last executing test programs: 4m6.488342111s ago: executing program 1 (id=188): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x4) vmsplice(r5, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da02", 0x2}, {&(0x7f00000002c0)='@', 0x1}], 0x4, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r1, 0x1000}}, 0x10) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r4, 0x0) syz_io_uring_complete(r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100000001010400000001141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000024000e800c0002800500010093000000140001"], 0x138}}, 0x0) close(r8) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x4c3, &(0x7f00000001c0)={[{@nobh}, {@grpjquota}, {@journal_async_commit}, {@dioread_nolock}]}, 0xff, 0x5d8, &(0x7f0000000c00)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r10, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m6.165596666s ago: executing program 1 (id=196): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 4m6.077729066s ago: executing program 1 (id=198): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xd0f, 0x203, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) (fail_nth: 1) 4m5.895037449s ago: executing program 1 (id=199): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x34, 0x0, @val=@tracing={0x0, 0x80000000}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r3, 0x3000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x2, 0x203, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000154}, 0x8840) 4m5.755264461s ago: executing program 1 (id=204): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xf600, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 4m4.609719466s ago: executing program 1 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4004044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x10, 0x1, 0x70bd27, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0) 4m4.597060006s ago: executing program 32 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4004044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x10, 0x1, 0x70bd27, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0) 3m12.983713715s ago: executing program 4 (id=1039): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0xe45ecef2f68bd88d, 0x0, r0, 0x0, 0xfffffffffffffffd, r0}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x54, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x54}}, 0x0) 3m12.537169284s ago: executing program 4 (id=1045): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) set_robust_list(&(0x7f0000000300)={0x0, 0x800000000009}, 0x18) 3m12.494016835s ago: executing program 4 (id=1047): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYBLOB="e6"], 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") symlink(&(0x7f0000000440)='.\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4, 0x0, 0x6}, 0x18) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x505b8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x586e, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0x2, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r5, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x48) 3m12.094890183s ago: executing program 4 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x20202100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000100)={0x200000, 0x40200003, 0x0, 0x6, 0x7, 0xfdffffff}) r4 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x18) rt_sigqueueinfo(0x0, 0x1f, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=r8, @ANYRES16=r8, @ANYRES8=r5], 0x30}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000a1, &(0x7f0000000040)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x34, 0x61b5ec9230faf5d7, 0x33, 0xb]}}]}) r9 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, r9) keyctl$restrict_keyring(0x1d, r9, &(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000380)=',\\\x00') 3m11.73764825s ago: executing program 4 (id=1065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x1, 0x12) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x48, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x3}, 0x18) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001180)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x2, 0x8, 0x18, 0x0, "82aa54"}]}, 0x98}, 0x1, 0x7}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) (async) r10 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r10, 0x0, 0x60) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./control\x00', 0x480, &(0x7f0000000040)={[], [{@measure}]}, 0x1, 0x788, &(0x7f0000001740)="$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") (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000400)}, 0x20) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000380)=0x8, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 3m11.382708897s ago: executing program 4 (id=1070): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0xe45ecef2f68bd88d, 0x0, r0, 0x0, 0xfffffffffffffffd, r0}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x54, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x54}}, 0x0) 3m11.282938899s ago: executing program 33 (id=1070): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0xe45ecef2f68bd88d, 0x0, r0, 0x0, 0xfffffffffffffffd, r0}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x54, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x54}}, 0x0) 2m0.653281173s ago: executing program 2 (id=2869): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xcd8, &(0x7f00000003c0)={0x0, 0x4661, 0x400, 0x1, 0x7a}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000480)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 2m0.652970093s ago: executing program 2 (id=2870): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m0.501794686s ago: executing program 2 (id=2873): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r0, 0x2007ffb) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x1000000201005) 2m0.123091143s ago: executing program 2 (id=2881): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xeb, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r3) 1m59.577785124s ago: executing program 2 (id=2892): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4b906", 0x48, 0x3a, 0x1, @private1, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x4000, 0x33, 0x0, @loopback, @empty, [@srh={0x33, 0x2, 0x4, 0x1, 0x6, 0x70, 0xff, [@local]}]}}}}}}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$inet(0xa, 0x801, 0x84) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r1, 0x8) accept4$inet(r1, 0x0, 0x0, 0x80800) 1m59.577624124s ago: executing program 2 (id=2893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xcd8, &(0x7f00000003c0)={0x0, 0x4661, 0x400, 0x1, 0x7a}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000480)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 1m44.531673197s ago: executing program 34 (id=2893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xcd8, &(0x7f00000003c0)={0x0, 0x4661, 0x400, 0x1, 0x7a}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000480)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 1m1.252815169s ago: executing program 3 (id=3833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc80c0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000680)="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", 0x149}], 0x1, 0x0, 0xb8}}], 0x1, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r8, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3404c891) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f7000200"], 0xc) 1m1.211501619s ago: executing program 3 (id=3837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x640003b3) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x69) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1m1.132918741s ago: executing program 3 (id=3842): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2000004}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_complete\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='io_uring_complete\x00', r2}, 0x18) r3 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x8, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@test_dummy_encryption_v1}]}, 0x8, 0x624, &(0x7f0000000100)="$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") r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) io_cancel(0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x7, r7, &(0x7f0000000740)="a7c656a0d65e52caa50ea7a34ebed07032a1481924868539b8b0966a352e6ec0a03ba9166e0ffdb3f27212e85261c68571f89d05d174e02059d2ed67721aabc710253f042ebcec78276028f8df8eb53ee6751ab3df9a829367b26d1c301e72faa891cf438128125cc9c1011f749325e895aecf61507d2c7b4f910b9fc848660c83414fb1cfeb5b115ddfe38351479f33689f6aefa98f8e080622dca0f86e4e0683a002b1028b36a6f35b205df71188ef1a719e1b330710736d6a77c62050140c3ecee42996fbb5154e61e17503146611852aa682b2e8fe680d9543671f85acb4ffe3303e4a28", 0xe6, 0x5, 0x0, 0x2}, &(0x7f0000000880)) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}, 0xb00}], 0x1, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 1m1.035235583s ago: executing program 3 (id=3845): statx(0xffffffffffffffff, &(0x7f0000001580)='./file0\x00', 0x2000, 0x2, &(0x7f00000015c0)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x1e00, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x13) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r9, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000004100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/48, 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x2}}], 0x4, 0x400122a0, 0x0) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 1m0.17681293s ago: executing program 3 (id=3861): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20570, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10000, 0x10000, 0x0, 0x0, 0x8, 0x20205, 0xb}, 0x0, 0xffffffffffffffff, r0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 1m0.15942634s ago: executing program 3 (id=3862): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 45.060275893s ago: executing program 35 (id=3862): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.127513139s ago: executing program 8 (id=4894): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x6c8, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 2.04587284s ago: executing program 8 (id=4899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setfsuid(0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r4, 0x0, 0xfff}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) 1.998872401s ago: executing program 6 (id=4901): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5f}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) (fail_nth: 5) 1.997012451s ago: executing program 8 (id=4902): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000004c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x3, 0x6}}, 0x120) r1 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @empty}, 0x1, 0x3, 0x3, 0x3}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000080003"], 0x34}}, 0x884) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$UHID_CREATE(r0, &(0x7f00000004c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x3, 0x6}}, 0x120) (async) syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180), &(0x7f0000000280)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$xdp(0x2c, 0x3, 0x0) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @empty}, 0x1, 0x3, 0x3, 0x3}}, 0x26) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000080003"], 0x34}}, 0x884) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) (async) 1.926912173s ago: executing program 0 (id=4904): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x100000, 0x2, 0x800000, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.903540283s ago: executing program 8 (id=4906): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x5, 0x4, {{0x9, 0x4, 0x0, 0x1a, 0x24, 0x67, 0x0, 0x7, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @end, @cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "2117bcf2ad"}]}]}}}}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffff5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 1.875728554s ago: executing program 8 (id=4907): r0 = syz_open_dev$loop(&(0x7f00000012c0), 0x7, 0x844001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000001300)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000f7ffffff0272fe2c61000000040000001b82f6b92f9928ad3c4485c577", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r2, 0x0, 0x4000000000000002}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1.749698226s ago: executing program 6 (id=4908): r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) inotify_init1(0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.254931695s ago: executing program 7 (id=4911): creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./file0\x00', &(0x7f0000000280)=[0x40001], 0x0, 0x4, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffd21, 0x26, 0x1, 0x0, 0x8, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000440), 0xb}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') fchmod(r3, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000240), 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000000000a3c000000120a010073799ad28c6b3fc70f977a310000000008000440000000000900010073797a30000000000800044000000000141000001100010000000001000000000a0000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) 1.212526026s ago: executing program 6 (id=4912): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES8], 0xfd, 0x11fb, &(0x7f0000002440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0xc0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x109b}, 0x1c) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=""/95, 0x17b, 0x5f, 0x0, 0x3, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r3}, 0x18) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x5]}, 0x8) name_to_handle_at(r4, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='block_rq_requeue\x00', r8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) r9 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r6, &(0x7f00000007c0)="0b03e802000c7968465486dd000063f14448866dbfc76ad3074f09f66849235abacfb5f38d70f6a76fc6a5901096e39fc42d4f4bfc2fceda2e6babedfdeb2ca03c2e502c350033e2b4ea46b9a8e8353dc72e12d765313869469131c6b4b80963103a9e5c4830b514ab0bc74476b0fb58767002b4076293e50da422eefbd2560156a1e75686e3e2a09d5c80a7fedf44d984caa7b73b331a22f2a1dfe67d5e9065b9dd478a0354081ef9b027e7a813bedb2f2af646eee3", 0xb6, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.163428867s ago: executing program 7 (id=4913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setfsuid(0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r4, 0x0, 0xfff}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) 1.083069889s ago: executing program 7 (id=4916): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x102e}}, './file0\x00'}) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)=0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@newpolicy={0x108, 0x13, 0x300, 0x70bd2a, 0x25dfdbfd, {{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x7f, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x6, r1, r2}, {0x3, 0x6, 0x3, 0x4, 0x1, 0x7, 0x8, 0x7}, {0x7fffffff, 0x7, 0x8001, 0x4}, 0x7f, 0x6e6bb2, 0x2, 0x0, 0x1, 0x3}, [@algo_crypt={0x4d, 0x2, {{'essiv(cbc(aes),sha256)\x00'}, 0x28, "d5668759e3"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000010}, 0xc0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x810, r0, 0x7a5e2000) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x0, 0x3, 0x4, 0x2}}, 0x26) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x7ff, 0x80000000, 0x0, 'queue0\x00', 0x800}) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x2000) r4 = socket$inet6(0xa, 0x5, 0xffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r5, 0x212, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x14}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xca}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8001}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x59}, @NL80211_ATTR_PMK={0x14, 0xfe, "3c9c8a755c696a23c645266456edbbe4"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="93e14be491e6"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x44004) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000580)) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x10) (async) r6 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000005c0)='rxrpc\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)="58d9675302bce8b43c996f8eab8eb96b5caa47dd826dbb2625647634811c8073749c2a1814db2dc45f6586641b17c4c6056e38269c9a78a79140bdcfbc1707ee878503ddbc0ba9634a5946beb2b8509a21c3cf582c31580f78545a3d9a31c9a836e97c84ed78fa9628ddb03361001209c63cfe75172819cacb0e7d0efec5c84017030dd72399668d053323cd911678c114adce1765ba70c41647c34d4486a3886a3598e0f7cfcadad262c09096cdda080ee110942bda678c7ba73fd445016bf12c39bc7414c8c44b3fcf17598edf134265820903d36946448438bf888ec79398c8af444a16dd868a997b5cdec924", 0xee, r6) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) (rerun: 64) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r7, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x78}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x40040) (async, rerun: 64) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000d00)={0x0, 0x0, 0x11, 0x2, 0x10b, &(0x7f0000000900)="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"}) (rerun: 64) preadv2(r0, &(0x7f00000012c0)=[{&(0x7f0000000d40)=""/207, 0xcf}, {&(0x7f0000000e40)=""/245, 0xf5}, {&(0x7f0000000f40)=""/78, 0x4e}, {&(0x7f0000000fc0)=""/88, 0x58}, {&(0x7f0000001040)=""/11, 0xb}, {&(0x7f0000001080)=""/252, 0xfc}, {&(0x7f0000001180)=""/109, 0x6d}, {&(0x7f0000001200)=""/137, 0x89}], 0x8, 0x9, 0x10, 0xc) (async) syz_emit_ethernet(0x5a, &(0x7f0000001340)={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@canfd={0xd, {{0x1}, 0x3e, 0x0, 0x0, 0x0, "03baf6a4918ac3bae5100f815c0ec082fd76ccf264fdfc32e5ba27de251cd07e364a508bcafb8bd3276d15c6f3b4987eae9303db0bc2b0dd43999c076b51dc24"}}}}, &(0x7f00000013c0)={0x0, 0x1, [0x723, 0xebc, 0xf3d, 0x66e]}) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000001400)={0x1, [0x0]}, &(0x7f0000001440)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000001480)={r9, @in6={{0xa, 0x4e22, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, 0x84) (async) r10 = memfd_secret(0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000001540)={r9}, 0x8) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001580)={{{@in=@broadcast, @in6=@mcast2, 0x4e20, 0x1000, 0x4e22, 0x5, 0xa, 0xa0, 0xa0, 0x89, r1, r2}, {0x200, 0xa56e, 0xceb, 0x3, 0xfa, 0x7f, 0x8, 0x7}, {0x9, 0x7, 0x1, 0x8}, 0xf92, 0x6e6bb8, 0x2, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0xff}, 0x2, @in=@rand_addr=0x64010101, 0x3504, 0x0, 0x3, 0x4, 0x40, 0x8, 0x5}}, 0xe8) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000001680)) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD(r10, 0x4, &(0x7f00000016c0), 0x1) (rerun: 64) 1.03131008s ago: executing program 0 (id=4917): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x5, 0x4, {{0x9, 0x4, 0x0, 0x1a, 0x24, 0x67, 0x0, 0x7, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @end, @cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "2117bcf2ad"}]}]}}}}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffff5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 984.527741ms ago: executing program 0 (id=4918): r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) inotify_init1(0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 941.575811ms ago: executing program 7 (id=4919): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x4, r7, 0x30, r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x54, 0x66, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xa, 0xffe0}, {0xc, 0xffff}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xd17}, {0x8, 0xb, 0xfffffce2}, {0x8, 0xb, 0x97}, {0x8, 0xb, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004000) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 931.453912ms ago: executing program 6 (id=4920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) 908.350322ms ago: executing program 6 (id=4921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='mm_page_free\x00', r1, 0x0, 0x4}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) 867.311723ms ago: executing program 0 (id=4923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRES32, @ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100060000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 777.834595ms ago: executing program 0 (id=4924): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x6c8, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 748.775086ms ago: executing program 8 (id=4925): perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xfd, 0x5, 0xc, 0x7f, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x4, @perf_config_ext={0x40, 0x2}, 0x0, 0x8, 0x6, 0x3, 0x80, 0x5, 0x1000, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x8000e, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = socket$kcm(0xa, 0x2, 0x73) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0800000002"], 0x0) listen(r3, 0x1000) syz_emit_ethernet(0xe9, &(0x7f0000001280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @val={@void, {0x8100, 0x1, 0x1}}, {@mpls_mc={0x8848, {[{0xf8d3}, {0x3}, {0xfffff}, {0x2, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x3}, {0x8, 0x0, 0x1}, {0xd}, {0xb, 0x0, 0x1}], @llc={@snap={0xab, 0x0, "fa32", "cefc6f", 0x19, "67df821a34c339e6a0fcaf50151954b746f97418ff4c9ef838974829f4edce9fc13d0d4f61c2d9000599fefc8c23ebcd2311246999200fb7b4f2ba44614d6170afae61d5827180aa6cb0700990992313b0ce14724eda91f9ab443788ee9843395bae466af6e6b48ba150f3080d365d6f340e17c2b1f69f3d60d8a005e23b227615c1669f3e198a87cfca7bbec3589ac70fec6d450c671903b83329bdc6fddafe570ff19bc0532df06a03"}}}}}}, &(0x7f0000001140)={0x0, 0x2, [0x6cf, 0xd9, 0xfa4, 0x5ca]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x3ec0) sendto(r5, 0x0, 0x0, 0x4, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 713.953906ms ago: executing program 5 (id=4926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setfsuid(0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r4, 0x0, 0xfff}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) 678.292427ms ago: executing program 0 (id=4927): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket(0xa, 0x3, 0x3a) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) accept4(r1, 0x0, 0x0, 0x400000000000000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 658.100467ms ago: executing program 5 (id=4928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x89901) 591.970818ms ago: executing program 5 (id=4929): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x10, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r7 = socket$inet(0x2, 0x2, 0x1) connect$inet(r7, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}, {0x0, 0xfd57}], 0x2}}], 0x1, 0x8000) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_destroy(r6) 585.151969ms ago: executing program 7 (id=4930): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYRESHEX=r2], 0xe4}}, 0x20050800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r4, @ANYBLOB="000008000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r6, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r7, 0x4) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f0000000200)=""/188, 0xbc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0xd5e}}, {@acl}, {@debug}, {@sysvgroups}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x8, 0x82, 0x2, 0x5, 0x0, 0x6, 0x2400, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xef, 0x2, @perf_config_ext={0xfff, 0x4}, 0x900, 0x9, 0x6, 0x7, 0x8001, 0xffff, 0x3, 0x0, 0x7da, 0x0, 0x100000000}, r9, 0x2, r8, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rt_sigprocmask(0x1, &(0x7f00000003c0)={[0xfc5]}, &(0x7f0000001300), 0x8) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x5, 0xb, 0xfffff800, {0x3, 0x0, 0x10, 0x1390, 0x200}, {0x10, 0x1, 0x0, 0x1, 0x7, 0x7}, 0x9, 0xf9, 0x3}}]}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x80}}, 0x0) 401.572002ms ago: executing program 5 (id=4931): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x84100, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.log\x00', 0x0, 0x20) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400001, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r11, 0x0, 0xfffffffffffffffe}, 0x18) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) close_range(r8, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x7, &(0x7f0000000b40)=ANY=[@ANYRES32=r8, @ANYRESOCT=r8, @ANYRES16=r10, @ANYRESHEX=r13, @ANYBLOB="0bfb6930c76f86f0d9f08ed423120fa5756b91fccbcaa29aed9ad781b3ff20112e0ba5e64ec1f5cb5bf6cd76ce69fb4345369285a9104dffcc5ec9033441c6ffc290b33dc252de539fdd10df516e6b522a99c43d081701298643aac4205696e0c261db6d2bb0c28338a9d18f478fe10a80415568"], &(0x7f0000000200)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8=r7, @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x1344f7a9, 0x0, 0x0, 0x41100, 0x1, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r5, r6, r13, r14, r15, 0x1, r16, r17], &(0x7f0000000480)=[{0x3, 0x1, 0x3, 0xb}, {0x2, 0x1, 0xa, 0x3}, {0x5, 0x3, 0xe, 0x2}], 0x10, 0x2}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x200}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r18, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000010000000000000007020000f8feffffb703000000000000b704c59aae005c08de0000000000008500"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 368.079023ms ago: executing program 5 (id=4932): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c000000060601020000000000000000030000040900030073797a30000000000900030073797a30000000000500010007000000050001010700000005000100070000000900030073797a31000000000900030073797a30000000000900030073797a31000000000900030073797a32000000000500010007000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 333.589783ms ago: executing program 5 (id=4933): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x7, 0x0, 0xa7, 0x0, 0x5, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x6, 0x4000000000, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0xfffffffe, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r1, &(0x7f0000000240)=[{&(0x7f00000004c0)='\n', 0x1}, {&(0x7f0000000080)='=', 0x1}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@abort}, {@errors_remount}, {@quota}]}, 0x3, 0x433, &(0x7f0000000d80)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), 0x0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x60, 0x0, 0x0, 0x0, 0x0, 0x8, 0x101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x16020, 0x0, 0x9, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = gettid() r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000800)=[{{&(0x7f0000000100)=@phonet={0x23, 0xfd, 0x0, 0x7}, 0x14, 0x0}}], 0x1, 0x0) r5 = epoll_create1(0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = dup3(r6, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000900000000000000040000001811000005a4b1c0d5a12c885cfcf56e9871e47bf93cc587ff3f34fec96b6bc03570d0078b21d96948f4ce6d23c2815f588fea1a0d4b2b9f1dca7a1059c185e36137b13cd83ad3888f9c364af2f3237928b9b9690c5e32f08ad98aa471b0a96a14931a760da54f50cd60c6ab05c570700c68c811ce59cb39d03b739dc2b39e6995d068204415d9", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xff5, &(0x7f0000001840)=""/4085}, 0x94) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_create(0x0, 0x0) 330.622694ms ago: executing program 7 (id=4934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES16=0x0, @ANYRES8], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0xc3072, r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x7, 0x700, 0xffff, 0x8, {{0xf, 0x4, 0x0, 0x1c, 0x3c, 0x67, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@ra={0x94, 0x4}, @cipso={0x86, 0xc, 0x3, [{0x7, 0x6, "349f8a9f"}]}, @rr={0x7, 0x17, 0x8d, [@loopback, @loopback, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x17}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r5, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000009c0)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000a40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) r8 = dup3(r1, r2, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x7, 0x13, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @generic={0xd, 0xd, 0x8, 0xfd, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x39, '\x00', r6, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xf, 0x8, 0x2}, 0x10, r7, 0xffffffffffffffff, 0x4, &(0x7f0000000c80)=[r0, r8], &(0x7f0000000cc0)=[{0x1, 0x2, 0xd, 0xc}, {0x1, 0x1, 0xa, 0xb}, {0x4, 0x5, 0xe, 0x8}, {0x0, 0x2, 0x3, 0x4}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r4}, 0x38) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000dc0), 0x82, 0x0) ioctl$PPPIOCSCOMPRESS(r9, 0x4010744d) r10 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x7, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730171000000000095ffff00000000007cf46afd089ebe2896906de5d5d2dfbfbaf3a8e8615f29e8850f89508f086320ad438d4e2fd7c0ff6a7ddc7b92aac26a856ee16b9ca81b948c8aff295516283262cc634dbdaac779073558eaae3bcfbf830e2dfae7d13ef2c2f600b611bed82543ceb6c25e97060a807b69bea3c499a87ca51b0d990544294b18d491ef550fda7ba8be033bc1bde604217c56"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x2002) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r10, 0x0, 0x0, 0x9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) mq_timedreceive(r10, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) 0s ago: executing program 6 (id=4935): r0 = syz_open_dev$loop(&(0x7f00000012c0), 0x7, 0x844001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000001300)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000f7ffffff0272fe2c61000000040000001b82f6b92f9928ad3c4485c577", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r2, 0x0, 0x4000000000000002}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) kernel console output (not intermixed with test programs): -fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.247554][T16922] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.276568][T18213] vlan2: entered allmulticast mode [ 259.445372][T12351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.586638][T18234] loop8: detected capacity change from 0 to 128 [ 259.593427][T18234] msdos: Unknown parameter 'dosn4r1xfloppy' [ 259.930602][T18243] loop5: detected capacity change from 0 to 512 [ 259.946824][T18243] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 259.982837][T18243] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4231: invalid indirect mapped block 4294967295 (level 0) [ 260.008066][T18243] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4231: invalid indirect mapped block 4294967295 (level 1) [ 260.037772][T18243] EXT4-fs (loop5): 1 orphan inode deleted [ 260.043641][T18243] EXT4-fs (loop5): 1 truncate cleaned up [ 260.064862][T18243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.404932][T18233] Process accounting resumed [ 260.423564][T18248] loop8: detected capacity change from 0 to 512 [ 260.448585][T18250] vhci_hcd: invalid port number 96 [ 260.453986][T18250] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 260.471814][T18248] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 260.505811][T18248] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4232: invalid indirect mapped block 4294967295 (level 0) [ 260.564340][T18248] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4232: invalid indirect mapped block 4294967295 (level 1) [ 260.637029][T18248] EXT4-fs (loop8): 1 orphan inode deleted [ 260.642895][T18248] EXT4-fs (loop8): 1 truncate cleaned up [ 260.667681][T18248] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.681115][T18259] tipc: Started in network mode [ 260.686001][T18259] tipc: Node identity fffeffff, cluster identity 4711 [ 260.692881][T18259] tipc: Node number set to 4294901759 [ 260.727042][T18261] loop7: detected capacity change from 0 to 2048 [ 260.749384][T18261] /dev/loop7: Can't open blockdev [ 260.792928][T18270] FAULT_INJECTION: forcing a failure. [ 260.792928][T18270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.806110][T18270] CPU: 0 UID: 0 PID: 18270 Comm: syz.6.4241 Not tainted syzkaller #0 PREEMPT(voluntary) [ 260.806138][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 260.806184][T18270] Call Trace: [ 260.806192][T18270] [ 260.806201][T18270] __dump_stack+0x1d/0x30 [ 260.806228][T18270] dump_stack_lvl+0xe8/0x140 [ 260.806255][T18270] dump_stack+0x15/0x1b [ 260.806277][T18270] should_fail_ex+0x265/0x280 [ 260.806396][T18270] should_fail+0xb/0x20 [ 260.806416][T18270] should_fail_usercopy+0x1a/0x20 [ 260.806445][T18270] strncpy_from_user+0x25/0x230 [ 260.806496][T18270] ? kmem_cache_alloc_noprof+0x186/0x310 [ 260.806554][T18270] ? getname_flags+0x80/0x3b0 [ 260.806584][T18270] getname_flags+0xae/0x3b0 [ 260.806685][T18270] user_path_at+0x28/0x130 [ 260.806755][T18270] __se_sys_mount+0x25b/0x2e0 [ 260.806784][T18270] ? fput+0x8f/0xc0 [ 260.806843][T18270] __x64_sys_mount+0x67/0x80 [ 260.806874][T18270] x64_sys_call+0x2b4d/0x2ff0 [ 260.806982][T18270] do_syscall_64+0xd2/0x200 [ 260.807027][T18270] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 260.807058][T18270] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 260.807157][T18270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.807177][T18270] RIP: 0033:0x7facb15eeba9 [ 260.807220][T18270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.807238][T18270] RSP: 002b:00007facb0057038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.807256][T18270] RAX: ffffffffffffffda RBX: 00007facb1835fa0 RCX: 00007facb15eeba9 [ 260.807269][T18270] RDX: 00002000000003c0 RSI: 00002000000002c0 RDI: 0000000000000000 [ 260.807284][T18270] RBP: 00007facb0057090 R08: 0000200000000540 R09: 0000000000000000 [ 260.807300][T18270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.807315][T18270] R13: 00007facb1836038 R14: 00007facb1835fa0 R15: 00007ffcf43e8058 [ 260.807394][T18270] [ 261.019138][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 261.019152][ T29] audit: type=1326 audit(1758019663.967:14679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18268 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 261.048917][ T29] audit: type=1326 audit(1758019663.977:14680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18268 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 261.072575][ T29] audit: type=1326 audit(1758019663.977:14681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18268 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 261.096195][ T29] audit: type=1326 audit(1758019663.977:14682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18268 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 261.120080][ T29] audit: type=1326 audit(1758019663.977:14683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18268 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 261.143791][ T29] audit: type=1326 audit(1758019663.977:14684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18268 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 261.167502][ T29] audit: type=1326 audit(1758019663.977:14685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18268 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 261.191165][ T29] audit: type=1326 audit(1758019663.977:14686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18268 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 261.214832][ T29] audit: type=1326 audit(1758019663.977:14687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18268 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 261.238403][ T29] audit: type=1326 audit(1758019663.977:14688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18268 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 261.240455][T18122] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 261.288747][T16922] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.298214][T12351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.350501][T18289] rdma_op ffff888104606980 conn xmit_rdma 0000000000000000 [ 261.410717][T18295] loop7: detected capacity change from 0 to 2048 [ 261.418802][T18298] vhci_hcd: invalid port number 96 [ 261.424096][T18298] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 261.424585][T18299] netlink: 'syz.0.4252': attribute type 1 has an invalid length. [ 261.439011][T18299] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4252'. [ 261.462155][T18295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.495008][T12588] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.510461][T18304] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 261.536759][T18308] loop7: detected capacity change from 0 to 512 [ 261.543543][T18308] /dev/loop7: Can't open blockdev [ 261.623718][T18316] loop5: detected capacity change from 0 to 1024 [ 261.633189][T18316] EXT4-fs: Ignoring removed orlov option [ 261.639730][T18316] EXT4-fs: test_dummy_encryption option not supported [ 261.646758][T18319] FAULT_INJECTION: forcing a failure. [ 261.646758][T18319] name failslab, interval 1, probability 0, space 0, times 0 [ 261.659581][T18319] CPU: 0 UID: 0 PID: 18319 Comm: syz.0.4257 Not tainted syzkaller #0 PREEMPT(voluntary) [ 261.659666][T18319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.659683][T18319] Call Trace: [ 261.659692][T18319] [ 261.659748][T18319] __dump_stack+0x1d/0x30 [ 261.659770][T18319] dump_stack_lvl+0xe8/0x140 [ 261.659792][T18319] dump_stack+0x15/0x1b [ 261.659812][T18319] should_fail_ex+0x265/0x280 [ 261.659845][T18319] should_failslab+0x8c/0xb0 [ 261.659884][T18319] __kmalloc_noprof+0xa5/0x3e0 [ 261.659946][T18319] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 261.660002][T18319] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 261.660052][T18319] genl_family_rcv_msg_doit+0x48/0x1b0 [ 261.660143][T18319] ? selinux_capable+0x31/0x40 [ 261.660173][T18319] ? security_capable+0x83/0x90 [ 261.660254][T18319] ? ns_capable+0x7d/0xb0 [ 261.660282][T18319] genl_rcv_msg+0x422/0x460 [ 261.660325][T18319] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 261.660403][T18319] netlink_rcv_skb+0x120/0x220 [ 261.660445][T18319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.660549][T18319] genl_rcv+0x28/0x40 [ 261.660650][T18319] netlink_unicast+0x5c0/0x690 [ 261.660685][T18319] netlink_sendmsg+0x58b/0x6b0 [ 261.660723][T18319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.660754][T18319] __sock_sendmsg+0x142/0x180 [ 261.660869][T18319] ____sys_sendmsg+0x31e/0x4e0 [ 261.660901][T18319] ___sys_sendmsg+0x17b/0x1d0 [ 261.660950][T18319] __x64_sys_sendmsg+0xd4/0x160 [ 261.661030][T18319] x64_sys_call+0x191e/0x2ff0 [ 261.661112][T18319] do_syscall_64+0xd2/0x200 [ 261.661173][T18319] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 261.661206][T18319] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 261.661284][T18319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.661313][T18319] RIP: 0033:0x7f4b6215eba9 [ 261.661333][T18319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.661415][T18319] RSP: 002b:00007f4b60bbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.661441][T18319] RAX: ffffffffffffffda RBX: 00007f4b623a5fa0 RCX: 00007f4b6215eba9 [ 261.661458][T18319] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 261.661474][T18319] RBP: 00007f4b60bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 261.661490][T18319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.661506][T18319] R13: 00007f4b623a6038 R14: 00007f4b623a5fa0 R15: 00007fff26a50818 [ 261.661531][T18319] [ 262.045675][T18341] vhci_hcd: invalid port number 96 [ 262.050928][T18341] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 262.234679][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4272'. [ 262.261955][T18360] loop6: detected capacity change from 0 to 1024 [ 262.269661][T18360] EXT4-fs: Ignoring removed orlov option [ 262.275440][T18360] EXT4-fs: test_dummy_encryption option not supported [ 262.445846][T18382] vhci_hcd: invalid port number 96 [ 262.451084][T18382] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 262.577792][T18401] loop7: detected capacity change from 0 to 1024 [ 262.585355][T18401] EXT4-fs: Ignoring removed orlov option [ 262.593282][T18401] EXT4-fs: test_dummy_encryption option not supported [ 262.670131][T18388] dummy0: entered promiscuous mode [ 262.677293][T18388] dummy0: left promiscuous mode [ 262.730132][T18388] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4283'. [ 262.885515][T18431] loop6: detected capacity change from 0 to 512 [ 262.940770][T18431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.954137][T18431] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.985855][T18431] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4295: corrupted inode contents [ 263.015420][T18431] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4295: mark_inode_dirty error [ 263.038243][T18431] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4295: corrupted inode contents [ 263.070486][T18431] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.4295: mark_inode_dirty error [ 263.205076][T17552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.453030][T18497] loop6: detected capacity change from 0 to 512 [ 263.465586][T18466] dummy0: entered promiscuous mode [ 263.470668][T18497] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 263.484127][T18466] dummy0: left promiscuous mode [ 263.485339][T18497] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4317: invalid indirect mapped block 4294967295 (level 0) [ 263.530409][T18497] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4317: invalid indirect mapped block 4294967295 (level 1) [ 263.533027][T18493] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4306'. [ 263.560534][T18497] EXT4-fs (loop6): 1 orphan inode deleted [ 263.566319][T18497] EXT4-fs (loop6): 1 truncate cleaned up [ 263.588210][T18497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.826718][T18522] syz_tun: left allmulticast mode [ 263.831846][T18522] syz_tun: left promiscuous mode [ 263.836952][T18522] bridge0: port 3(syz_tun) entered disabled state [ 263.872380][T18524] netlink: 'syz.7.4321': attribute type 10 has an invalid length. [ 263.880374][T18524] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4321'. [ 263.966135][T18522] bridge_slave_0: left allmulticast mode [ 263.971967][T18522] bridge_slave_0: left promiscuous mode [ 263.977666][T18522] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.990803][T18525] loop7: detected capacity change from 0 to 512 [ 264.001057][T17552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.036457][T18525] EXT4-fs error (device loop7): ext4_quota_enable:7128: inode #4: comm syz.7.4321: iget: bogus i_mode (4200) [ 264.056118][T18522] bridge_slave_1: left allmulticast mode [ 264.062022][T18522] bridge_slave_1: left promiscuous mode [ 264.067779][T18522] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.078512][T18525] EXT4-fs error (device loop7): ext4_quota_enable:7131: comm syz.7.4321: Bad quota inode: 4, type: 1 [ 264.106315][T18522] bond0: (slave bond_slave_0): Releasing backup interface [ 264.109617][T18525] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 264.142928][T18522] bond0: (slave bond_slave_1): Releasing backup interface [ 264.172033][T18525] EXT4-fs (loop7): mount failed [ 264.191754][T18522] team0: Port device team_slave_0 removed [ 264.227749][T18522] team0: Port device team_slave_1 removed [ 264.244304][T18525] loop7: detected capacity change from 0 to 1024 [ 264.251580][T18522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.259290][T18522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.268042][T18525] EXT4-fs: Ignoring removed bh option [ 264.294182][T18525] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 264.308562][T18522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.316061][T18522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.341421][T18525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 264.354157][T18525] System zones: 0-1, 3-12 [ 264.356527][T18524] batman_adv: batadv0: Adding interface: veth1_vlan [ 264.361824][T18525] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.4321: lblock 1 mapped to illegal pblock 1 (length 1) [ 264.365444][T18524] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.383552][T18525] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.4321: Failed to acquire dquot type 0 [ 264.409803][T18524] batman_adv: batadv0: Interface activated: veth1_vlan [ 264.429959][T18525] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.4321: Freeing blocks not in datazone - block = 0, count = 4096 [ 264.453093][T18525] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.4321: Invalid inode bitmap blk 0 in block_group 0 [ 264.455111][ T4465] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 264.512935][ T4465] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:30: Failed to release dquot type 0 [ 264.525894][T18525] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 264.545820][T18525] EXT4-fs (loop7): 1 orphan inode deleted [ 264.563049][T18525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.639699][T18568] loop6: detected capacity change from 0 to 512 [ 264.657634][T18568] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 264.669577][T18568] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4332: invalid indirect mapped block 4294967295 (level 0) [ 264.684729][T18568] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4332: invalid indirect mapped block 4294967295 (level 1) [ 264.716960][T18568] EXT4-fs (loop6): 1 orphan inode deleted [ 264.722822][T18568] EXT4-fs (loop6): 1 truncate cleaned up [ 264.734293][T18568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.027005][T17552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.083139][T18588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.091882][T18588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.195387][T18595] FAULT_INJECTION: forcing a failure. [ 265.195387][T18595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.208542][T18595] CPU: 0 UID: 0 PID: 18595 Comm: syz.5.4342 Not tainted syzkaller #0 PREEMPT(voluntary) [ 265.208580][T18595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 265.208594][T18595] Call Trace: [ 265.208601][T18595] [ 265.208611][T18595] __dump_stack+0x1d/0x30 [ 265.208640][T18595] dump_stack_lvl+0xe8/0x140 [ 265.208716][T18595] dump_stack+0x15/0x1b [ 265.208806][T18595] should_fail_ex+0x265/0x280 [ 265.208833][T18595] should_fail+0xb/0x20 [ 265.208861][T18595] should_fail_usercopy+0x1a/0x20 [ 265.208896][T18595] _copy_from_iter+0xd2/0xe80 [ 265.209003][T18595] ? alloc_pages_mpol+0x201/0x250 [ 265.209087][T18595] copy_page_from_iter+0x178/0x2a0 [ 265.209127][T18595] tun_get_user+0x679/0x2680 [ 265.209153][T18595] ? ref_tracker_alloc+0x1f2/0x2f0 [ 265.209182][T18595] tun_chr_write_iter+0x15e/0x210 [ 265.209207][T18595] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 265.209291][T18595] vfs_write+0x52a/0x960 [ 265.209320][T18595] ksys_write+0xda/0x1a0 [ 265.209350][T18595] __x64_sys_write+0x40/0x50 [ 265.209381][T18595] x64_sys_call+0x27fe/0x2ff0 [ 265.209482][T18595] do_syscall_64+0xd2/0x200 [ 265.209554][T18595] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 265.209592][T18595] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 265.209633][T18595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.209680][T18595] RIP: 0033:0x7f0c3e40d65f [ 265.209696][T18595] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 265.209714][T18595] RSP: 002b:00007f0c3ce6f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 265.209775][T18595] RAX: ffffffffffffffda RBX: 00007f0c3e655fa0 RCX: 00007f0c3e40d65f [ 265.209792][T18595] RDX: 000000000000004a RSI: 0000200000000180 RDI: 00000000000000c8 [ 265.209808][T18595] RBP: 00007f0c3ce6f090 R08: 0000000000000000 R09: 0000000000000000 [ 265.209902][T18595] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 265.209914][T18595] R13: 00007f0c3e656038 R14: 00007f0c3e655fa0 R15: 00007ffddc18fb48 [ 265.209934][T18595] [ 265.499106][T18605] loop5: detected capacity change from 0 to 512 [ 265.521076][T18605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.534015][T18605] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.546708][T18605] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.4343: corrupted inode contents [ 265.559826][T18605] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.4343: mark_inode_dirty error [ 265.571683][T18605] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.4343: corrupted inode contents [ 265.585123][T18605] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.4343: mark_inode_dirty error [ 265.607434][T12351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.731371][T12588] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.796017][T18632] loop5: detected capacity change from 0 to 512 [ 265.811398][T18632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.824158][T18632] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.847450][T12351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.906393][T18644] loop5: detected capacity change from 0 to 1024 [ 265.915146][T18644] EXT4-fs: Ignoring removed orlov option [ 265.921196][T18644] EXT4-fs: test_dummy_encryption option not supported [ 265.936164][T18634] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4353'. [ 266.192300][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 266.192319][ T29] audit: type=1326 audit(1758019669.157:15022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.7.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 266.222218][ T29] audit: type=1326 audit(1758019669.157:15023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.7.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 266.257042][ T29] audit: type=1326 audit(1758019669.157:15024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.7.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 266.280905][ T29] audit: type=1326 audit(1758019669.157:15025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.7.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 266.304502][ T29] audit: type=1326 audit(1758019669.157:15026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.7.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 266.328345][ T29] audit: type=1326 audit(1758019669.157:15027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.7.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 266.352150][ T29] audit: type=1326 audit(1758019669.157:15028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.7.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 266.375743][ T29] audit: type=1326 audit(1758019669.187:15029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.7.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 266.399440][ T29] audit: type=1326 audit(1758019669.187:15030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.7.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 266.423159][ T29] audit: type=1326 audit(1758019669.187:15031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18681 comm="syz.7.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 266.563288][T18698] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4371'. [ 266.563666][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4371'. [ 266.583396][T18695] loop7: detected capacity change from 0 to 1024 [ 266.598314][T18695] EXT4-fs: Ignoring removed orlov option [ 266.606589][T18695] EXT4-fs: test_dummy_encryption option not supported [ 266.638849][T18688] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4367'. [ 266.685813][T18731] FAULT_INJECTION: forcing a failure. [ 266.685813][T18731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.698945][T18731] CPU: 1 UID: 0 PID: 18731 Comm: syz.6.4372 Not tainted syzkaller #0 PREEMPT(voluntary) [ 266.699008][T18731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.699050][T18731] Call Trace: [ 266.699059][T18731] [ 266.699069][T18731] __dump_stack+0x1d/0x30 [ 266.699090][T18731] dump_stack_lvl+0xe8/0x140 [ 266.699109][T18731] dump_stack+0x15/0x1b [ 266.699125][T18731] should_fail_ex+0x265/0x280 [ 266.699194][T18731] should_fail+0xb/0x20 [ 266.699221][T18731] should_fail_usercopy+0x1a/0x20 [ 266.699254][T18731] strncpy_from_user+0x25/0x230 [ 266.699290][T18731] ? kmem_cache_alloc_noprof+0x186/0x310 [ 266.699345][T18731] ? getname_flags+0x80/0x3b0 [ 266.699374][T18731] getname_flags+0xae/0x3b0 [ 266.699475][T18731] io_renameat_prep+0x105/0x1b0 [ 266.699495][T18731] io_submit_sqes+0x5ef/0x1060 [ 266.699522][T18731] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 266.699616][T18731] ? 0xffffffff81000000 [ 266.699630][T18731] ? __rcu_read_unlock+0x4f/0x70 [ 266.699719][T18731] ? get_pid_task+0x96/0xd0 [ 266.699786][T18731] ? proc_fail_nth_write+0x13b/0x160 [ 266.699811][T18731] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 266.699903][T18731] ? vfs_write+0x7e8/0x960 [ 266.699929][T18731] ? __rcu_read_unlock+0x4f/0x70 [ 266.699955][T18731] ? __fget_files+0x184/0x1c0 [ 266.699979][T18731] ? fput+0x8f/0xc0 [ 266.700118][T18731] __x64_sys_io_uring_enter+0x78/0x90 [ 266.700144][T18731] x64_sys_call+0x2de1/0x2ff0 [ 266.700167][T18731] do_syscall_64+0xd2/0x200 [ 266.700273][T18731] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 266.700310][T18731] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 266.700350][T18731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.700379][T18731] RIP: 0033:0x7facb15eeba9 [ 266.700439][T18731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.700462][T18731] RSP: 002b:00007facb0057038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 266.700482][T18731] RAX: ffffffffffffffda RBX: 00007facb1835fa0 RCX: 00007facb15eeba9 [ 266.700495][T18731] RDX: 00000000000096f0 RSI: 0000000010007b0f RDI: 0000000000000003 [ 266.700507][T18731] RBP: 00007facb0057090 R08: 0000000000000000 R09: 0000000000000000 [ 266.700520][T18731] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 266.700571][T18731] R13: 00007facb1836038 R14: 00007facb1835fa0 R15: 00007ffcf43e8058 [ 266.700595][T18731] [ 267.244711][T18757] loop7: detected capacity change from 0 to 512 [ 268.008882][T18784] loop6: detected capacity change from 0 to 512 [ 268.030070][T18784] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 268.045551][T18784] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4393: invalid indirect mapped block 4294967295 (level 0) [ 268.047792][T18784] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4393: invalid indirect mapped block 4294967295 (level 1) [ 268.048645][T18784] EXT4-fs (loop6): 1 orphan inode deleted [ 268.048661][T18784] EXT4-fs (loop6): 1 truncate cleaned up [ 268.049640][T18784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.253674][T17552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.264383][T18805] FAULT_INJECTION: forcing a failure. [ 268.264383][T18805] name failslab, interval 1, probability 0, space 0, times 0 [ 268.264417][T18805] CPU: 1 UID: 0 PID: 18805 Comm: syz.6.4398 Not tainted syzkaller #0 PREEMPT(voluntary) [ 268.264481][T18805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.264496][T18805] Call Trace: [ 268.264504][T18805] [ 268.264513][T18805] __dump_stack+0x1d/0x30 [ 268.264539][T18805] dump_stack_lvl+0xe8/0x140 [ 268.264572][T18805] dump_stack+0x15/0x1b [ 268.264691][T18805] should_fail_ex+0x265/0x280 [ 268.264782][T18805] should_failslab+0x8c/0xb0 [ 268.264879][T18805] kmem_cache_alloc_noprof+0x50/0x310 [ 268.264916][T18805] ? fcntl_setlk+0x53/0x950 [ 268.264954][T18805] fcntl_setlk+0x53/0x950 [ 268.264986][T18805] ? should_fail_ex+0xdb/0x280 [ 268.265014][T18805] do_fcntl+0x5dd/0xdf0 [ 268.265116][T18805] ? selinux_file_fcntl+0x1cb/0x1e0 [ 268.265169][T18805] __se_sys_fcntl+0xb1/0x120 [ 268.265240][T18805] __x64_sys_fcntl+0x43/0x50 [ 268.265285][T18805] x64_sys_call+0x29a0/0x2ff0 [ 268.265317][T18805] do_syscall_64+0xd2/0x200 [ 268.265401][T18805] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 268.265474][T18805] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 268.265516][T18805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.265548][T18805] RIP: 0033:0x7facb15eeba9 [ 268.265570][T18805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.265675][T18805] RSP: 002b:00007facb0057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 268.265702][T18805] RAX: ffffffffffffffda RBX: 00007facb1835fa0 RCX: 00007facb15eeba9 [ 268.265722][T18805] RDX: 0000200000002200 RSI: 0000000000000025 RDI: 0000000000000005 [ 268.265739][T18805] RBP: 00007facb0057090 R08: 0000000000000000 R09: 0000000000000000 [ 268.265757][T18805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.265775][T18805] R13: 00007facb1836038 R14: 00007facb1835fa0 R15: 00007ffcf43e8058 [ 268.265803][T18805] [ 268.267682][T18801] loop8: detected capacity change from 0 to 1024 [ 268.508896][T18801] EXT4-fs: Ignoring removed orlov option [ 268.532250][T18801] EXT4-fs: test_dummy_encryption option not supported [ 268.829271][T18867] loop8: detected capacity change from 0 to 1024 [ 268.830119][T18867] EXT4-fs: Ignoring removed orlov option [ 268.830250][T18867] EXT4-fs: test_dummy_encryption option not supported [ 268.869971][T18830] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4410'. [ 269.324718][T18918] 9pnet_fd: Insufficient options for proto=fd [ 269.485304][T18913] netlink: 256 bytes leftover after parsing attributes in process `syz.8.4435'. [ 269.907570][T18957] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4448'. [ 269.965182][T18968] loop6: detected capacity change from 0 to 512 [ 269.972560][T18968] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 269.986036][T18968] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4450: invalid indirect mapped block 4294967295 (level 0) [ 270.001988][T18968] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4450: invalid indirect mapped block 4294967295 (level 1) [ 270.016718][T18968] EXT4-fs (loop6): 1 orphan inode deleted [ 270.022562][T18968] EXT4-fs (loop6): 1 truncate cleaned up [ 270.031377][T18968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.248126][T17552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.303841][T18991] loop6: detected capacity change from 0 to 512 [ 270.311962][T18991] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 270.323184][T18991] EXT4-fs (loop6): 1 truncate cleaned up [ 270.329221][T18991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.541205][T19000] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4460'. [ 270.663998][T19023] loop8: detected capacity change from 0 to 1024 [ 270.692300][T19023] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.715168][T19023] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.731109][T19033] FAULT_INJECTION: forcing a failure. [ 270.731109][T19033] name failslab, interval 1, probability 0, space 0, times 0 [ 270.743871][T19033] CPU: 0 UID: 0 PID: 19033 Comm: syz.5.4471 Not tainted syzkaller #0 PREEMPT(voluntary) [ 270.743904][T19033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.743919][T19033] Call Trace: [ 270.743927][T19033] [ 270.743935][T19033] __dump_stack+0x1d/0x30 [ 270.743992][T19033] dump_stack_lvl+0xe8/0x140 [ 270.744064][T19033] dump_stack+0x15/0x1b [ 270.744081][T19033] should_fail_ex+0x265/0x280 [ 270.744235][T19033] ? nsim_fib_event_nb+0x1a0/0xcb0 [ 270.744268][T19033] should_failslab+0x8c/0xb0 [ 270.744301][T19033] __kmalloc_cache_noprof+0x4c/0x320 [ 270.744348][T19033] nsim_fib_event_nb+0x1a0/0xcb0 [ 270.744376][T19033] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 270.744416][T19033] atomic_notifier_call_chain+0x73/0x1c0 [ 270.744472][T19033] call_fib_notifiers+0x65/0xa0 [ 270.744511][T19033] call_fib6_notifiers+0x30/0x40 [ 270.744537][T19033] fib6_del+0x749/0x8b0 [ 270.744558][T19033] ? fib6_del+0x2f1/0x8b0 [ 270.744592][T19033] fib6_clean_node+0x167/0x280 [ 270.744660][T19033] fib6_walk_continue+0x39c/0x440 [ 270.744692][T19033] fib6_walk+0xc5/0x180 [ 270.744749][T19033] ? __pfx_fib6_ifdown+0x10/0x10 [ 270.744774][T19033] fib6_clean_all+0xca/0x140 [ 270.744802][T19033] ? __pfx_fib6_clean_node+0x10/0x10 [ 270.744827][T19033] ? __pfx_fib6_ifdown+0x10/0x10 [ 270.744906][T19033] rt6_disable_ip+0xa6/0x580 [ 270.744936][T19033] addrconf_ifdown+0xa6/0xf30 [ 270.744975][T19033] ? rtnl_notify+0x76/0x90 [ 270.745003][T19033] addrconf_notify+0x222/0x930 [ 270.745045][T19033] ? __pfx_addrconf_notify+0x10/0x10 [ 270.745072][T19033] raw_notifier_call_chain+0x6f/0x1b0 [ 270.745093][T19033] ? call_netdevice_notifiers_info+0x9c/0x100 [ 270.745167][T19033] call_netdevice_notifiers_info+0xae/0x100 [ 270.745286][T19033] netif_state_change+0x16d/0x1f0 [ 270.745361][T19033] do_setlink+0x60e/0x2810 [ 270.745394][T19033] ? security_capable+0x83/0x90 [ 270.745421][T19033] ? ns_capable+0x7d/0xb0 [ 270.745442][T19033] ? netlink_ns_capable+0x86/0xa0 [ 270.745468][T19033] rtnl_newlink+0xd8b/0x12d0 [ 270.745573][T19033] ? xas_load+0x413/0x430 [ 270.745605][T19033] ? try_charge_memcg+0x200/0x9e0 [ 270.745631][T19033] ? __memcg_slab_free_hook+0x135/0x230 [ 270.745685][T19033] ? __rcu_read_unlock+0x4f/0x70 [ 270.745708][T19033] ? avc_has_perm_noaudit+0x1b1/0x200 [ 270.745769][T19033] ? cred_has_capability+0x210/0x280 [ 270.745797][T19033] ? selinux_capable+0x31/0x40 [ 270.745873][T19033] ? security_capable+0x83/0x90 [ 270.745899][T19033] ? ns_capable+0x7d/0xb0 [ 270.745994][T19033] ? __pfx_rtnl_newlink+0x10/0x10 [ 270.746028][T19033] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 270.746066][T19033] netlink_rcv_skb+0x120/0x220 [ 270.746118][T19033] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.746159][T19033] rtnetlink_rcv+0x1c/0x30 [ 270.746190][T19033] netlink_unicast+0x5c0/0x690 [ 270.746223][T19033] netlink_sendmsg+0x58b/0x6b0 [ 270.746372][T19033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.746400][T19033] __sock_sendmsg+0x142/0x180 [ 270.746436][T19033] ____sys_sendmsg+0x31e/0x4e0 [ 270.746533][T19033] ___sys_sendmsg+0x17b/0x1d0 [ 270.746591][T19033] __x64_sys_sendmsg+0xd4/0x160 [ 270.746669][T19033] x64_sys_call+0x191e/0x2ff0 [ 270.746693][T19033] do_syscall_64+0xd2/0x200 [ 270.746727][T19033] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 270.746753][T19033] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 270.746861][T19033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.746884][T19033] RIP: 0033:0x7f0c3e40eba9 [ 270.746900][T19033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.746976][T19033] RSP: 002b:00007f0c3ce6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.747067][T19033] RAX: ffffffffffffffda RBX: 00007f0c3e655fa0 RCX: 00007f0c3e40eba9 [ 270.747080][T19033] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 270.747093][T19033] RBP: 00007f0c3ce6f090 R08: 0000000000000000 R09: 0000000000000000 [ 270.747112][T19033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.747125][T19033] R13: 00007f0c3e656038 R14: 00007f0c3e655fa0 R15: 00007ffddc18fb48 [ 270.747146][T19033] [ 270.750277][T19023] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #12: comm syz.8.4469: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 4(0), depth 0(0) [ 271.175432][T19033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.204094][T17552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.238414][T19045] rtc_cmos 00:00: Alarms can be up to one day in the future [ 271.250061][T16922] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 271.261186][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 271.261199][ T29] audit: type=1400 audit(1758019674.227:15452): avc: denied { bind } for pid=19044 comm="syz.0.4474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 271.284736][T19049] loop6: detected capacity change from 0 to 512 [ 271.287051][ T29] audit: type=1400 audit(1758019674.227:15453): avc: denied { name_bind } for pid=19044 comm="syz.0.4474" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 271.294349][T19049] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 271.314467][ T29] audit: type=1400 audit(1758019674.227:15454): avc: denied { node_bind } for pid=19044 comm="syz.0.4474" saddr=100.1.1.1 src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 271.349464][T19053] rtc_cmos 00:00: Alarms can be up to one day in the future [ 271.367981][T19049] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4475: invalid indirect mapped block 4294967295 (level 0) [ 271.402581][T19049] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4475: invalid indirect mapped block 4294967295 (level 1) [ 271.437333][T19049] EXT4-fs (loop6): 1 orphan inode deleted [ 271.443251][T19049] EXT4-fs (loop6): 1 truncate cleaned up [ 271.467712][T19049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.530943][T19075] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4485'. [ 271.752427][T19093] loop5: detected capacity change from 0 to 1024 [ 271.772360][T19093] EXT4-fs: dax option not supported [ 271.824200][T17552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.909667][T19106] loop6: detected capacity change from 0 to 2048 [ 271.947739][T19106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.973487][T19106] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4493'. [ 272.020810][T17552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.054871][ T29] audit: type=1326 audit(1758019675.017:15455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.7.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 272.078544][ T29] audit: type=1326 audit(1758019675.017:15456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.7.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 272.102240][ T29] audit: type=1326 audit(1758019675.017:15457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.7.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 272.125995][ T29] audit: type=1326 audit(1758019675.017:15458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.7.4496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 272.198496][T19126] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4498'. [ 272.232086][ T29] audit: type=1400 audit(1758019675.197:15459): avc: denied { nlmsg_read } for pid=19139 comm="syz.5.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 272.232572][T19141] $H: renamed from bond0 (while UP) [ 272.261481][T19141] $H: entered promiscuous mode [ 272.266739][T19141] bond_slave_0: entered promiscuous mode [ 272.272677][T19141] bond_slave_1: entered promiscuous mode [ 272.279943][ T29] audit: type=1400 audit(1758019675.247:15460): avc: denied { bind } for pid=19143 comm="syz.0.4503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 272.360276][ T29] audit: type=1326 audit(1758019675.327:15461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19152 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3e40eba9 code=0x7ffc0000 [ 272.564650][T19174] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4513'. [ 272.835363][T19115] Process accounting resumed [ 272.971624][T19193] loop7: detected capacity change from 0 to 128 [ 272.982962][T19193] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 272.989544][T19193] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 272.997288][T19193] vhci_hcd vhci_hcd.0: Device attached [ 273.005782][T19199] vhci_hcd: connection closed [ 273.007448][ T4444] vhci_hcd: stop threads [ 273.016455][ T4444] vhci_hcd: release socket [ 273.020917][ T4444] vhci_hcd: disconnect device [ 273.065730][T19197] FAULT_INJECTION: forcing a failure. [ 273.065730][T19197] name failslab, interval 1, probability 0, space 0, times 0 [ 273.078426][T19197] CPU: 0 UID: 0 PID: 19197 Comm: syz.0.4520 Not tainted syzkaller #0 PREEMPT(voluntary) [ 273.078460][T19197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.078474][T19197] Call Trace: [ 273.078481][T19197] [ 273.078488][T19197] __dump_stack+0x1d/0x30 [ 273.078519][T19197] dump_stack_lvl+0xe8/0x140 [ 273.078611][T19197] dump_stack+0x15/0x1b [ 273.078625][T19197] should_fail_ex+0x265/0x280 [ 273.078647][T19197] should_failslab+0x8c/0xb0 [ 273.078669][T19197] kmem_cache_alloc_noprof+0x50/0x310 [ 273.078774][T19197] ? security_inode_alloc+0x37/0x100 [ 273.078854][T19197] security_inode_alloc+0x37/0x100 [ 273.078881][T19197] inode_init_always_gfp+0x4b7/0x500 [ 273.078905][T19197] ? __pfx_sock_alloc_inode+0x10/0x10 [ 273.078936][T19197] alloc_inode+0x58/0x170 [ 273.078964][T19197] __sock_create+0x122/0x5b0 [ 273.078991][T19197] __sys_socketpair+0x170/0x430 [ 273.079016][T19197] ? ksys_write+0x192/0x1a0 [ 273.079045][T19197] __x64_sys_socketpair+0x52/0x60 [ 273.079164][T19197] x64_sys_call+0x2bf2/0x2ff0 [ 273.079194][T19197] do_syscall_64+0xd2/0x200 [ 273.079237][T19197] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 273.079334][T19197] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 273.079384][T19197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.079422][T19197] RIP: 0033:0x7f4b62160afa [ 273.079441][T19197] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.079464][T19197] RSP: 002b:00007f4b60bbef78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 273.079499][T19197] RAX: ffffffffffffffda RBX: 00007f4b623a5f01 RCX: 00007f4b62160afa [ 273.079539][T19197] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 273.079554][T19197] RBP: 00007f4b60bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 273.079567][T19197] R10: 00007f4b60bbef98 R11: 0000000000000246 R12: 0000000000000005 [ 273.079581][T19197] R13: 00007f4b623a6038 R14: 00007f4b623a5fa0 R15: 00007fff26a50818 [ 273.079600][T19197] [ 273.279959][T19197] socket: no more sockets [ 273.579733][T19216] loop8: detected capacity change from 0 to 512 [ 273.599192][T19216] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 273.621879][T19216] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4526: invalid indirect mapped block 4294967295 (level 0) [ 273.637285][T19216] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4526: invalid indirect mapped block 4294967295 (level 1) [ 273.658367][T19216] EXT4-fs (loop8): 1 orphan inode deleted [ 273.664189][T19216] EXT4-fs (loop8): 1 truncate cleaned up [ 273.670370][T19216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.801122][T16922] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.164031][T19246] SELinux: policydb version 0 does not match my version range 15-35 [ 274.182538][T19246] SELinux: failed to load policy [ 274.466513][T19221] Process accounting resumed [ 274.697985][T19294] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4549'. [ 274.730977][T19294] loop6: detected capacity change from 0 to 2048 [ 274.752294][T19294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.766925][T19290] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4549'. [ 274.792713][T19301] vhci_hcd: invalid port number 77 [ 274.798478][T17552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.085986][T19355] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4562'. [ 275.116512][T19363] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4563'. [ 275.186265][T19375] loop7: detected capacity change from 0 to 512 [ 275.193528][T19375] /dev/loop7: Can't open blockdev [ 275.429198][T19389] FAULT_INJECTION: forcing a failure. [ 275.429198][T19389] name failslab, interval 1, probability 0, space 0, times 0 [ 275.441919][T19389] CPU: 1 UID: 0 PID: 19389 Comm: syz.7.4571 Not tainted syzkaller #0 PREEMPT(voluntary) [ 275.441947][T19389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.441962][T19389] Call Trace: [ 275.441970][T19389] [ 275.441977][T19389] __dump_stack+0x1d/0x30 [ 275.441998][T19389] dump_stack_lvl+0xe8/0x140 [ 275.442017][T19389] dump_stack+0x15/0x1b [ 275.442073][T19389] should_fail_ex+0x265/0x280 [ 275.442103][T19389] ? sctp_add_bind_addr+0x71/0x1e0 [ 275.442133][T19389] should_failslab+0x8c/0xb0 [ 275.442190][T19389] __kmalloc_cache_noprof+0x4c/0x320 [ 275.442232][T19389] sctp_add_bind_addr+0x71/0x1e0 [ 275.442342][T19389] sctp_copy_local_addr_list+0x199/0x220 [ 275.442385][T19389] sctp_copy_one_addr+0x7f/0x280 [ 275.442552][T19389] sctp_bind_addr_copy+0x79/0x290 [ 275.442585][T19389] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 275.442642][T19389] sctp_connect_new_asoc+0x1c3/0x3a0 [ 275.442666][T19389] sctp_sendmsg+0xf10/0x18d0 [ 275.442687][T19389] ? selinux_socket_sendmsg+0xc1/0x1b0 [ 275.442722][T19389] ? __pfx_sctp_sendmsg+0x10/0x10 [ 275.442803][T19389] inet_sendmsg+0xc5/0xd0 [ 275.442835][T19389] __sock_sendmsg+0x102/0x180 [ 275.442868][T19389] __sys_sendto+0x268/0x330 [ 275.442901][T19389] __x64_sys_sendto+0x76/0x90 [ 275.442953][T19389] x64_sys_call+0x2d05/0x2ff0 [ 275.442997][T19389] do_syscall_64+0xd2/0x200 [ 275.443033][T19389] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 275.443062][T19389] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 275.443119][T19389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.443176][T19389] RIP: 0033:0x7fb7765deba9 [ 275.443191][T19389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.443209][T19389] RSP: 002b:00007fb775047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 275.443227][T19389] RAX: ffffffffffffffda RBX: 00007fb776825fa0 RCX: 00007fb7765deba9 [ 275.443239][T19389] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 275.443253][T19389] RBP: 00007fb775047090 R08: 000020000005ffe4 R09: 000000000000001c [ 275.443265][T19389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.443293][T19389] R13: 00007fb776826038 R14: 00007fb776825fa0 R15: 00007ffed58c7418 [ 275.443343][T19389] [ 275.719262][T19338] Process accounting resumed [ 275.794829][T19403] loop7: detected capacity change from 0 to 128 [ 275.831318][T19403] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.874151][T19403] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.934413][T19403] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #11: comm syz.7.4577: No space for directory leaf checksum. Please run e2fsck -D. [ 275.949886][T19403] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #11: comm syz.7.4577: checksumming directory block 0 [ 275.986967][T19417] syzkaller1: entered promiscuous mode [ 275.992615][T19417] syzkaller1: entered allmulticast mode [ 276.012612][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4577'. [ 276.219664][T12588] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.275779][T19444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4589'. [ 276.284888][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 276.284909][ T29] audit: type=1326 audit(1758019679.237:15754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 276.315119][ T29] audit: type=1326 audit(1758019679.237:15755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 276.338748][ T29] audit: type=1326 audit(1758019679.237:15756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 276.362618][ T29] audit: type=1326 audit(1758019679.237:15757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 276.386499][ T29] audit: type=1326 audit(1758019679.237:15758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 276.410213][ T29] audit: type=1326 audit(1758019679.237:15759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 276.433935][ T29] audit: type=1326 audit(1758019679.237:15760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 276.457543][ T29] audit: type=1326 audit(1758019679.237:15761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 276.481263][ T29] audit: type=1326 audit(1758019679.237:15762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 276.505091][ T29] audit: type=1326 audit(1758019679.237:15763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19445 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 276.536107][T19462] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4589'. [ 276.591510][T19471] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4596'. [ 276.611210][T19479] netlink: 'syz.5.4597': attribute type 10 has an invalid length. [ 276.620635][T19479] FAULT_INJECTION: forcing a failure. [ 276.620635][T19479] name failslab, interval 1, probability 0, space 0, times 0 [ 276.633494][T19479] CPU: 0 UID: 0 PID: 19479 Comm: syz.5.4597 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.633526][T19479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.633539][T19479] Call Trace: [ 276.633546][T19479] [ 276.633556][T19479] __dump_stack+0x1d/0x30 [ 276.633612][T19479] dump_stack_lvl+0xe8/0x140 [ 276.633632][T19479] dump_stack+0x15/0x1b [ 276.633649][T19479] should_fail_ex+0x265/0x280 [ 276.633679][T19479] should_failslab+0x8c/0xb0 [ 276.633712][T19479] kmem_cache_alloc_node_noprof+0x57/0x320 [ 276.633815][T19479] ? __alloc_skb+0x101/0x320 [ 276.633845][T19479] __alloc_skb+0x101/0x320 [ 276.633872][T19479] ? _raw_spin_unlock_bh+0x36/0x40 [ 276.633924][T19479] inet_ifmcaddr_notify+0x64/0x120 [ 276.633968][T19479] __ip_mc_dec_group+0x1ac/0x3d0 [ 276.634038][T19479] ip_mc_down+0x13d/0x1c0 [ 276.634069][T19479] inetdev_event+0x1b3/0xc10 [ 276.634091][T19479] ? __pfx_ib_netdevice_event+0x10/0x10 [ 276.634163][T19479] ? ib_netdevice_event+0x295/0x5f0 [ 276.634192][T19479] ? __pfx_arp_netdev_event+0x10/0x10 [ 276.634243][T19479] ? __pfx_inetdev_event+0x10/0x10 [ 276.634266][T19479] raw_notifier_call_chain+0x6f/0x1b0 [ 276.634286][T19479] ? call_netdevice_notifiers_info+0x9c/0x100 [ 276.634349][T19479] call_netdevice_notifiers_info+0xae/0x100 [ 276.634424][T19479] __dev_notify_flags+0xff/0x1a0 [ 276.634457][T19479] netif_change_flags+0xac/0xd0 [ 276.634486][T19479] do_setlink+0x9d2/0x2810 [ 276.634507][T19479] ? _raw_spin_unlock+0x14/0x50 [ 276.634611][T19479] ? finish_task_switch+0xb6/0x2b0 [ 276.634633][T19479] ? __schedule+0x6b9/0xb30 [ 276.634684][T19479] rtnl_newlink+0xe75/0x12d0 [ 276.634733][T19479] ? xas_load+0x413/0x430 [ 276.634764][T19479] ? xas_load+0x413/0x430 [ 276.634840][T19479] ? __memcg_slab_free_hook+0x135/0x230 [ 276.634910][T19479] ? __rcu_read_unlock+0x4f/0x70 [ 276.634940][T19479] ? avc_has_perm_noaudit+0x1b1/0x200 [ 276.635015][T19479] ? cred_has_capability+0x210/0x280 [ 276.635049][T19479] ? selinux_capable+0x31/0x40 [ 276.635080][T19479] ? security_capable+0x83/0x90 [ 276.635113][T19479] ? ns_capable+0x7d/0xb0 [ 276.635160][T19479] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.635194][T19479] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 276.635234][T19479] netlink_rcv_skb+0x120/0x220 [ 276.635294][T19479] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.635344][T19479] rtnetlink_rcv+0x1c/0x30 [ 276.635456][T19479] netlink_unicast+0x5c0/0x690 [ 276.635495][T19479] netlink_sendmsg+0x58b/0x6b0 [ 276.635523][T19479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.635550][T19479] __sock_sendmsg+0x142/0x180 [ 276.635596][T19479] ____sys_sendmsg+0x31e/0x4e0 [ 276.635725][T19479] ___sys_sendmsg+0x17b/0x1d0 [ 276.635778][T19479] __x64_sys_sendmsg+0xd4/0x160 [ 276.635810][T19479] x64_sys_call+0x191e/0x2ff0 [ 276.635832][T19479] do_syscall_64+0xd2/0x200 [ 276.635919][T19479] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 276.635949][T19479] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 276.635982][T19479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.636005][T19479] RIP: 0033:0x7f0c3e40eba9 [ 276.636025][T19479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.636048][T19479] RSP: 002b:00007f0c3ce6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.636115][T19479] RAX: ffffffffffffffda RBX: 00007f0c3e655fa0 RCX: 00007f0c3e40eba9 [ 276.636127][T19479] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000005 [ 276.636207][T19479] RBP: 00007f0c3ce6f090 R08: 0000000000000000 R09: 0000000000000000 [ 276.636220][T19479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.636232][T19479] R13: 00007f0c3e656038 R14: 00007f0c3e655fa0 R15: 00007ffddc18fb48 [ 276.636251][T19479] [ 276.709962][T19479] netlink: 'syz.5.4597': attribute type 10 has an invalid length. [ 276.996564][T19491] FAULT_INJECTION: forcing a failure. [ 276.996564][T19491] name failslab, interval 1, probability 0, space 0, times 0 [ 277.025336][T19491] CPU: 0 UID: 0 PID: 19491 Comm: syz.6.4601 Not tainted syzkaller #0 PREEMPT(voluntary) [ 277.025420][T19491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.025438][T19491] Call Trace: [ 277.025446][T19491] [ 277.025457][T19491] __dump_stack+0x1d/0x30 [ 277.025479][T19491] dump_stack_lvl+0xe8/0x140 [ 277.025498][T19491] dump_stack+0x15/0x1b [ 277.025573][T19491] should_fail_ex+0x265/0x280 [ 277.025598][T19491] ? legacy_init_fs_context+0x31/0x80 [ 277.025627][T19491] should_failslab+0x8c/0xb0 [ 277.025732][T19491] __kmalloc_cache_noprof+0x4c/0x320 [ 277.025822][T19491] legacy_init_fs_context+0x31/0x80 [ 277.025852][T19491] alloc_fs_context+0x3ef/0x4e0 [ 277.025895][T19491] fs_context_for_mount+0x22/0x30 [ 277.025918][T19491] do_new_mount+0xe9/0x5e0 [ 277.025940][T19491] ? security_capable+0x83/0x90 [ 277.025967][T19491] path_mount+0x4a4/0xb20 [ 277.026042][T19491] ? user_path_at+0x109/0x130 [ 277.026080][T19491] __se_sys_mount+0x28f/0x2e0 [ 277.026110][T19491] ? fput+0x8f/0xc0 [ 277.026143][T19491] __x64_sys_mount+0x67/0x80 [ 277.026249][T19491] x64_sys_call+0x2b4d/0x2ff0 [ 277.026276][T19491] do_syscall_64+0xd2/0x200 [ 277.026315][T19491] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 277.026345][T19491] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 277.026428][T19491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.026456][T19491] RIP: 0033:0x7facb15eeba9 [ 277.026486][T19491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.026505][T19491] RSP: 002b:00007facb0057038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 277.026524][T19491] RAX: ffffffffffffffda RBX: 00007facb1835fa0 RCX: 00007facb15eeba9 [ 277.026596][T19491] RDX: 0000200000001400 RSI: 0000200000000300 RDI: 0000000000000000 [ 277.026612][T19491] RBP: 00007facb0057090 R08: 0000200000000340 R09: 0000000000000000 [ 277.026628][T19491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.026642][T19491] R13: 00007facb1836038 R14: 00007facb1835fa0 R15: 00007ffcf43e8058 [ 277.026718][T19491] [ 277.028883][T19479] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 277.059891][T19432] Process accounting resumed [ 277.064699][T19479] team0: Port device dummy0 removed [ 277.263664][T19479] dummy0: entered promiscuous mode [ 277.279676][T19479] $H: (slave dummy0): Enslaving as an active interface with an up link [ 277.308336][T19497] loop8: detected capacity change from 0 to 1024 [ 277.323486][T19497] EXT4-fs: Ignoring removed orlov option [ 277.354575][T19497] EXT4-fs: test_dummy_encryption option not supported [ 277.512880][T19522] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4611'. [ 277.561958][T19512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 277.655775][T19542] netlink: 256 bytes leftover after parsing attributes in process `syz.8.4617'. [ 277.722438][T19555] netlink: 'syz.6.4620': attribute type 1 has an invalid length. [ 277.737830][T19555] loop6: detected capacity change from 0 to 128 [ 277.757261][T19555] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 277.779356][T19555] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.792371][T19565] FAULT_INJECTION: forcing a failure. [ 277.792371][T19565] name failslab, interval 1, probability 0, space 0, times 0 [ 277.805148][T19565] CPU: 0 UID: 0 PID: 19565 Comm: syz.0.4624 Not tainted syzkaller #0 PREEMPT(voluntary) [ 277.805245][T19565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.805258][T19565] Call Trace: [ 277.805264][T19565] [ 277.805275][T19565] __dump_stack+0x1d/0x30 [ 277.805302][T19565] dump_stack_lvl+0xe8/0x140 [ 277.805369][T19565] dump_stack+0x15/0x1b [ 277.805391][T19565] should_fail_ex+0x265/0x280 [ 277.805418][T19565] should_failslab+0x8c/0xb0 [ 277.805447][T19565] kmem_cache_alloc_noprof+0x50/0x310 [ 277.805543][T19565] ? getname_flags+0x80/0x3b0 [ 277.805575][T19565] getname_flags+0x80/0x3b0 [ 277.805673][T19565] __se_sys_move_mount+0x2d6/0x490 [ 277.805751][T19565] __x64_sys_move_mount+0x67/0x80 [ 277.805778][T19565] x64_sys_call+0xcfe/0x2ff0 [ 277.805839][T19565] do_syscall_64+0xd2/0x200 [ 277.805929][T19565] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 277.805954][T19565] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 277.805989][T19565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.806018][T19565] RIP: 0033:0x7f4b6215eba9 [ 277.806051][T19565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.806075][T19565] RSP: 002b:00007f4b60bbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 277.806098][T19565] RAX: ffffffffffffffda RBX: 00007f4b623a5fa0 RCX: 00007f4b6215eba9 [ 277.806111][T19565] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000006 [ 277.806123][T19565] RBP: 00007f4b60bbf090 R08: 0000000000000262 R09: 0000000000000000 [ 277.806139][T19565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.806155][T19565] R13: 00007f4b623a6038 R14: 00007f4b623a5fa0 R15: 00007fff26a50818 [ 277.806182][T19565] [ 278.049237][T17552] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.068890][T19572] loop8: detected capacity change from 0 to 1024 [ 278.076384][T19572] EXT4-fs: Ignoring removed orlov option [ 278.083641][T19572] EXT4-fs: test_dummy_encryption option not supported [ 278.225803][T19596] FAULT_INJECTION: forcing a failure. [ 278.225803][T19596] name failslab, interval 1, probability 0, space 0, times 0 [ 278.238604][T19596] CPU: 1 UID: 0 PID: 19596 Comm: syz.6.4633 Not tainted syzkaller #0 PREEMPT(voluntary) [ 278.238636][T19596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 278.238652][T19596] Call Trace: [ 278.238661][T19596] [ 278.238670][T19596] __dump_stack+0x1d/0x30 [ 278.238751][T19596] dump_stack_lvl+0xe8/0x140 [ 278.238820][T19596] dump_stack+0x15/0x1b [ 278.238839][T19596] should_fail_ex+0x265/0x280 [ 278.238922][T19596] should_failslab+0x8c/0xb0 [ 278.238955][T19596] kmem_cache_alloc_noprof+0x50/0x310 [ 278.238997][T19596] ? __anon_vma_prepare+0xcd/0x2f0 [ 278.239022][T19596] __anon_vma_prepare+0xcd/0x2f0 [ 278.239118][T19596] handle_mm_fault+0x1d58/0x2c20 [ 278.239144][T19596] ? __rcu_read_unlock+0x4f/0x70 [ 278.239253][T19596] do_user_addr_fault+0x3fe/0x1090 [ 278.239302][T19596] exc_page_fault+0x62/0xa0 [ 278.239360][T19596] asm_exc_page_fault+0x26/0x30 [ 278.239398][T19596] RIP: 0010:__put_user_4+0xd/0x20 [ 278.239440][T19596] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 278.239465][T19596] RSP: 0018:ffffc900011b7da0 EFLAGS: 00050202 [ 278.239484][T19596] RAX: 0000000000000044 RBX: 0000000000000000 RCX: 0000200000000140 [ 278.239499][T19596] RDX: 00000000000000ac RSI: 0000000000000000 RDI: ffffffff88e8ebcc [ 278.239512][T19596] RBP: 00000000000000ff R08: 0001ffff86847f7f R09: 0000000000000000 [ 278.239593][T19596] R10: ffffffff88e699f0 R11: 000000000000f001 R12: 0000000000000044 [ 278.239609][T19596] R13: 0000200000000140 R14: 00000000000000c9 R15: ffff888118d0fc00 [ 278.239635][T19596] vt_do_diacrit+0x3a3/0x6b0 [ 278.239667][T19596] vt_ioctl+0xe0d/0x1880 [ 278.239780][T19596] ? tty_jobctrl_ioctl+0x29e/0x810 [ 278.239819][T19596] tty_ioctl+0x7db/0xb80 [ 278.239843][T19596] ? __pfx_tty_ioctl+0x10/0x10 [ 278.239928][T19596] __se_sys_ioctl+0xce/0x140 [ 278.240005][T19596] __x64_sys_ioctl+0x43/0x50 [ 278.240028][T19596] x64_sys_call+0x1816/0x2ff0 [ 278.240056][T19596] do_syscall_64+0xd2/0x200 [ 278.240096][T19596] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 278.240126][T19596] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 278.240168][T19596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.240189][T19596] RIP: 0033:0x7facb15eeba9 [ 278.240204][T19596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.240226][T19596] RSP: 002b:00007facb0057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.240313][T19596] RAX: ffffffffffffffda RBX: 00007facb1835fa0 RCX: 00007facb15eeba9 [ 278.240410][T19596] RDX: 0000200000000140 RSI: 0000000000004b4a RDI: 0000000000000003 [ 278.240425][T19596] RBP: 00007facb0057090 R08: 0000000000000000 R09: 0000000000000000 [ 278.240441][T19596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.240457][T19596] R13: 00007facb1836038 R14: 00007facb1835fa0 R15: 00007ffcf43e8058 [ 278.240482][T19596] [ 278.552720][T19602] SELinux: Context system_u:object_r:cron_log_t:s0 is not valid (left unmapped). [ 278.602000][T19608] loop5: detected capacity change from 0 to 1024 [ 278.625367][T19608] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 278.672608][T19621] FAULT_INJECTION: forcing a failure. [ 278.672608][T19621] name failslab, interval 1, probability 0, space 0, times 0 [ 278.685350][T19621] CPU: 1 UID: 0 PID: 19621 Comm: syz.7.4642 Not tainted syzkaller #0 PREEMPT(voluntary) [ 278.685385][T19621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 278.685402][T19621] Call Trace: [ 278.685411][T19621] [ 278.685421][T19621] __dump_stack+0x1d/0x30 [ 278.685484][T19621] dump_stack_lvl+0xe8/0x140 [ 278.685506][T19621] dump_stack+0x15/0x1b [ 278.685528][T19621] should_fail_ex+0x265/0x280 [ 278.685558][T19621] ? __request_module+0x1c4/0x3e0 [ 278.685593][T19621] should_failslab+0x8c/0xb0 [ 278.685625][T19621] ? sock_load_diag_module+0xc3/0xe0 [ 278.685652][T19621] __kmalloc_cache_noprof+0x4c/0x320 [ 278.685685][T19621] ? sock_load_diag_module+0xc3/0xe0 [ 278.685704][T19621] __request_module+0x1c4/0x3e0 [ 278.685804][T19621] sock_load_diag_module+0xc3/0xe0 [ 278.685824][T19621] inet_diag_cmd_exact+0x1f7/0x370 [ 278.685909][T19621] ? nlmon_xmit+0x4f/0x60 [ 278.685975][T19621] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 278.686059][T19621] inet_diag_rcv_msg_compat+0x1a4/0x1d0 [ 278.686096][T19621] sock_diag_rcv_msg+0x186/0x2c0 [ 278.686126][T19621] netlink_rcv_skb+0x120/0x220 [ 278.686239][T19621] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 278.686281][T19621] sock_diag_rcv+0x1c/0x30 [ 278.686308][T19621] netlink_unicast+0x5c0/0x690 [ 278.686349][T19621] netlink_sendmsg+0x58b/0x6b0 [ 278.686426][T19621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.686457][T19621] __sock_sendmsg+0x142/0x180 [ 278.686501][T19621] ____sys_sendmsg+0x31e/0x4e0 [ 278.686606][T19621] ___sys_sendmsg+0x17b/0x1d0 [ 278.686672][T19621] __x64_sys_sendmsg+0xd4/0x160 [ 278.686710][T19621] x64_sys_call+0x191e/0x2ff0 [ 278.686735][T19621] do_syscall_64+0xd2/0x200 [ 278.686825][T19621] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 278.686902][T19621] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 278.686960][T19621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.687039][T19621] RIP: 0033:0x7fb7765deba9 [ 278.687058][T19621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.687081][T19621] RSP: 002b:00007fb775047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.687102][T19621] RAX: ffffffffffffffda RBX: 00007fb776825fa0 RCX: 00007fb7765deba9 [ 278.687118][T19621] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 278.687133][T19621] RBP: 00007fb775047090 R08: 0000000000000000 R09: 0000000000000000 [ 278.687145][T19621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.687181][T19621] R13: 00007fb776826038 R14: 00007fb776825fa0 R15: 00007ffed58c7418 [ 278.687200][T19621] [ 278.992770][T19623] loop8: detected capacity change from 0 to 1024 [ 279.020294][T19623] EXT4-fs: Ignoring removed orlov option [ 279.021920][T19629] loop7: detected capacity change from 0 to 512 [ 279.031662][T19623] EXT4-fs: test_dummy_encryption option not supported [ 279.053501][T19629] /dev/loop7: Can't open blockdev [ 279.176406][T19665] FAULT_INJECTION: forcing a failure. [ 279.176406][T19665] name failslab, interval 1, probability 0, space 0, times 0 [ 279.189172][T19665] CPU: 0 UID: 0 PID: 19665 Comm: syz.6.4656 Not tainted syzkaller #0 PREEMPT(voluntary) [ 279.189245][T19665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.189260][T19665] Call Trace: [ 279.189267][T19665] [ 279.189302][T19665] __dump_stack+0x1d/0x30 [ 279.189456][T19665] dump_stack_lvl+0xe8/0x140 [ 279.189481][T19665] dump_stack+0x15/0x1b [ 279.189502][T19665] should_fail_ex+0x265/0x280 [ 279.189529][T19665] ? legacy_init_fs_context+0x31/0x80 [ 279.189573][T19665] should_failslab+0x8c/0xb0 [ 279.189624][T19665] __kmalloc_cache_noprof+0x4c/0x320 [ 279.189678][T19665] legacy_init_fs_context+0x31/0x80 [ 279.189709][T19665] alloc_fs_context+0x3ef/0x4e0 [ 279.189737][T19665] fs_context_for_mount+0x22/0x30 [ 279.189764][T19665] do_new_mount+0xe9/0x5e0 [ 279.189792][T19665] ? security_capable+0x83/0x90 [ 279.189888][T19665] path_mount+0x4a4/0xb20 [ 279.189916][T19665] ? user_path_at+0x109/0x130 [ 279.189959][T19665] __se_sys_mount+0x28f/0x2e0 [ 279.190016][T19665] ? fput+0x8f/0xc0 [ 279.190058][T19665] __x64_sys_mount+0x67/0x80 [ 279.190088][T19665] x64_sys_call+0x2b4d/0x2ff0 [ 279.190116][T19665] do_syscall_64+0xd2/0x200 [ 279.190276][T19665] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 279.190309][T19665] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 279.190417][T19665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.190447][T19665] RIP: 0033:0x7facb15eeba9 [ 279.190467][T19665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.190492][T19665] RSP: 002b:00007facb0057038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.190511][T19665] RAX: ffffffffffffffda RBX: 00007facb1835fa0 RCX: 00007facb15eeba9 [ 279.190525][T19665] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 279.190537][T19665] RBP: 00007facb0057090 R08: 0000200000000080 R09: 0000000000000000 [ 279.190551][T19665] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001 [ 279.190565][T19665] R13: 00007facb1836038 R14: 00007facb1835fa0 R15: 00007ffcf43e8058 [ 279.190583][T19665] [ 279.430730][T19672] 9pnet: Could not find request transport: r [ 279.548239][T19686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.585348][T19686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.679315][T19695] loop8: detected capacity change from 0 to 8192 [ 279.730749][T19702] __nla_validate_parse: 3 callbacks suppressed [ 279.730769][T19702] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4664'. [ 279.794073][T19712] loop8: detected capacity change from 0 to 1024 [ 279.821007][T19712] EXT4-fs: Ignoring removed orlov option [ 279.850016][T19712] EXT4-fs: test_dummy_encryption option not supported [ 279.873913][T19719] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 279.880489][T19719] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 279.888277][T19719] vhci_hcd vhci_hcd.0: Device attached [ 279.930038][T19722] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 279.936647][T19722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.944249][T19722] vhci_hcd vhci_hcd.0: Device attached [ 279.963586][T19719] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(8) [ 279.970146][T19719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.977731][T19719] vhci_hcd vhci_hcd.0: Device attached [ 280.033265][T19719] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4667'. [ 280.043906][T19725] vhci_hcd: connection closed [ 280.044165][T11365] vhci_hcd: stop threads [ 280.053276][T11365] vhci_hcd: release socket [ 280.057743][T11365] vhci_hcd: disconnect device [ 280.068291][T19723] vhci_hcd: connection closed [ 280.068481][T19720] vhci_hcd: connection closed [ 280.074714][T19728] IPv4: Oversized IP packet from 127.202.26.0 [ 280.077159][T11365] vhci_hcd: stop threads [ 280.089918][T11365] vhci_hcd: release socket [ 280.094345][T11365] vhci_hcd: disconnect device [ 280.100647][T11365] vhci_hcd: stop threads [ 280.104942][T11365] vhci_hcd: release socket [ 280.109576][T11365] vhci_hcd: disconnect device [ 280.159083][ T3405] usb 16-1: enqueue for inactive port 0 [ 280.369415][ T3405] usb 16-1: enqueue for inactive port 0 [ 280.649128][ T2957] vhci_hcd: vhci_device speed not set [ 280.684674][T19768] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 280.693007][T19768] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 280.815725][T19779] tipc: Enabled bearer , priority 0 [ 280.833926][T19779] tipc: Disabling bearer [ 280.972190][T19796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4694'. [ 280.986572][T19796] bridge0: entered promiscuous mode [ 281.061637][T19806] netlink: 'syz.6.4698': attribute type 13 has an invalid length. [ 281.075960][T19806] gretap0: refused to change device tx_queue_len [ 281.086732][T19806] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.157702][T19812] FAULT_INJECTION: forcing a failure. [ 281.157702][T19812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.171064][T19812] CPU: 1 UID: 0 PID: 19812 Comm: syz.6.4701 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.171098][T19812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 281.171132][T19812] Call Trace: [ 281.171139][T19812] [ 281.171149][T19812] __dump_stack+0x1d/0x30 [ 281.171172][T19812] dump_stack_lvl+0xe8/0x140 [ 281.171245][T19812] dump_stack+0x15/0x1b [ 281.171268][T19812] should_fail_ex+0x265/0x280 [ 281.171295][T19812] should_fail+0xb/0x20 [ 281.171316][T19812] should_fail_usercopy+0x1a/0x20 [ 281.171420][T19812] strncpy_from_user+0x25/0x230 [ 281.171460][T19812] ? kmem_cache_alloc_noprof+0x186/0x310 [ 281.171538][T19812] ? getname_flags+0x80/0x3b0 [ 281.171577][T19812] getname_flags+0xae/0x3b0 [ 281.171615][T19812] user_path_at+0x28/0x130 [ 281.171656][T19812] do_utimes+0xd9/0x210 [ 281.171686][T19812] __x64_sys_utimensat+0xc4/0x170 [ 281.171711][T19812] ? __secure_computing+0x82/0x150 [ 281.171794][T19812] ? syscall_trace_enter+0x102/0x1e0 [ 281.171819][T19812] x64_sys_call+0x2fba/0x2ff0 [ 281.171847][T19812] do_syscall_64+0xd2/0x200 [ 281.171890][T19812] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 281.171929][T19812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.171951][T19812] RIP: 0033:0x7facb15eeba9 [ 281.171967][T19812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.171992][T19812] RSP: 002b:00007facb0057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 281.172016][T19812] RAX: ffffffffffffffda RBX: 00007facb1835fa0 RCX: 00007facb15eeba9 [ 281.172028][T19812] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 281.172080][T19812] RBP: 00007facb0057090 R08: 0000000000000000 R09: 0000000000000000 [ 281.172096][T19812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.172108][T19812] R13: 00007facb1836038 R14: 00007facb1835fa0 R15: 00007ffcf43e8058 [ 281.172127][T19812] [ 281.373922][ T29] kauditd_printk_skb: 721 callbacks suppressed [ 281.373967][ T29] audit: type=1326 audit(1758019684.137:16485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19811 comm="syz.6.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7facb15ed5bc code=0x7ffc0000 [ 281.404986][ T29] audit: type=1326 audit(1758019684.337:16486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19811 comm="syz.6.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7facb15ed65f code=0x7ffc0000 [ 281.428558][ T29] audit: type=1326 audit(1758019684.337:16487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19811 comm="syz.6.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7facb15ed80a code=0x7ffc0000 [ 281.451983][ T29] audit: type=1326 audit(1758019684.337:16488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19811 comm="syz.6.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb15eeba9 code=0x7ffc0000 [ 281.475968][ T29] audit: type=1326 audit(1758019684.337:16489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19811 comm="syz.6.4701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb15eeba9 code=0x7ffc0000 [ 281.578367][T19760] Process accounting resumed [ 281.584687][T19828] loop8: detected capacity change from 0 to 512 [ 281.623781][T19828] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.643097][T19828] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.864081][T19842] netlink: 'syz.0.4711': attribute type 13 has an invalid length. [ 281.912567][T19842] gretap0: refused to change device tx_queue_len [ 281.922457][T19842] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.960272][T19846] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004D0xffffffffffffffff [ 282.022981][T16922] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.163170][T19855] 9pnet: Could not find request transport: tcp [ 282.234383][T19861] 9pnet_fd: Insufficient options for proto=fd [ 282.349312][ T3405] usb usb16-port1: attempt power cycle [ 282.372358][ T29] audit: type=1326 audit(1758019685.327:16490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.8.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643f9ceba9 code=0x7ffc0000 [ 282.396035][ T29] audit: type=1326 audit(1758019685.337:16491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.8.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f643f9ceba9 code=0x7ffc0000 [ 282.419751][ T29] audit: type=1326 audit(1758019685.337:16492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.8.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643f9ceba9 code=0x7ffc0000 [ 282.563046][ T29] audit: type=1326 audit(1758019685.337:16493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.8.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f643f9ceba9 code=0x7ffc0000 [ 282.586680][ T29] audit: type=1326 audit(1758019685.337:16494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.8.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643f9ceba9 code=0x7ffc0000 [ 282.629855][T19866] loop8: detected capacity change from 0 to 512 [ 282.653256][T19866] EXT4-fs: Ignoring removed nobh option [ 282.710277][T19866] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.4719: corrupted inode contents [ 282.753667][T19866] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.4719: mark_inode_dirty error [ 282.792086][T19866] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.4719: corrupted inode contents [ 282.830329][T19866] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.4719: mark_inode_dirty error [ 282.854326][T19874] loop5: detected capacity change from 0 to 8192 [ 282.859398][T19866] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.4719: Failed to acquire dquot type 0 [ 282.871571][T19874] vfat: Unknown parameter '' [ 282.901532][T19866] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.4719: corrupted inode contents [ 282.931531][T19866] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.4719: mark_inode_dirty error [ 282.967315][T19866] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.4719: corrupted inode contents [ 282.985844][T19887] loop5: detected capacity change from 0 to 1024 [ 283.001206][T19887] EXT4-fs: Ignoring removed orlov option [ 283.017429][T19887] EXT4-fs: test_dummy_encryption option not supported [ 283.027503][T19866] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.4719: mark_inode_dirty error [ 283.058043][T19866] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.4719: corrupted inode contents [ 283.073604][T19890] netlink: 'syz.6.4726': attribute type 10 has an invalid length. [ 283.074710][T19866] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 283.084954][T19890] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4726'. [ 283.096819][T19866] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.4719: corrupted inode contents [ 283.117175][T19866] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.4719: mark_inode_dirty error [ 283.136040][T19896] FAULT_INJECTION: forcing a failure. [ 283.136040][T19896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.141898][T19890] dummy0: entered promiscuous mode [ 283.149591][T19896] CPU: 1 UID: 0 PID: 19896 Comm: syz.0.4728 Not tainted syzkaller #0 PREEMPT(voluntary) [ 283.149704][T19896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.149721][T19896] Call Trace: [ 283.149729][T19896] [ 283.149738][T19896] __dump_stack+0x1d/0x30 [ 283.149827][T19896] dump_stack_lvl+0xe8/0x140 [ 283.149854][T19896] dump_stack+0x15/0x1b [ 283.149950][T19896] should_fail_ex+0x265/0x280 [ 283.149984][T19896] should_fail_alloc_page+0xf2/0x100 [ 283.150087][T19896] __alloc_frozen_pages_noprof+0xff/0x360 [ 283.150148][T19896] alloc_pages_mpol+0xb3/0x250 [ 283.150197][T19896] vma_alloc_folio_noprof+0x1aa/0x300 [ 283.150257][T19896] do_wp_page+0x5db/0x24e0 [ 283.150359][T19896] ? css_rstat_updated+0xb7/0x240 [ 283.150437][T19896] ? __rcu_read_lock+0x37/0x50 [ 283.150473][T19896] handle_mm_fault+0x77d/0x2c20 [ 283.150523][T19896] do_user_addr_fault+0x636/0x1090 [ 283.150590][T19896] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 283.150639][T19896] exc_page_fault+0x62/0xa0 [ 283.150679][T19896] asm_exc_page_fault+0x26/0x30 [ 283.150770][T19896] RIP: 0033:0x7f4b62020c50 [ 283.150792][T19896] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 283.150832][T19896] RSP: 002b:00007f4b60bbe4a0 EFLAGS: 00010202 [ 283.150929][T19896] RAX: 0000000000007005 RBX: 00007f4b60bbe540 RCX: 0000000000000101 [ 283.150948][T19896] RDX: 00000000000003ff RSI: 0000000000001000 RDI: 00007f4b60bbe5e0 [ 283.150966][T19896] RBP: 0000000000000102 R08: 00007f4b5879f000 R09: 0000000000000010 [ 283.150984][T19896] R10: 0000200000000d42 R11: 000000000000052a R12: 0000000000000c01 [ 283.151111][T19896] R13: 00007f4b621fda00 R14: 0000000000000017 R15: 00007f4b60bbe5e0 [ 283.151139][T19896] [ 283.151155][T19896] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 283.219960][T19890] bridge0: port 3(dummy0) entered blocking state [ 283.244199][T19866] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 283.249029][T19890] bridge0: port 3(dummy0) entered disabled state [ 283.277938][T19866] EXT4-fs (loop8): 1 truncate cleaned up [ 283.301135][T19899] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4729'. [ 283.378656][T19866] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.394599][T19890] dummy0: entered allmulticast mode [ 283.439006][T19890] bridge0: port 3(dummy0) entered blocking state [ 283.446799][T19890] bridge0: port 3(dummy0) entered forwarding state [ 283.488661][T19866] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.545550][T19866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.656076][T19923] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 283.665852][T19923] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 283.700573][T19924] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 283.710257][T19924] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 283.740564][T19928] loop6: detected capacity change from 0 to 512 [ 283.760625][T19928] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 283.773800][T19928] EXT4-fs (loop6): orphan cleanup on readonly fs [ 283.804664][T19928] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 283.873939][T19928] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 283.898841][T19928] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.4736: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 283.941951][T19928] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4736: couldn't read orphan inode 13 (err -117) [ 283.973405][T19928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.018912][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4737'. [ 284.028365][T19937] bridge_slave_1: left allmulticast mode [ 284.034189][T19937] bridge_slave_1: left promiscuous mode [ 284.040026][T19937] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.049497][T19928] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.065102][T19937] bridge_slave_0: left allmulticast mode [ 284.070976][T19937] bridge_slave_0: left promiscuous mode [ 284.076644][T19937] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.308336][T19956] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4741'. [ 284.308900][T19952] loop6: detected capacity change from 0 to 1024 [ 284.317887][ T3405] usb usb16-port1: unable to enumerate USB device [ 284.351367][T19952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.400389][T19951] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4739: bg 0: block 494: padding at end of block bitmap is not set [ 284.429360][T19951] EXT4-fs (loop6): Remounting filesystem read-only [ 284.436264][T19951] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 284.505960][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4739'. [ 284.669777][T17552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.689267][T19998] netlink: 'syz.8.4749': attribute type 13 has an invalid length. [ 284.738902][T19998] gretap0: refused to change device tx_queue_len [ 284.871210][T19998] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 284.939478][T20031] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4755'. [ 284.955154][T20020] loop6: detected capacity change from 0 to 512 [ 284.989758][T20020] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 284.997894][T20020] EXT4-fs (loop6): orphan cleanup on readonly fs [ 285.005756][T20038] loop7: detected capacity change from 0 to 1024 [ 285.032833][T20020] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 285.051585][T20038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.065337][T20020] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 285.072529][T20020] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.4752: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 285.094863][T20020] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4752: couldn't read orphan inode 13 (err -117) [ 285.112994][T20053] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4759'. [ 285.120248][T20020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.164965][T20020] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.214331][T12588] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.249680][T20065] netlink: 'syz.0.4760': attribute type 3 has an invalid length. [ 285.277006][T20072] netlink: 'syz.6.4763': attribute type 3 has an invalid length. [ 285.402351][T20083] SELinux: policydb version -5558692 does not match my version range 15-35 [ 285.418374][T20082] netlink: 'syz.0.4767': attribute type 13 has an invalid length. [ 285.419231][T20083] SELinux: failed to load policy [ 285.466348][T20087] FAULT_INJECTION: forcing a failure. [ 285.466348][T20087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.479558][T20087] CPU: 1 UID: 0 PID: 20087 Comm: syz.7.4769 Not tainted syzkaller #0 PREEMPT(voluntary) [ 285.479598][T20087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 285.479623][T20087] Call Trace: [ 285.479632][T20087] [ 285.479643][T20087] __dump_stack+0x1d/0x30 [ 285.479681][T20087] dump_stack_lvl+0xe8/0x140 [ 285.479708][T20087] dump_stack+0x15/0x1b [ 285.479731][T20087] should_fail_ex+0x265/0x280 [ 285.479829][T20087] should_fail+0xb/0x20 [ 285.479857][T20087] should_fail_usercopy+0x1a/0x20 [ 285.479961][T20087] _copy_from_user+0x1c/0xb0 [ 285.480004][T20087] ___sys_sendmsg+0xc1/0x1d0 [ 285.480139][T20087] __x64_sys_sendmsg+0xd4/0x160 [ 285.480182][T20087] x64_sys_call+0x191e/0x2ff0 [ 285.480213][T20087] do_syscall_64+0xd2/0x200 [ 285.480256][T20087] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 285.480290][T20087] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 285.480367][T20087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.480397][T20087] RIP: 0033:0x7fb7765deba9 [ 285.480417][T20087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.480446][T20087] RSP: 002b:00007fb775047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.480523][T20087] RAX: ffffffffffffffda RBX: 00007fb776825fa0 RCX: 00007fb7765deba9 [ 285.480598][T20087] RDX: 000000002404c044 RSI: 0000200000000f00 RDI: 0000000000000005 [ 285.480676][T20087] RBP: 00007fb775047090 R08: 0000000000000000 R09: 0000000000000000 [ 285.480692][T20087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.480709][T20087] R13: 00007fb776826038 R14: 00007fb776825fa0 R15: 00007ffed58c7418 [ 285.480737][T20087] [ 285.693414][T20082] gretap0: refused to change device tx_queue_len [ 285.709270][T20090] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4770'. [ 285.715755][T20092] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4771'. [ 285.728206][T20082] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 285.835366][T20106] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.878536][T20104] loop7: detected capacity change from 0 to 1024 [ 285.898157][T20104] EXT4-fs: Ignoring removed orlov option [ 285.922544][T20106] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.946986][T20104] EXT4-fs: test_dummy_encryption option not supported [ 285.998308][T20106] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.063349][T20106] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.154969][T11365] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.180653][T11365] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.194021][T11365] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.216770][T11365] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.268872][T20158] loop8: detected capacity change from 0 to 512 [ 286.276642][T20159] loop7: detected capacity change from 0 to 512 [ 286.285799][T20158] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 286.295518][T20158] EXT4-fs (loop8): orphan cleanup on readonly fs [ 286.302316][T20158] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 286.308514][T20159] /dev/loop7: Can't open blockdev [ 286.327290][T20158] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 286.338452][T20158] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #13: comm syz.8.4788: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 286.387171][T20158] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.4788: couldn't read orphan inode 13 (err -117) [ 286.437235][T20158] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.478189][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 286.478206][ T29] audit: type=1400 audit(1758019689.437:16954): avc: denied { mount } for pid=20157 comm="syz.8.4788" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 286.478581][T20158] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.678061][ T29] audit: type=1326 audit(1758019689.627:16955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6215eba9 code=0x7ffc0000 [ 286.701953][ T29] audit: type=1326 audit(1758019689.627:16956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b6215eba9 code=0x7ffc0000 [ 286.725645][ T29] audit: type=1326 audit(1758019689.627:16957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6215eba9 code=0x7ffc0000 [ 286.749343][ T29] audit: type=1326 audit(1758019689.637:16958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b6215eba9 code=0x7ffc0000 [ 286.784863][ T29] audit: type=1400 audit(1758019689.667:16959): avc: denied { create } for pid=20169 comm="syz.8.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.818886][ T29] audit: type=1326 audit(1758019689.747:16960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6215eba9 code=0x7ffc0000 [ 286.842677][ T29] audit: type=1326 audit(1758019689.747:16961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20125 comm="syz.0.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6215eba9 code=0x7ffc0000 [ 286.866488][ T29] audit: type=1326 audit(1758019689.777:16962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20175 comm="syz.7.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 286.890113][ T29] audit: type=1326 audit(1758019689.777:16963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20175 comm="syz.7.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 286.957125][T20183] loop8: detected capacity change from 0 to 1024 [ 286.993093][T20192] loop5: detected capacity change from 0 to 1024 [ 286.994752][T20183] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.007076][T20183] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 287.008872][T20192] EXT4-fs: Ignoring removed orlov option [ 287.030138][T20183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.043290][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4796'. [ 287.053655][T20192] EXT4-fs: test_dummy_encryption option not supported [ 287.061299][T20196] IPVS: Error joining to the multicast group [ 287.113850][T20208] loop7: detected capacity change from 0 to 512 [ 287.126365][T20208] /dev/loop7: Can't open blockdev [ 287.273769][T16922] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.402770][T20237] netlink: 'syz.7.4808': attribute type 10 has an invalid length. [ 287.420681][T20237] team0: Device hsr_slave_0 failed to register rx_handler [ 287.510565][T20245] loop7: detected capacity change from 0 to 1024 [ 287.517724][T20245] EXT4-fs: Ignoring removed orlov option [ 287.523624][T20245] EXT4-fs: test_dummy_encryption option not supported [ 287.654640][T20250] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4812'. [ 287.746645][T20262] loop7: detected capacity change from 0 to 512 [ 287.754662][T20262] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 287.762890][T20262] EXT4-fs (loop7): orphan cleanup on readonly fs [ 287.769792][T20262] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 287.786064][T20262] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 287.792944][T20262] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.4815: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 287.811779][T20262] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4815: couldn't read orphan inode 13 (err -117) [ 287.824353][T20262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.837095][T20262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.909835][T20273] netlink: 'syz.7.4818': attribute type 13 has an invalid length. [ 287.931101][T20273] gretap0: refused to change device tx_queue_len [ 287.938001][T20273] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 287.972984][T20275] IPv4: Oversized IP packet from 127.202.26.0 [ 288.050606][T20217] Process accounting resumed [ 288.116374][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4823'. [ 288.127577][T20284] netlink: 'syz.5.4823': attribute type 27 has an invalid length. [ 288.343588][T20303] IPv4: Oversized IP packet from 127.202.26.0 [ 288.365765][T20301] loop8: detected capacity change from 0 to 512 [ 288.383644][T20301] EXT4-fs: Ignoring removed nobh option [ 288.404966][T20301] EXT4-fs (loop8): failed to initialize system zone (-117) [ 288.423396][T20301] EXT4-fs (loop8): mount failed [ 288.494546][T20321] FAULT_INJECTION: forcing a failure. [ 288.494546][T20321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.508072][T20321] CPU: 0 UID: 0 PID: 20321 Comm: syz.7.4835 Not tainted syzkaller #0 PREEMPT(voluntary) [ 288.508112][T20321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.508130][T20321] Call Trace: [ 288.508138][T20321] [ 288.508228][T20321] __dump_stack+0x1d/0x30 [ 288.508258][T20321] dump_stack_lvl+0xe8/0x140 [ 288.508288][T20321] dump_stack+0x15/0x1b [ 288.508312][T20321] should_fail_ex+0x265/0x280 [ 288.508348][T20321] should_fail+0xb/0x20 [ 288.508378][T20321] should_fail_usercopy+0x1a/0x20 [ 288.508460][T20321] strncpy_from_user+0x25/0x230 [ 288.508511][T20321] strncpy_from_user_nofault+0x68/0xf0 [ 288.508639][T20321] bpf_bprintf_prepare+0x88f/0xd90 [ 288.508686][T20321] ? bpf_trace_run2+0xf5/0x1c0 [ 288.508718][T20321] bpf_trace_printk+0x84/0x1c0 [ 288.508761][T20321] ? bpf_trace_run2+0xf5/0x1c0 [ 288.508796][T20321] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 288.508859][T20321] bpf_trace_run2+0x107/0x1c0 [ 288.508891][T20321] ? selinux_release_secctx+0x45/0x80 [ 288.508992][T20321] ? selinux_release_secctx+0x45/0x80 [ 288.509096][T20321] kfree+0x27b/0x320 [ 288.509129][T20321] ? security_sid_to_context+0x27/0x40 [ 288.509159][T20321] selinux_release_secctx+0x45/0x80 [ 288.509197][T20321] security_release_secctx+0x42/0x60 [ 288.509275][T20321] audit_log_task_context+0xb3/0x190 [ 288.509323][T20321] audit_log_task+0xf4/0x250 [ 288.509363][T20321] audit_seccomp+0x61/0x100 [ 288.509403][T20321] ? __seccomp_filter+0x68c/0x10d0 [ 288.509479][T20321] __seccomp_filter+0x69d/0x10d0 [ 288.509560][T20321] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 288.509650][T20321] ? vfs_write+0x7e8/0x960 [ 288.509679][T20321] ? __rcu_read_unlock+0x4f/0x70 [ 288.509708][T20321] ? __fget_files+0x184/0x1c0 [ 288.509738][T20321] __secure_computing+0x82/0x150 [ 288.509801][T20321] syscall_trace_enter+0xcf/0x1e0 [ 288.509832][T20321] do_syscall_64+0xac/0x200 [ 288.509875][T20321] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 288.509933][T20321] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 288.509972][T20321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.510004][T20321] RIP: 0033:0x7fb7765deba9 [ 288.510024][T20321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.510045][T20321] RSP: 002b:00007fb775047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 288.510064][T20321] RAX: ffffffffffffffda RBX: 00007fb776825fa0 RCX: 00007fb7765deba9 [ 288.510077][T20321] RDX: 0000000000000003 RSI: 0000000000000002 RDI: 0000000000000000 [ 288.510089][T20321] RBP: 00007fb775047090 R08: 0000000000000000 R09: 0000000000000000 [ 288.510102][T20321] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 288.510119][T20321] R13: 00007fb776826038 R14: 00007fb776825fa0 R15: 00007ffed58c7418 [ 288.510186][T20321] [ 288.939045][T20284] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.946360][T20284] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.990327][T20284] $H: left promiscuous mode [ 288.995192][T20284] bond_slave_0: left promiscuous mode [ 289.000943][T20284] bond_slave_1: left promiscuous mode [ 289.009308][T20284] dummy0: left promiscuous mode [ 289.252411][T20284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.265527][T20284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.361313][T20294] syz_tun: entered allmulticast mode [ 289.406567][ T4452] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.427565][ T4452] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.454512][ T4452] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.464764][ T4452] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.474916][T20380] netlink: 'syz.8.4846': attribute type 13 has an invalid length. [ 289.481812][T20377] pim6reg1: entered promiscuous mode [ 289.488117][T20377] pim6reg1: entered allmulticast mode [ 289.511821][T20380] gretap0: refused to change device tx_queue_len [ 289.522348][T20380] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 289.601952][T20388] sd 0:0:1:0: device reset [ 289.642158][T20392] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4850'. [ 289.651261][T20392] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4850'. [ 289.702483][T20397] loop8: detected capacity change from 0 to 512 [ 289.712180][T20397] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4850: bg 0: block 5: invalid block bitmap [ 289.726974][T20397] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 289.736333][T20397] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4850: invalid indirect mapped block 3 (level 2) [ 289.749837][T20401] loop6: detected capacity change from 0 to 512 [ 289.750339][T20397] EXT4-fs (loop8): 2 truncates cleaned up [ 289.762961][T20397] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.764839][T20401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 289.784737][T20401] EXT4-fs (loop6): orphan cleanup on readonly fs [ 289.791655][T20401] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 289.807803][T20392] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.817928][T20401] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 289.825313][T20401] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.4851: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 289.843972][T20397] netlink: 'syz.8.4850': attribute type 10 has an invalid length. [ 289.849044][T20401] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4851: couldn't read orphan inode 13 (err -117) [ 289.864354][T20397] team0: Device dummy0 is up. Set it down before adding it as a team port [ 289.873730][T20401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.897929][T20392] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.907799][T20401] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.975471][T20392] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.057580][T20429] IPv4: Oversized IP packet from 127.202.26.0 [ 290.077003][T20431] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4857'. [ 290.098202][T20392] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.131136][T20443] netlink: 'syz.6.4859': attribute type 13 has an invalid length. [ 290.142650][T20443] gretap0: refused to change device tx_queue_len [ 290.152134][T20443] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 290.236169][T20455] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4865'. [ 290.254547][T20457] loop7: detected capacity change from 0 to 512 [ 290.263963][T20457] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 290.272396][T20457] EXT4-fs (loop7): orphan cleanup on readonly fs [ 290.279951][T20457] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 290.295396][T20457] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 290.302895][T20457] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.4866: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 290.321495][T20457] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4866: couldn't read orphan inode 13 (err -117) [ 290.335838][T20457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.348856][T20457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.588902][ T4444] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.610757][ T4444] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.625712][ T4444] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.635097][ T4444] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.644387][T16922] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.646628][T20495] netlink: 'syz.0.4873': attribute type 13 has an invalid length. [ 290.676208][T20495] gretap0: refused to change device tx_queue_len [ 290.683595][T20495] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 290.774294][T20511] loop8: detected capacity change from 0 to 1024 [ 290.781915][T20511] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 290.797563][T20511] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 290.805671][T20511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e028, mo2=0000] [ 290.818011][T20511] System zones: 0-1, 3-12 [ 290.822946][T20511] EXT4-fs (loop8): orphan cleanup on readonly fs [ 290.830002][T20511] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.4879: Freeing blocks not in datazone - block = 0, count = 4096 [ 290.844598][T20511] EXT4-fs (loop8): Remounting filesystem read-only [ 290.851333][T20511] EXT4-fs (loop8): 1 orphan inode deleted [ 290.857759][T20511] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.875146][T20511] netlink: 'syz.8.4879': attribute type 1 has an invalid length. [ 290.882969][T20511] netlink: 'syz.8.4879': attribute type 4 has an invalid length. [ 290.890783][T20511] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4879'. [ 290.900716][T20511] netlink: 'syz.8.4879': attribute type 1 has an invalid length. [ 290.908475][T20511] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4879'. [ 290.936138][T16922] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.966009][T20534] vhci_hcd: invalid port number 96 [ 290.971269][T20534] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 291.020017][T20540] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4887'. [ 291.076304][T20548] gretap0: refused to change device tx_queue_len [ 291.094259][T20548] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.160834][T20559] loop7: detected capacity change from 0 to 1024 [ 291.167996][T20559] EXT4-fs: Ignoring removed orlov option [ 291.178521][T20559] EXT4-fs: test_dummy_encryption option not supported [ 291.282227][T20364] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 291.289728][T20364] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 291.306591][T20585] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4902'. [ 291.317572][T20364] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.03 Device [syz0] on syz0 [ 291.399437][T20583] FAULT_INJECTION: forcing a failure. [ 291.399437][T20583] name failslab, interval 1, probability 0, space 0, times 0 [ 291.407143][T20605] loop8: detected capacity change from 0 to 512 [ 291.412189][T20583] CPU: 0 UID: 0 PID: 20583 Comm: syz.6.4901 Not tainted syzkaller #0 PREEMPT(voluntary) [ 291.412223][T20583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.412238][T20583] Call Trace: [ 291.412246][T20583] [ 291.412258][T20583] __dump_stack+0x1d/0x30 [ 291.412286][T20583] dump_stack_lvl+0xe8/0x140 [ 291.412363][T20583] dump_stack+0x15/0x1b [ 291.412461][T20583] should_fail_ex+0x265/0x280 [ 291.412495][T20583] should_failslab+0x8c/0xb0 [ 291.412534][T20583] __kmalloc_noprof+0xa5/0x3e0 [ 291.412638][T20583] ? ___neigh_create+0x4c9/0x1290 [ 291.412701][T20583] ? dst_init+0x97/0x240 [ 291.412762][T20583] ___neigh_create+0x4c9/0x1290 [ 291.412801][T20583] ? ip6_protocol_deliver_rcu+0xb2a/0x10d0 [ 291.412847][T20583] ? ip6_input+0x5e/0x140 [ 291.412887][T20583] ? ip6_rcv_finish+0x336/0x340 [ 291.412925][T20583] ? ipv6_rcv+0x72/0x150 [ 291.412962][T20583] ? __netif_receive_skb+0x9e/0x270 [ 291.413078][T20583] ? ndisc_hash+0x89/0xb0 [ 291.413114][T20583] __neigh_create+0x54/0x70 [ 291.413156][T20583] __neigh_lookup+0x4e/0x70 [ 291.413263][T20583] ? __pfx_ip6_confirm_neigh+0x10/0x10 [ 291.413311][T20583] rt6_do_redirect+0x444/0x6d0 [ 291.413462][T20583] ip6_redirect_no_header+0x180/0x1e0 [ 291.413504][T20583] ndisc_redirect_rcv+0x2a9/0x400 [ 291.413559][T20583] ndisc_rcv+0x28c/0x3d0 [ 291.413597][T20583] ? __skb_checksum_complete+0x13a/0x1c0 [ 291.413700][T20583] icmpv6_rcv+0xe5a/0x12f0 [ 291.413816][T20583] ? ip6_pol_route+0x9ae/0xb40 [ 291.413843][T20583] ? ipv6_chk_mcast_addr+0x1fd/0x210 [ 291.413888][T20583] ? __pfx_icmpv6_rcv+0x10/0x10 [ 291.413930][T20583] ip6_protocol_deliver_rcu+0xb2a/0x10d0 [ 291.414053][T20583] ip6_input_finish+0xf0/0x1d0 [ 291.414098][T20583] ip6_input+0x5e/0x140 [ 291.414138][T20583] ? __pfx_ip6_input_finish+0x10/0x10 [ 291.414185][T20583] ip6_mc_input+0x27c/0x470 [ 291.414227][T20583] ip6_rcv_finish+0x336/0x340 [ 291.414350][T20583] ipv6_rcv+0x72/0x150 [ 291.414389][T20583] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 291.414432][T20583] __netif_receive_skb+0x9e/0x270 [ 291.414563][T20583] ? tun_rx_batched+0xc7/0x430 [ 291.414592][T20583] netif_receive_skb+0x4b/0x2e0 [ 291.414633][T20583] ? tun_rx_batched+0xc7/0x430 [ 291.414660][T20583] tun_rx_batched+0xfc/0x430 [ 291.414735][T20583] tun_get_user+0x1eb6/0x2680 [ 291.414767][T20583] ? ref_tracker_alloc+0x1f2/0x2f0 [ 291.414796][T20583] tun_chr_write_iter+0x15e/0x210 [ 291.414886][T20583] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 291.414913][T20583] vfs_write+0x52a/0x960 [ 291.414960][T20583] ksys_write+0xda/0x1a0 [ 291.414994][T20583] __x64_sys_write+0x40/0x50 [ 291.415029][T20583] x64_sys_call+0x27fe/0x2ff0 [ 291.415066][T20583] do_syscall_64+0xd2/0x200 [ 291.415198][T20583] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 291.415236][T20583] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 291.415420][T20583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.415453][T20583] RIP: 0033:0x7facb15ed65f [ 291.415475][T20583] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 291.415502][T20583] RSP: 002b:00007facb0057000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 291.415531][T20583] RAX: ffffffffffffffda RBX: 00007facb1835fa0 RCX: 00007facb15ed65f [ 291.415550][T20583] RDX: 000000000000005e RSI: 0000200000002e40 RDI: 00000000000000c8 [ 291.415568][T20583] RBP: 00007facb0057090 R08: 0000000000000000 R09: 0000000000000000 [ 291.415649][T20583] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 291.415667][T20583] R13: 00007facb1836038 R14: 00007facb1835fa0 R15: 00007ffcf43e8058 [ 291.415693][T20583] [ 291.651332][ T29] kauditd_printk_skb: 1157 callbacks suppressed [ 291.651353][ T29] audit: type=1326 audit(1758019694.607:18121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20608 comm="syz.5.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3e40eba9 code=0x7ffc0000 [ 291.681831][T20607] gretap0: refused to change device tx_queue_len [ 291.686941][ T29] audit: type=1326 audit(1758019694.617:18122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20608 comm="syz.5.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3e40eba9 code=0x7ffc0000 [ 291.692397][T20605] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 291.698045][ T29] audit: type=1326 audit(1758019694.617:18123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20608 comm="syz.5.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c3e40eba9 code=0x7ffc0000 [ 291.706273][T20607] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.722278][ T29] audit: type=1326 audit(1758019694.627:18124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20608 comm="syz.5.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3e40eba9 code=0x7ffc0000 [ 291.742711][T20605] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4907: invalid indirect mapped block 4294967295 (level 0) [ 291.746879][ T29] audit: type=1326 audit(1758019694.627:18125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20608 comm="syz.5.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3e40eba9 code=0x7ffc0000 [ 291.774786][T20605] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4907: invalid indirect mapped block 4294967295 (level 1) [ 291.780374][ T29] audit: type=1326 audit(1758019694.627:18126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20608 comm="syz.5.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0c3e40eba9 code=0x7ffc0000 [ 291.843035][T20605] EXT4-fs (loop8): 1 orphan inode deleted [ 291.843814][ T29] audit: type=1326 audit(1758019694.627:18127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20608 comm="syz.5.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3e40eba9 code=0x7ffc0000 [ 291.867440][T20605] EXT4-fs (loop8): 1 truncate cleaned up [ 291.883091][ T29] audit: type=1326 audit(1758019694.627:18128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20608 comm="syz.5.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3e40eba9 code=0x7ffc0000 [ 291.941450][T20605] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.992109][T20618] loop7: detected capacity change from 0 to 164 [ 292.063706][T20618] /dev/loop7: Can't open blockdev [ 292.068890][ T29] audit: type=1400 audit(1758019695.027:18129): avc: denied { mounton } for pid=20617 comm="syz.7.4911" path="/411/file0" dev="tmpfs" ino=2183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.120266][ T29] audit: type=1326 audit(1758019695.077:18130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20622 comm="syz.7.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7765deba9 code=0x7ffc0000 [ 292.194907][T20621] loop6: detected capacity change from 0 to 8192 [ 292.206384][T20621] msdos: Unknown parameter '1844674407370955161518446744073709551615000000000000000000000001844674407370955161518446744073709551615' [ 292.267240][T20632] can0: slcan on ttyS3. [ 292.315843][T20645] gretap0: refused to change device tx_queue_len [ 292.323034][T20645] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 292.349214][T20632] can0 (unregistered): slcan off ttyS3. [ 292.411023][T20659] validate_nla: 4 callbacks suppressed [ 292.411040][T20659] netlink: 'syz.5.4922': attribute type 13 has an invalid length. [ 292.479189][T20659] gretap0: refused to change device tx_queue_len [ 292.505313][T20659] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 292.525361][T16922] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.664975][T20684] loop8: detected capacity change from 0 to 8192 [ 292.705480][T20703] loop7: detected capacity change from 0 to 512 [ 292.715599][T20703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 292.724401][T20703] EXT4-fs (loop7): orphan cleanup on readonly fs [ 292.732662][T20703] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 292.747697][T20703] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 292.757579][T20703] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.4930: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 292.777141][T20703] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4930: couldn't read orphan inode 13 (err -117) [ 292.791105][T20703] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.804206][T20703] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.843373][T20712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4931'. [ 292.853482][T20712] netem: change failed [ 292.884949][T20712] IPVS: Error connecting to the multicast addr [ 293.274864][T20719] loop5: detected capacity change from 0 to 512 [ 293.286616][T20719] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 293.298607][T20719] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4933: bg 0: block 4: invalid block bitmap [ 293.312951][T20719] EXT4-fs (loop5): Remounting filesystem read-only [ 293.319723][T20719] EXT4-fs (loop5): 1 truncate cleaned up [ 293.320336][T20726] loop6: detected capacity change from 0 to 512 [ 293.326283][T20719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.347210][T20726] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 293.360846][T20726] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4935: invalid indirect mapped block 4294967295 (level 0) [ 293.376244][T20726] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.4935: invalid indirect mapped block 4294967295 (level 1) [ 293.392042][T20726] EXT4-fs (loop6): 1 orphan inode deleted [ 293.397856][T20726] EXT4-fs (loop6): 1 truncate cleaned up [ 293.405130][T20679] ================================================================== [ 293.413258][T20679] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 293.421030][T20679] [ 293.423366][T20679] write to 0xffff888106e5dd98 of 8 bytes by task 20684 on cpu 0: [ 293.431108][T20679] fasync_remove_entry+0xcc/0x120 [ 293.436192][T20679] fasync_helper+0x97/0xc0 [ 293.440662][T20679] sock_fasync+0x58/0xc0 [ 293.444934][T20679] __fput+0x5e3/0x650 [ 293.448940][T20679] ____fput+0x1c/0x30 [ 293.452950][T20679] task_work_run+0x12e/0x1a0 [ 293.457555][T20679] exit_to_user_mode_loop+0xe4/0x100 [ 293.462863][T20679] do_syscall_64+0x1d6/0x200 [ 293.467484][T20679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.473406][T20679] [ 293.475736][T20679] read to 0xffff888106e5dd98 of 8 bytes by task 20679 on cpu 1: [ 293.483368][T20679] sock_wake_async+0x29/0x110 [ 293.488145][T20679] unix_write_space+0x13b/0x140 [ 293.493023][T20679] sock_wfree+0x14b/0x3c0 [ 293.497373][T20679] unix_destruct_scm+0xc3/0xf0 [ 293.502154][T20679] skb_release_head_state+0xba/0x1a0 [ 293.507460][T20679] __kfree_skb+0x18/0x150 [ 293.511807][T20679] sk_skb_reason_drop+0xbd/0x270 [ 293.516760][T20679] unix_release_sock+0x661/0x7b0 [ 293.521802][T20679] unix_release+0x58/0x80 [ 293.526152][T20679] sock_close+0x6b/0x150 [ 293.530422][T20679] __fput+0x298/0x650 [ 293.534456][T20679] ____fput+0x1c/0x30 [ 293.538462][T20679] task_work_run+0x12e/0x1a0 [ 293.543067][T20679] exit_to_user_mode_loop+0xe4/0x100 [ 293.548373][T20679] do_syscall_64+0x1d6/0x200 [ 293.552987][T20679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.559068][T20679] [ 293.561412][T20679] value changed: 0xffff8881037315d0 -> 0x0000000000000000 [ 293.568535][T20679] [ 293.570874][T20679] Reported by Kernel Concurrency Sanitizer on: [ 293.577033][T20679] CPU: 1 UID: 0 PID: 20679 Comm: syz.8.4925 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.586855][T20679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.596921][T20679] ================================================================== [ 293.605502][T20726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.782621][T17552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.992698][T12351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.