608] __sys_socketpair+0x23d/0x430 [ 454.509106][T22608] __x64_sys_socketpair+0x52/0x60 [ 454.509179][T22608] x64_sys_call+0x2bf6/0x3000 [ 454.509280][T22608] do_syscall_64+0xd2/0x200 [ 454.509326][T22608] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 454.509365][T22608] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 454.509482][T22608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.509512][T22608] RIP: 0033:0x7fae23760e1a [ 454.509535][T22608] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.509562][T22608] RSP: 002b:00007fae221bef78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 454.509595][T22608] RAX: ffffffffffffffda RBX: 00007fae239b5f00 RCX: 00007fae23760e1a [ 454.509613][T22608] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 454.509631][T22608] RBP: 00007fae221bf090 R08: 0000000000000000 R09: 0000000000000000 [ 454.509649][T22608] R10: 00007fae221bef98 R11: 0000000000000246 R12: 0000000000000002 [ 454.509667][T22608] R13: 00007fae239b6038 R14: 00007fae239b5fa0 R15: 00007ffe07488738 [ 454.509697][T22608] [ 454.708683][T22610] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 454.718645][T22604] loop4: detected capacity change from 0 to 512 [ 454.731908][T22604] EXT4-fs: Ignoring removed mblk_io_submit option [ 454.766601][T22604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.783689][T22618] 9pnet_fd: Insufficient options for proto=fd [ 454.796265][T22604] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.832814][T22604] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6701: corrupted xattr block 33: e_value out of bounds [ 454.872138][T22604] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 454.902797][T22604] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6701: corrupted xattr block 33: e_value out of bounds [ 454.935007][T22604] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 454.946300][T22604] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 454.964072][T22604] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.6701: corrupted xattr block 33: e_value out of bounds [ 454.979094][T22604] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 455.011449][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.025957][T22630] SELinux: failed to load policy [ 455.119818][T22642] loop4: detected capacity change from 0 to 512 [ 455.139485][T22642] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 455.186357][T22646] hsr_slave_0: left promiscuous mode [ 455.192585][T22646] hsr_slave_1: left promiscuous mode [ 455.297972][T22650] 9pnet_fd: Insufficient options for proto=fd [ 455.315389][T22632] loop6: detected capacity change from 0 to 256 [ 455.371242][ T29] kauditd_printk_skb: 751 callbacks suppressed [ 455.371261][ T29] audit: type=1326 audit(1759395046.367:22901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 455.372406][T22632] FAT-fs (loop6): bogus number of FAT sectors [ 455.379009][ T29] audit: type=1326 audit(1759395046.377:22902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 455.404369][T22632] FAT-fs (loop6): Can't find a valid FAT filesystem [ 455.437869][ T29] audit: type=1326 audit(1759395046.407:22903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 455.463028][ T29] audit: type=1326 audit(1759395046.407:22904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 455.487273][ T29] audit: type=1326 audit(1759395046.407:22905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 455.511010][ T29] audit: type=1326 audit(1759395046.407:22906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 455.534718][ T29] audit: type=1326 audit(1759395046.407:22907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 455.558596][ T29] audit: type=1326 audit(1759395046.407:22908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 455.582259][ T29] audit: type=1326 audit(1759395046.407:22909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 455.605983][ T29] audit: type=1326 audit(1759395046.407:22910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 455.637305][T22669] loop6: detected capacity change from 0 to 4096 [ 455.650203][T22666] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20003 [ 455.654030][T22669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.783949][T22676] SELinux: failed to load policy [ 455.828337][T22071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.961047][T22693] 9pnet_fd: Insufficient options for proto=fd [ 456.104556][T22703] __nla_validate_parse: 26 callbacks suppressed [ 456.104576][T22703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6736'. [ 456.162731][T22703] hsr_slave_0: left promiscuous mode [ 456.174035][T22703] hsr_slave_1: left promiscuous mode [ 456.209780][T22710] SELinux: failed to load policy [ 456.446747][T22722] 9pnet_fd: Insufficient options for proto=fd [ 456.554878][T22706] loop6: detected capacity change from 0 to 256 [ 456.575506][T22706] FAT-fs (loop6): bogus number of FAT sectors [ 456.582186][T22706] FAT-fs (loop6): Can't find a valid FAT filesystem [ 456.673140][T22732] usb usb1: usbfs: process 22732 (syz.2.6750) did not claim interface 0 before use [ 456.783387][T22740] SELinux: failed to load policy [ 456.823767][T22749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6756'. [ 456.832704][T22749] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6756'. [ 456.869261][T22751] 9pnet_fd: Insufficient options for proto=fd [ 456.907767][T22755] loop4: detected capacity change from 0 to 512 [ 456.924726][T22755] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 456.973565][T22755] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.055242][T22755] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.120661][T22755] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.141195][T22773] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22773 comm=syz.0.6766 [ 457.205933][T22755] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.253279][T22775] SELinux: failed to load policy [ 457.262677][ T8561] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.289043][ T8561] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.315906][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6768'. [ 457.324748][ T8561] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.324941][T22778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6768'. [ 457.348057][T22778] wireguard0: entered promiscuous mode [ 457.353714][T22778] wireguard0: entered allmulticast mode [ 457.361730][ T8561] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.397869][T22781] loop4: detected capacity change from 0 to 512 [ 457.435792][T22781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.482667][T22789] syzkaller1: entered promiscuous mode [ 457.488252][T22789] syzkaller1: entered allmulticast mode [ 457.504885][T22787] 9pnet_fd: Insufficient options for proto=fd [ 457.601081][T22795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6774'. [ 457.625733][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.697588][T22801] loop4: detected capacity change from 0 to 512 [ 457.715417][T22801] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 457.845787][T22814] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6782'. [ 457.856247][T22814] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6782'. [ 458.819221][T22836] SELinux: failed to load policy [ 458.892268][T22828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6785'. [ 458.991146][T22842] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6795'. [ 459.222531][T22865] loop4: detected capacity change from 0 to 512 [ 459.245348][T22865] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 459.268558][T22861] SELinux: failed to load policy [ 459.374590][T22889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.383867][T22889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.550894][T22901] loop4: detected capacity change from 0 to 512 [ 459.559645][T22901] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6818: casefold flag without casefold feature [ 459.573168][T22901] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6818: couldn't read orphan inode 15 (err -117) [ 459.587367][T22901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.685034][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.878600][T22910] SELinux: failed to load policy [ 459.948468][T22916] vhci_hcd: default hub control req: 2317 v0014 i0000 l0 [ 460.046195][T22925] lo speed is unknown, defaulting to 1000 [ 460.061711][T22925] lo speed is unknown, defaulting to 1000 [ 460.107301][T22927] loop4: detected capacity change from 0 to 512 [ 460.122090][T22927] EXT4-fs: Ignoring removed mblk_io_submit option [ 460.159356][T22927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.176703][T22929] lo speed is unknown, defaulting to 1000 [ 460.182561][T22927] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.195561][T22929] lo speed is unknown, defaulting to 1000 [ 460.260296][T22925] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6828: corrupted xattr block 33: e_value out of bounds [ 460.285666][T22925] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 460.308726][T22925] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6828: corrupted xattr block 33: e_value out of bounds [ 460.315280][T22932] 8021q: VLANs not supported on vcan0 [ 460.326432][T22925] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 460.337958][T22925] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 460.352493][T22932] netlink: 'syz.2.6829': attribute type 1 has an invalid length. [ 460.357193][T22925] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.6828: corrupted xattr block 33: e_value out of bounds [ 460.375207][T22925] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 460.404330][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.457610][T22944] SELinux: failed to load policy [ 460.612654][T22963] netlink: 'syz.0.6843': attribute type 4 has an invalid length. [ 460.799026][T22977] SELinux: failed to load policy [ 460.891203][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 460.891223][ T29] audit: type=1326 audit(1759395051.887:23286): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22987 comm="syz.1.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518be3eec9 code=0x7ffc0000 [ 460.926034][ T29] audit: type=1326 audit(1759395051.927:23287): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22987 comm="syz.1.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f518be3eec9 code=0x7ffc0000 [ 460.954767][ T29] audit: type=1326 audit(1759395051.957:23288): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22987 comm="syz.1.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518be3eec9 code=0x7ffc0000 [ 461.060186][ T29] audit: type=1326 audit(1759395052.057:23289): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22994 comm="syz.1.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518be3eec9 code=0x7ffc0000 [ 461.086982][ T29] audit: type=1326 audit(1759395052.087:23290): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22994 comm="syz.1.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f518be3eec9 code=0x7ffc0000 [ 461.113916][ T29] audit: type=1326 audit(1759395052.117:23291): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22994 comm="syz.1.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518be3eec9 code=0x7ffc0000 [ 461.140476][ T29] audit: type=1326 audit(1759395052.147:23292): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22994 comm="syz.1.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f518be3eec9 code=0x7ffc0000 [ 461.167831][ T29] audit: type=1326 audit(1759395052.167:23293): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22994 comm="syz.1.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518be3eec9 code=0x7ffc0000 [ 461.216026][ T29] audit: type=1400 audit(1759395052.217:23294): avc: denied { bind } for pid=22996 comm="syz.1.6856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 461.240021][ T29] audit: type=1400 audit(1759395052.237:23295): avc: denied { ioctl } for pid=22996 comm="syz.1.6856" path="socket:[85451]" dev="sockfs" ino=85451 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 461.533009][T23011] loop6: detected capacity change from 0 to 128 [ 461.884858][T23020] 9pnet_fd: Insufficient options for proto=fd [ 462.145301][T23022] lo speed is unknown, defaulting to 1000 [ 462.159403][T23022] lo speed is unknown, defaulting to 1000 [ 462.168750][T23023] 8021q: VLANs not supported on vcan0 [ 462.176059][ T8560] bio_check_eod: 98 callbacks suppressed [ 462.176077][ T8560] kworker/u8:26: attempt to access beyond end of device [ 462.176077][ T8560] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 462.198494][T23027] __nla_validate_parse: 8 callbacks suppressed [ 462.198509][T23027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6868'. [ 462.207762][T23023] netlink: 'syz.4.6866': attribute type 1 has an invalid length. [ 462.221652][T23023] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.6866'. [ 462.232286][ T8560] kworker/u8:26: attempt to access beyond end of device [ 462.232286][ T8560] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 462.245945][ T8560] kworker/u8:26: attempt to access beyond end of device [ 462.245945][ T8560] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 462.270006][ T8560] kworker/u8:26: attempt to access beyond end of device [ 462.270006][ T8560] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 462.275699][T23025] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6865'. [ 462.294944][ T8560] kworker/u8:26: attempt to access beyond end of device [ 462.294944][ T8560] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 462.308682][ T8560] kworker/u8:26: attempt to access beyond end of device [ 462.308682][ T8560] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 462.309110][T23025] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6865'. [ 462.324757][ T8560] kworker/u8:26: attempt to access beyond end of device [ 462.324757][ T8560] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 462.350814][ T8560] kworker/u8:26: attempt to access beyond end of device [ 462.350814][ T8560] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 462.364879][ T8560] kworker/u8:26: attempt to access beyond end of device [ 462.364879][ T8560] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 462.431153][ T8560] kworker/u8:26: attempt to access beyond end of device [ 462.431153][ T8560] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 462.528572][T23049] SELinux: failed to load policy [ 462.580710][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6875'. [ 462.654038][T23059] sctp: [Deprecated]: syz.4.6878 (pid 23059) Use of int in max_burst socket option. [ 462.654038][T23059] Use struct sctp_assoc_value instead [ 462.850189][T23062] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6880'. [ 462.894880][T23064] FAULT_INJECTION: forcing a failure. [ 462.894880][T23064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.908116][T23064] CPU: 0 UID: 0 PID: 23064 Comm: syz.6.6881 Not tainted syzkaller #0 PREEMPT(voluntary) [ 462.908185][T23064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.908197][T23064] Call Trace: [ 462.908203][T23064] [ 462.908210][T23064] __dump_stack+0x1d/0x30 [ 462.908231][T23064] dump_stack_lvl+0xe8/0x140 [ 462.908274][T23064] dump_stack+0x15/0x1b [ 462.908289][T23064] should_fail_ex+0x265/0x280 [ 462.908310][T23064] should_fail+0xb/0x20 [ 462.908381][T23064] should_fail_usercopy+0x1a/0x20 [ 462.908403][T23064] _copy_from_user+0x1c/0xb0 [ 462.908429][T23064] ___sys_recvmsg+0xaa/0x370 [ 462.908464][T23064] do_recvmmsg+0x1ef/0x540 [ 462.908499][T23064] ? fput+0x8f/0xc0 [ 462.908524][T23064] __x64_sys_recvmmsg+0xe5/0x170 [ 462.908593][T23064] x64_sys_call+0x27aa/0x3000 [ 462.908614][T23064] do_syscall_64+0xd2/0x200 [ 462.908644][T23064] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 462.908718][T23064] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 462.908745][T23064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.908788][T23064] RIP: 0033:0x7f7cec04eec9 [ 462.908804][T23064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.908822][T23064] RSP: 002b:00007f7ceaaaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 462.908921][T23064] RAX: ffffffffffffffda RBX: 00007f7cec2a5fa0 RCX: 00007f7cec04eec9 [ 462.908933][T23064] RDX: 000000000000074e RSI: 0000200000001140 RDI: 0000000000000005 [ 462.908944][T23064] RBP: 00007f7ceaaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 462.908955][T23064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.908967][T23064] R13: 00007f7cec2a6038 R14: 00007f7cec2a5fa0 R15: 00007ffe587abe88 [ 462.908984][T23064] [ 463.103942][T23066] 9pnet_fd: Insufficient options for proto=fd [ 463.188383][T23072] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6885'. [ 463.197671][T23072] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6885'. [ 463.239510][T23076] SELinux: failed to load policy [ 463.463580][T23095] 9pnet_fd: Insufficient options for proto=fd [ 463.627740][T23105] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6897'. [ 463.637244][T23105] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6897'. [ 463.711238][T23113] SELinux: failed to load policy [ 464.179126][T23132] 9pnet_fd: Insufficient options for proto=fd [ 464.298771][T23143] SELinux: failed to load policy [ 464.594058][T23170] 9pnet_fd: Insufficient options for proto=fd [ 464.716448][T23181] SELinux: failed to load policy [ 464.928115][T23186] loop4: detected capacity change from 0 to 512 [ 464.936255][T23186] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6931: casefold flag without casefold feature [ 464.959060][T23186] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6931: couldn't read orphan inode 15 (err -117) [ 464.985567][T23186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.136969][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.189793][T23199] 9pnet_fd: Insufficient options for proto=fd [ 465.231276][T23203] netlink: 'syz.1.6937': attribute type 4 has an invalid length. [ 465.341737][T23209] loop4: detected capacity change from 0 to 1024 [ 465.369677][T23209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.406125][T23209] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6940: Allocating blocks 449-513 which overlap fs metadata [ 465.450273][T23208] EXT4-fs (loop4): pa ffff888107261f50: logic 48, phys. 177, len 21 [ 465.458464][T23208] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 465.481380][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.801938][T23230] 9pnet_fd: Insufficient options for proto=fd [ 466.174639][T23259] SELinux: failed to load policy [ 466.225753][T23264] 9pnet_fd: Insufficient options for proto=fd [ 466.352735][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 466.352752][ T29] audit: type=1326 audit(1759395057.357:23528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23271 comm="syz.6.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cec04eec9 code=0x7ffc0000 [ 466.383475][ T29] audit: type=1326 audit(1759395057.357:23529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23271 comm="syz.6.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cec04eec9 code=0x7ffc0000 [ 466.434710][ T29] audit: type=1326 audit(1759395057.417:23530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23271 comm="syz.6.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f7cec04eec9 code=0x7ffc0000 [ 466.458581][ T29] audit: type=1326 audit(1759395057.417:23531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23271 comm="syz.6.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cec04eec9 code=0x7ffc0000 [ 466.482571][ T29] audit: type=1326 audit(1759395057.417:23532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23271 comm="syz.6.6966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cec04eec9 code=0x7ffc0000 [ 466.562156][T23278] loop6: detected capacity change from 0 to 128 [ 466.644975][ T29] audit: type=1400 audit(1759395057.647:23533): avc: denied { write } for pid=23277 comm="syz.6.6968" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 466.840351][ T29] audit: type=1326 audit(1759395057.837:23534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.4.6970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 466.864430][ T29] audit: type=1326 audit(1759395057.837:23535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.4.6970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 466.888224][ T29] audit: type=1326 audit(1759395057.837:23536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.4.6970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 466.911964][ T29] audit: type=1326 audit(1759395057.837:23537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.4.6970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178e99eec9 code=0x7ffc0000 [ 466.964870][T23284] netlink: 'syz.4.6970': attribute type 12 has an invalid length. [ 467.390924][T23294] 9pnet_fd: Insufficient options for proto=fd [ 467.532171][ T4227] bio_check_eod: 101 callbacks suppressed [ 467.532186][ T4227] kworker/u8:11: attempt to access beyond end of device [ 467.532186][ T4227] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 467.577748][ T4227] kworker/u8:11: attempt to access beyond end of device [ 467.577748][ T4227] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 467.595119][ T4227] kworker/u8:11: attempt to access beyond end of device [ 467.595119][ T4227] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 467.609646][ T4227] kworker/u8:11: attempt to access beyond end of device [ 467.609646][ T4227] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 467.626764][ T4227] kworker/u8:11: attempt to access beyond end of device [ 467.626764][ T4227] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 467.643698][ T4227] kworker/u8:11: attempt to access beyond end of device [ 467.643698][ T4227] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 467.667148][ T4227] kworker/u8:11: attempt to access beyond end of device [ 467.667148][ T4227] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 467.685045][ T4227] kworker/u8:11: attempt to access beyond end of device [ 467.685045][ T4227] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 467.698992][ T4227] kworker/u8:11: attempt to access beyond end of device [ 467.698992][ T4227] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 467.715977][ T4227] kworker/u8:11: attempt to access beyond end of device [ 467.715977][ T4227] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 467.787909][T23311] loop6: detected capacity change from 0 to 512 [ 467.799263][T23311] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 467.991279][T23331] 9pnet_fd: Insufficient options for proto=fd [ 468.073029][T23338] SELinux: failed to load policy [ 468.631320][T23355] loop6: detected capacity change from 0 to 512 [ 468.715386][T23355] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.6997: casefold flag without casefold feature [ 468.790686][T23355] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6997: couldn't read orphan inode 15 (err -117) [ 468.835537][T23355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.905465][T23368] 9pnet_fd: Insufficient options for proto=fd [ 468.972008][T22071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.014314][T23374] SELinux: failed to load policy [ 469.157350][T23344] geneve0: entered allmulticast mode [ 469.214881][T23390] loop4: detected capacity change from 0 to 512 [ 469.221967][T23390] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.253812][T23390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.271927][T23390] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.284823][T23390] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7007: corrupted xattr block 33: e_value out of bounds [ 469.299138][T23390] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 469.308400][T23390] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7007: corrupted xattr block 33: e_value out of bounds [ 469.327550][T23390] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 469.346957][T23390] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 469.356685][T23381] lo speed is unknown, defaulting to 1000 [ 469.361762][T23390] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.7007: corrupted xattr block 33: e_value out of bounds [ 469.389930][T23390] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 469.400336][T23381] lo speed is unknown, defaulting to 1000 [ 469.431384][T23407] 9pnet_fd: Insufficient options for proto=fd [ 469.484971][T23409] loop6: detected capacity change from 0 to 512 [ 469.506869][T23409] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.7015: casefold flag without casefold feature [ 469.553943][T23409] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.7015: couldn't read orphan inode 15 (err -117) [ 469.586046][T23409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.612693][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.716639][T22071] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.813472][T23423] __nla_validate_parse: 12 callbacks suppressed [ 469.813495][T23423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7018'. [ 469.829560][T23423] netlink: 312 bytes leftover after parsing attributes in process `syz.6.7018'. [ 469.983942][T23438] 9pnet_fd: Insufficient options for proto=fd [ 470.028351][T23444] loop4: detected capacity change from 0 to 512 [ 470.044755][T23444] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7028: casefold flag without casefold feature [ 470.088081][T23431] loop6: detected capacity change from 0 to 256 [ 470.096035][T23444] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7028: couldn't read orphan inode 15 (err -117) [ 470.109752][T23431] FAT-fs (loop6): bogus number of FAT sectors [ 470.116721][T23431] FAT-fs (loop6): Can't find a valid FAT filesystem [ 470.118788][T23444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.229244][T23458] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7035'. [ 470.259470][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.274630][T23460] SELinux: failed to load policy [ 470.310204][T23458] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7035'. [ 470.368081][T23471] 9pnet_fd: Insufficient options for proto=fd [ 470.690017][T23495] SELinux: failed to load policy [ 470.739876][T23500] 9pnet_fd: Insufficient options for proto=fd [ 470.819439][T23506] netlink: 272 bytes leftover after parsing attributes in process `syz.1.7054'. [ 471.150212][T23521] SELinux: failed to load policy [ 471.204138][T23525] 9pnet_fd: Insufficient options for proto=fd [ 471.400789][T23535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7068'. [ 471.423826][T23535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7068'. [ 471.447518][T23535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7068'. [ 471.553520][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7069'. [ 471.562809][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7069'. [ 471.861302][T23552] 9pnet_fd: Insufficient options for proto=fd [ 471.913774][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 471.913793][ T29] audit: type=1326 audit(1759395062.917:23726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.2.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 471.969895][ T29] audit: type=1326 audit(1759395062.917:23727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.2.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 471.993788][ T29] audit: type=1326 audit(1759395062.917:23728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.2.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 472.017446][ T29] audit: type=1326 audit(1759395062.917:23729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.2.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 472.041054][ T29] audit: type=1326 audit(1759395062.917:23730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.2.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 472.064721][ T29] audit: type=1326 audit(1759395062.917:23731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.2.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 472.088581][ T29] audit: type=1326 audit(1759395062.917:23732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.2.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 472.112299][ T29] audit: type=1326 audit(1759395062.917:23733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.2.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 472.136131][ T29] audit: type=1326 audit(1759395062.917:23734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.2.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 472.159919][ T29] audit: type=1326 audit(1759395062.917:23735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23556 comm="syz.2.7077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 472.859587][T23588] 9pnet_fd: Insufficient options for proto=fd [ 473.817217][T23614] loop6: detected capacity change from 0 to 256 [ 473.839823][T23614] FAT-fs (loop6): bogus number of FAT sectors [ 473.846705][T23614] FAT-fs (loop6): Can't find a valid FAT filesystem [ 474.408416][T23626] netlink: 'syz.0.7102': attribute type 4 has an invalid length. [ 474.959034][T23652] __nla_validate_parse: 7 callbacks suppressed [ 474.959055][T23652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7111'. [ 474.968811][T23648] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7106'. [ 474.974356][T23652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7111'. [ 475.374595][T23661] netlink: 272 bytes leftover after parsing attributes in process `syz.4.7115'. [ 475.444601][T23663] lo speed is unknown, defaulting to 1000 [ 475.460933][T23663] lo speed is unknown, defaulting to 1000 [ 475.486933][T23664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7116'. [ 475.541641][T23664] loop4: detected capacity change from 0 to 512 [ 475.558556][T23664] EXT4-fs: Ignoring removed mblk_io_submit option [ 475.612342][T23664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.631659][T23664] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.754033][T23663] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7116: corrupted xattr block 33: e_value out of bounds [ 475.802431][T23663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 475.832123][T23663] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7116: corrupted xattr block 33: e_value out of bounds [ 475.862986][T23663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 475.873055][T23663] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 475.906820][T23663] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.7116: corrupted xattr block 33: e_value out of bounds [ 475.938893][T23663] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 476.012861][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.120926][T23672] loop4: detected capacity change from 0 to 512 [ 476.143647][T23672] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7118: casefold flag without casefold feature [ 476.171617][T23672] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7118: couldn't read orphan inode 15 (err -117) [ 476.204432][T23672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.409271][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7120'. [ 476.418415][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7120'. [ 476.437949][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.748001][T23703] loop4: detected capacity change from 0 to 512 [ 476.968608][T23707] netlink: 'syz.2.7133': attribute type 21 has an invalid length. [ 476.976691][T23707] netlink: 'syz.2.7133': attribute type 1 has an invalid length. [ 476.984458][T23707] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7133'. [ 477.001040][T23707] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 477.029706][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 477.029724][ T29] audit: type=1400 audit(1759395068.027:23927): avc: denied { getopt } for pid=23709 comm="syz.2.7134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 477.159855][T23712] lo speed is unknown, defaulting to 1000 [ 477.172762][T23712] lo speed is unknown, defaulting to 1000 [ 477.483007][ T29] audit: type=1326 audit(1759395068.487:23928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.2.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 477.506884][ T29] audit: type=1326 audit(1759395068.487:23929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.2.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 477.533515][ T29] audit: type=1326 audit(1759395068.537:23930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.2.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 477.557351][ T29] audit: type=1326 audit(1759395068.537:23931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.2.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 477.581203][ T29] audit: type=1326 audit(1759395068.537:23932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.2.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 477.620780][ T29] audit: type=1326 audit(1759395068.607:23933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.2.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 477.644655][ T29] audit: type=1326 audit(1759395068.607:23934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.2.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 477.668417][ T29] audit: type=1326 audit(1759395068.607:23935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.2.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2375eec9 code=0x7ffc0000 [ 477.800662][ T29] audit: type=1400 audit(1759395068.797:23936): avc: denied { ioctl } for pid=23734 comm="syz.2.7144" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=86870 ioctlcmd=0x541e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 478.132125][T23751] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7150'. [ 478.157084][T23751] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7150'. [ 478.546585][T23784] loop6: detected capacity change from 0 to 512 [ 478.562008][T23784] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 478.609871][T23784] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.672421][T23786] netlink: 'syz.0.7166': attribute type 4 has an invalid length. [ 478.695649][T23784] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.765624][T23784] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.769674][T23795] SELinux: failed to load policy [ 478.846009][T23784] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.865550][T23800] $Hÿ: renamed from bond0 (while UP) [ 478.875129][T23800] $Hÿ: entered promiscuous mode [ 478.880198][T23800] bond_slave_0: entered promiscuous mode [ 478.886126][T23800] bond_slave_1: entered promiscuous mode [ 478.915500][ T8565] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.939638][ T8565] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.954093][ T8565] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.964649][ T8565] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.118345][T23818] netlink: 'syz.2.7179': attribute type 4 has an invalid length. [ 479.140024][T23819] tipc: Enabling of bearer rejected, failed to enable media [ 479.150335][T23819] serio: Serial port ptm0 [ 479.207300][T23825] SELinux: failed to load policy [ 479.258530][T23829] FAULT_INJECTION: forcing a failure. [ 479.258530][T23829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.271826][T23829] CPU: 0 UID: 0 PID: 23829 Comm: syz.6.7184 Not tainted syzkaller #0 PREEMPT(voluntary) [ 479.271862][T23829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.271880][T23829] Call Trace: [ 479.271889][T23829] [ 479.271899][T23829] __dump_stack+0x1d/0x30 [ 479.271927][T23829] dump_stack_lvl+0xe8/0x140 [ 479.271990][T23829] dump_stack+0x15/0x1b [ 479.272013][T23829] should_fail_ex+0x265/0x280 [ 479.272044][T23829] should_fail+0xb/0x20 [ 479.272070][T23829] should_fail_usercopy+0x1a/0x20 [ 479.272135][T23829] _copy_from_user+0x1c/0xb0 [ 479.272175][T23829] rds_setsockopt+0x49f/0x9d0 [ 479.272305][T23829] ? __pfx_rds_setsockopt+0x10/0x10 [ 479.272334][T23829] __sys_setsockopt+0x184/0x200 [ 479.272369][T23829] __x64_sys_setsockopt+0x64/0x80 [ 479.272401][T23829] x64_sys_call+0x20ec/0x3000 [ 479.272477][T23829] do_syscall_64+0xd2/0x200 [ 479.272609][T23829] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 479.272645][T23829] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 479.272685][T23829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.272714][T23829] RIP: 0033:0x7f7cec04eec9 [ 479.272734][T23829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.272829][T23829] RSP: 002b:00007f7ceaaaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 479.272851][T23829] RAX: ffffffffffffffda RBX: 00007f7cec2a5fa0 RCX: 00007f7cec04eec9 [ 479.272905][T23829] RDX: 000000000000000a RSI: 0000000000000114 RDI: 0000000000000003 [ 479.272923][T23829] RBP: 00007f7ceaaaf090 R08: 0000000000000004 R09: 0000000000000000 [ 479.272940][T23829] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.272958][T23829] R13: 00007f7cec2a6038 R14: 00007f7cec2a5fa0 R15: 00007ffe587abe88 [ 479.272984][T23829] [ 479.648723][T23845] netlink: 'syz.2.7191': attribute type 4 has an invalid length. [ 479.723881][T23848] FAULT_INJECTION: forcing a failure. [ 479.723881][T23848] name failslab, interval 1, probability 0, space 0, times 0 [ 479.736576][T23848] CPU: 0 UID: 0 PID: 23848 Comm: syz.4.7192 Not tainted syzkaller #0 PREEMPT(voluntary) [ 479.736677][T23848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.736694][T23848] Call Trace: [ 479.736727][T23848] [ 479.736738][T23848] __dump_stack+0x1d/0x30 [ 479.736767][T23848] dump_stack_lvl+0xe8/0x140 [ 479.736794][T23848] dump_stack+0x15/0x1b [ 479.736817][T23848] should_fail_ex+0x265/0x280 [ 479.736910][T23848] should_failslab+0x8c/0xb0 [ 479.736935][T23848] kmem_cache_alloc_node_noprof+0x57/0x320 [ 479.737011][T23848] ? perf_event_alloc+0x14c/0x1740 [ 479.737047][T23848] perf_event_alloc+0x14c/0x1740 [ 479.737085][T23848] __se_sys_perf_event_open+0x615/0x11c0 [ 479.737120][T23848] ? __rcu_read_unlock+0x4f/0x70 [ 479.737168][T23848] __x64_sys_perf_event_open+0x67/0x80 [ 479.737202][T23848] x64_sys_call+0x7bd/0x3000 [ 479.737239][T23848] do_syscall_64+0xd2/0x200 [ 479.737331][T23848] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 479.737364][T23848] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 479.737405][T23848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.737455][T23848] RIP: 0033:0x7f178e99eec9 [ 479.737477][T23848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.737578][T23848] RSP: 002b:00007f178d3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 479.737606][T23848] RAX: ffffffffffffffda RBX: 00007f178ebf5fa0 RCX: 00007f178e99eec9 [ 479.737623][T23848] RDX: 0000000200000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 479.737637][T23848] RBP: 00007f178d3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 479.737654][T23848] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 479.737705][T23848] R13: 00007f178ebf6038 R14: 00007f178ebf5fa0 R15: 00007ffc0c64e588 [ 479.737730][T23848] [ 480.054044][T23858] ipvlan2: entered promiscuous mode [ 480.060688][T23858] bridge0: port 3(ipvlan2) entered blocking state [ 480.067216][T23858] bridge0: port 3(ipvlan2) entered disabled state [ 480.074798][T23858] ipvlan2: entered allmulticast mode [ 480.080150][T23858] bridge0: entered allmulticast mode [ 480.086327][T23858] ipvlan2: left allmulticast mode [ 480.091401][T23858] bridge0: left allmulticast mode [ 480.330674][T23883] __nla_validate_parse: 3 callbacks suppressed [ 480.330694][T23883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7205'. [ 480.345960][T23883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7205'. [ 480.508659][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7216'. [ 480.658770][T23928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7223'. [ 480.667893][T23928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7223'. [ 480.795942][T23947] SELinux: failed to load policy [ 480.817284][T23949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7232'. [ 480.909209][T23964] netlink: 'syz.2.7238': attribute type 4 has an invalid length. [ 481.007111][T23977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7241'. [ 481.016283][T23977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7241'. [ 481.040484][T23981] SELinux: failed to load policy [ 481.068905][T23983] loop4: detected capacity change from 0 to 512 [ 481.091703][T23983] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7246: casefold flag without casefold feature [ 481.106726][T23983] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7246: couldn't read orphan inode 15 (err -117) [ 481.132990][T23983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.199416][T23996] netlink: 'syz.0.7252': attribute type 4 has an invalid length. [ 481.215165][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7251'. [ 481.237001][T19829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.344134][T24014] SELinux: failed to load policy [ 481.344271][T24012] ================================================================== [ 481.344320][T24012] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 481.363926][T24012] [ 481.366273][T24012] write to 0xffffffff8687c3a8 of 8 bytes by task 24014 on cpu 0: [ 481.374013][T24012] data_alloc+0x27d/0x2b0 [ 481.378411][T24012] prb_reserve+0x808/0xaf0 [ 481.378460][T24012] vprintk_store+0x56d/0x860 [ 481.378484][T24012] vprintk_emit+0x178/0x650 [ 481.378509][T24012] vprintk_default+0x26/0x30 [ 481.378533][T24012] vprintk+0x1d/0x30 [ 481.378561][T24012] _printk+0x79/0xa0 [ 481.378597][T24012] sel_write_load+0x32a/0x380 [ 481.378624][T24012] vfs_write+0x266/0x960 [ 481.378658][T24012] ksys_write+0xda/0x1a0 [ 481.378688][T24012] __x64_sys_write+0x40/0x50 [ 481.378724][T24012] x64_sys_call+0x2802/0x3000 [ 481.378749][T24012] do_syscall_64+0xd2/0x200 [ 481.378781][T24012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.378805][T24012] [ 481.378813][T24012] read to 0xffffffff8687c3a8 of 8 bytes by task 24012 on cpu 1: [ 481.378832][T24012] prb_reserve+0x221/0xaf0 [ 481.378863][T24012] vprintk_store+0x56d/0x860 [ 481.378883][T24012] vprintk_emit+0x178/0x650 [ 481.378904][T24012] vprintk_default+0x26/0x30 [ 481.378924][T24012] vprintk+0x1d/0x30 [ 481.378957][T24012] _printk+0x79/0xa0 [ 481.378991][T24012] __nla_validate_parse+0x1738/0x1d00 [ 481.379024][T24012] __nla_parse+0x40/0x60 [ 481.379049][T24012] rtnl_newlink+0xf1/0x12d0 [ 481.379078][T24012] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 481.379107][T24012] netlink_rcv_skb+0x120/0x220 [ 481.379136][T24012] rtnetlink_rcv+0x1c/0x30 [ 481.379166][T24012] netlink_unicast+0x5c0/0x690 [ 481.379185][T24012] netlink_sendmsg+0x58b/0x6b0 [ 481.379209][T24012] __sock_sendmsg+0x145/0x180 [ 481.379241][T24012] ____sys_sendmsg+0x31e/0x4e0 [ 481.379272][T24012] ___sys_sendmsg+0x17b/0x1d0 [ 481.379302][T24012] __x64_sys_sendmsg+0xd4/0x160 [ 481.379326][T24012] x64_sys_call+0x191e/0x3000 [ 481.379347][T24012] do_syscall_64+0xd2/0x200 [ 481.379383][T24012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.379409][T24012] [ 481.379415][T24012] value changed: 0x0000000000003290 -> 0x00000000000b9750 [ 481.379431][T24012] [ 481.379436][T24012] Reported by Kernel Concurrency Sanitizer on: [ 481.379450][T24012] CPU: 1 UID: 0 PID: 24012 Comm: syz.4.7257 Not tainted syzkaller #0 PREEMPT(voluntary) [ 481.379483][T24012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 481.379496][T24012] ================================================================== [ 481.344133][T24012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7257'.