last executing test programs: 2m51.224078958s ago: executing program 3 (id=7856): memfd_secret(0x80000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40085}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xa7c, 0x7fffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 2m51.052342122s ago: executing program 3 (id=7858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x400, 0x800, 0x0, 0x10}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000900000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) splice(r5, 0x0, r8, 0x0, 0x80, 0x6) write(r8, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000001900)={0x8, @remote, 0x4e22, 0x4, 'ovf\x00', 0x2, 0x3, 0x5b}, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x16b0, 0x0, 0x1480, 0x1268, 0x1128, 0x1480, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x6, &(0x7f0000000140), {[{{@ipv6={@mcast2, @local, [0xffffff00, 0x0, 0xff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff000000], 'bond_slave_0\x00', 'sit0\x00', {}, {}, 0x5e, 0x3, 0x2, 0x4}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup/syz1\x00', 0x9, {0x9}}}, @common=@eui64={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2d}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x26, 0x23, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'pimreg0\x00', 'ip6gretap0\x00', {}, {}, 0x2c, 0x8, 0x0, 0x50}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xa}}}, {{@ipv6={@mcast1, @local, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xffffff00, 0xff, 0xffffffff], 'ip6_vti0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x88, 0x6, 0x2, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x31, 0x2b}}}, {{@ipv6={@local, @mcast1, [0xffffff00, 0xc0cf6fcc0015453f, 0xff], [0xff000000], 'dummy0\x00', 'pim6reg0\x00', {0xff}, {}, 0x21, 0x6, 0x3, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x2, 0x0, [0x7, 0x3, 0xc, 0x9c, 0x1, 0x7ff, 0xffff, 0x8b8, 0x4, 0x1000, 0x2, 0x2, 0x8000, 0x1e, 0x2fbd], 0x6}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0, 0x3, 0x5, 0x3ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1710) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 2m49.762173213s ago: executing program 1 (id=7870): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) 2m49.747949005s ago: executing program 1 (id=7871): unshare(0x2060000) unshare(0x40000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600), 0x33, 0x7000000, &(0x7f0000000100)="6027a98820210172b82b22ecbdc64da99999ab9cdde9825980d5afd8654f38976e340713fac123221463a4645d8412ab50d14a"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) r2 = socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000040)={0x80, 0x1, 0x7, 0xcb25, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 2m49.305849069s ago: executing program 0 (id=7875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000240)) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) syz_clone3(&(0x7f0000000740)={0x8180080, &(0x7f0000000000), &(0x7f0000000200), &(0x7f00000002c0), {0x39}, &(0x7f0000000300)=""/37, 0x25, &(0x7f00000004c0)=""/237, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$phonet_pipe(0x23, 0x5, 0x2) 2m48.606103474s ago: executing program 0 (id=7877): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x512, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x90000, 0x1, 0x1, 0x8, 0x20008, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0xb0}, {0xffffffffffffffff, 0x710534b5647828f1}, {0xffffffffffffffff, 0x1a1}, {0xffffffffffffffff, 0x5080}, {r0, 0x5001}, {0xffffffffffffffff, 0x8000}, {r1}, {0xffffffffffffffff, 0x406}, {0xffffffffffffffff, 0x3510}, {0xffffffffffffffff, 0xcf}], 0xa, &(0x7f0000000680)={0x77359400}, &(0x7f00000006c0)={[0x3]}, 0x8) 2m48.269961711s ago: executing program 4 (id=7880): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x0, 0x0}) fdatasync(0xffffffffffffffff) 2m48.223755904s ago: executing program 4 (id=7881): socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b332abd70000000000015"], 0x34}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000180), 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") 2m48.109004933s ago: executing program 0 (id=7882): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x512, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x90000, 0x1, 0x1, 0x8, 0x20008, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0xb0}, {0xffffffffffffffff, 0x710534b5647828f1}, {0xffffffffffffffff, 0x1a1}, {0xffffffffffffffff, 0x5080}, {r0, 0x5001}, {0xffffffffffffffff, 0x8000}, {}, {0xffffffffffffffff, 0x406}, {0xffffffffffffffff, 0x3510}, {0xffffffffffffffff, 0xcf}], 0xa, &(0x7f0000000680)={0x77359400}, &(0x7f00000006c0)={[0x3]}, 0x8) 2m48.002039732s ago: executing program 4 (id=7883): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000040)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@obj_user}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x39, 0x39, 0x66, 0x62, 0x34, 0x56, 0x32], 0x2d, [0x39, 0x36, 0x38, 0x36], 0x2d, [0x37, 0x65, 0x33, 0x37], 0x2d, [0x64, 0x72, 0x66, 0x62], 0x2d, [0x0, 0x65, 0x34, 0x32, 0x31, 0x61, 0x65, 0x66]}}}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@seclabel}]}, 0x0, 0x79c, &(0x7f0000001700)="$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") bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0xc0}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000ff60000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006a000000000000004c001400636d6163"], 0x13c}}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000440)=0x8000, 0x4) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='task_rename\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) unshare(0x4000400) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) 2m47.854824844s ago: executing program 4 (id=7884): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8000, 0x0, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00090004000000080000010000007f000000003cfc863e886794d7da464b2d948776fe9199678a4aa5cd800785722df39187842463bbfd9283b8a9ddd4a9cabcbb471d72c011cbda8e3eb31f42b57d5f328630b9514af01052cdd69562949cf4faffc3b766b4102308058c3e310762059b2b05b81dcb2804e0e5d89d5da79c157f3763eba46728c7d4703b9953e53ae0434484b77c43439f81b9dd763f68b0992f332198ed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x25, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) 2m47.853670334s ago: executing program 3 (id=7894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x400, 0x800, 0x0, 0x10}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000900000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x80, 0x6) write(r6, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000001900)={0x8, @remote, 0x4e22, 0x4, 'ovf\x00', 0x2, 0x3, 0x5b}, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x16b0, 0x0, 0x1480, 0x1268, 0x1128, 0x1480, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x6, &(0x7f0000000140), {[{{@ipv6={@mcast2, @local, [0xffffff00, 0x0, 0xff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff000000], 'bond_slave_0\x00', 'sit0\x00', {}, {}, 0x5e, 0x3, 0x2, 0x4}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup/syz1\x00', 0x9, {0x9}}}, @common=@eui64={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2d}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x26, 0x23, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'pimreg0\x00', 'ip6gretap0\x00', {}, {}, 0x2c, 0x8, 0x0, 0x50}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xa}}}, {{@ipv6={@mcast1, @local, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xffffff00, 0xff, 0xffffffff], 'ip6_vti0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x88, 0x6, 0x2, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x31, 0x2b}}}, {{@ipv6={@local, @mcast1, [0xffffff00, 0xc0cf6fcc0015453f, 0xff], [0xff000000], 'dummy0\x00', 'pim6reg0\x00', {0xff}, {}, 0x21, 0x6, 0x3, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x2, 0x0, [0x7, 0x3, 0xc, 0x9c, 0x1, 0x7ff, 0xffff, 0x8b8, 0x4, 0x1000, 0x2, 0x2, 0x8000, 0x1e, 0x2fbd], 0x6}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0, 0x3, 0x5, 0x3ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1710) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 2m47.667235118s ago: executing program 2 (id=7888): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) quotactl$Q_QUOTAOFF(0xffffffff80000302, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ldst={0x2, 0x1, 0x3, 0xb, 0xa, 0xfffffffffffffffe, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x33, &(0x7f0000000280)=""/51, 0x40f00, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x2, 0x3, 0x2}, {0x5, 0x2, 0x3, 0xb}], 0x10, 0x10001}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x4, 0x1e, 0x5, 0x2, 0x2, @local, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x20, 0x10, 0x800, 0x7}}) r4 = getpgrp(0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r2, r3, 0x25, 0x4, @val=@uprobe_multi={&(0x7f00000007c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000800)=[0x1, 0x6, 0x615f, 0xff, 0x3, 0xffffffffffff2209, 0x80000001, 0xffffffffffffffff], &(0x7f0000000840)=[0x5], 0x4, 0x8, 0x1, r4}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) rename(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = dup2(r7, r8) getsockopt$inet_pktinfo(r9, 0x3a, 0x8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = dup(r12) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r13}}) 2m47.532929328s ago: executing program 2 (id=7889): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000000"], &(0x7f0000000280)=""/201, 0x1a, 0xc9, 0x1, 0x5}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa) r9 = socket$netlink(0x10, 0x3, 0x0) sendfile(r9, r6, 0x0, 0x7ffff088) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x21, &(0x7f0000000280)=0x1800009, 0x48) sendmmsg$inet6(r10, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x2000008}, 0x1c, 0x0}}], 0x1, 0x20080081) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c0001007061796c676164001400028008000340000000b908000240000000040900010073797a30000000000900020073797a32"], 0xb0}}, 0x1) 2m38.473454541s ago: executing program 0 (id=7890): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000000c0), 0xc}, 0x44, 0x10000, 0x0, 0x1, 0x8, 0x40020005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) memfd_secret(0x0) r1 = creat(0x0, 0xecf86c37d530494a) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 2m38.471488451s ago: executing program 1 (id=7891): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8000, 0x0, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) ftruncate(r1, 0x2000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00090004000000080000010000007f000000003cfc863e886794d7da464b2d948776fe9199678a4aa5cd800785722df39187842463bbfd9283b8a9ddd4a9cabcbb471d72c011cbda8e3eb31f42b57d5f328630b9514af01052cdd69562949cf4faffc3b766b4102308058c3e310762059b2b05b81dcb2804e0e5d89d5da79c157f3763eba46728c7d4703b9953e53ae0434484b77c43439f81b9dd763f68b0992f332198ed28", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) 2m38.470315931s ago: executing program 3 (id=7892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d96c5e8aa4617cc54c5e67060a92661f84e698d1fe3cee10a85882cbecb29f2a22535ac50e64d95ecbab66f54373b94475e05b79a0a61bc2ae1e", 0x12d, r5) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="070000000400000008020000d9f890947a000000d8506416e7292ad2161934f5e87b4621d938ef8305d220d73e1a7eb8e5c4fe10b9c6cbe26fa922a5788c4ceeadd58f8c11293f21ce28f13739b95c85ebc5014268b5d62df060a9425efe6d83d74c0e7c0ea245b9a562c409ded21fd0c87ff70effdf0d4039cefff120098c00ca522662e37e5de5642ec15ff1cbfddf54494af51f6e18e635f38fea680b35c09f5b755982b680021ca4eee470e71dd700369b2449ddc683179c64bdb30f7a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x8, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r2, @ANYRES64=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000950000000000000048b26e25b0afec277d031b81e1eb1db03d60d7651a555f7f72766840aff55c20d0d269f889303b7bbe08d0e2d5"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000ff0f00a283394665eecded23448f0007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r14}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) 2m38.469449511s ago: executing program 4 (id=7893): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8000, 0x0, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) ftruncate(r1, 0x2000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00090004000000080000010000007f000000003cfc863e886794d7da464b2d948776fe9199678a4aa5cd800785722df39187842463bbfd9283b8a9ddd4a9cabcbb471d72c011cbda8e3eb31f42b57d5f328630b9514af01052cdd69562949cf4faffc3b766b4102308058c3e310762059b2b05b81dcb2804e0e5d89d5da79c157f3763eba46728c7d4703b9953e53ae0434484b77c43439f81b9dd763f68b0992f332198ed28", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) 2m38.434808534s ago: executing program 2 (id=7895): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000040)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@obj_user}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x39, 0x39, 0x66, 0x62, 0x34, 0x56, 0x32], 0x2d, [0x39, 0x36, 0x38, 0x36], 0x2d, [0x37, 0x65, 0x33, 0x37], 0x2d, [0x64, 0x72, 0x66, 0x62], 0x2d, [0x0, 0x65, 0x34, 0x32, 0x31, 0x61, 0x65, 0x66]}}}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@seclabel}]}, 0x0, 0x79c, &(0x7f0000001700)="$eJzs3c9rXNUeAPDvnck0Tdr3kgcP3qurgKCB0ompsVVwUXEhgoWCrm2HyTS0mWRKZlKaELBFBDeCFheCbrquWndu/bHV/8KFtFSbFisuJHInM+00mUmTJpkp5POB255zf53zvef+OJN7mAlgzxpJ/8lEHIqIj5OIocb8JCJy9VRfxInV9e4vLxXTKYmVlbd/T+rr3FteKkbLNqkDjcz/I+KHDyIOZ9aXW11YnC6Uy6W5Rn6sNnNhrLqweOTcTGGqNFWaPTY+MXH0+EvHj+1crH/8vHjw1idvPP/1ib/e/9+Nj35M4kQcbCxrjWOnjMRI45jk0kP4iNd3urAeS3pdAZ5IemlmV6/yOBRDka2nOhjoZs0AgN3yXkSsAAB7TOL5DwB7TPPvAPeWl4rNqbd/keiu269FxP7V+JvvN1eX9DXe2e2vvwcdvJc88mYkiYjhHSh/JCK++PbdL9Mpduk9JEA7l69ExJnhkfX3/2TdmIWtemET66x92+z+B93zXdr/ebld/y/zoP8Tbfo//c2xY9u0dh/rr//MzR0opqO0//dqy9i2+y3xNwxnG7l/1ft8ueTsuXIpvbf9OyJGI9ef5sc3KGP07t93Oy1r7f/duXr+elr+nWxcf7hG5mZf/yObZLcV8Bq3r0Q809cu/uRB+ycd+r+nNlnGm698+HmnZWn8adzNqR7/1fPXtxXUFqxci3iubfs/HNGWtBufOJVrjE8cq58OY82Too1vfvlssFP5re2fTmn5zc8C3ZC2/+DG8Q8nreM1q1sv46drQ993XJh5XPzrzv+YLNQK+5J36ul9jXmXCrXa3HjEvuSt9fOPPty2mW+un8Y/+mz763+j8z/9THhmk/H33frtq07Lnob2n9xS+289ceP+dMd71uPjT9t/op4abcxJ2/9xcW22gts5dgAAAAAAAAAAAAAAAAAAAAAAAACwWZmIOBhJJv8gncnk86u/4f3fGMyUK9Xa4bOV+dnJqP9W9nDkMs2vuhxq+T7U8cb34TfzR9fkX4yI/0TEp/0D9Xy+WClP9jp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGg40OH3/1O/9ve6dgDArtnf6woAAF3n+Q8Ae8/Wnv8Du1YPAKB7fP4HgL3H8x8A9h7PfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZqZMn02nlz+WlYpqfvLgwP125eGSyVJ3Oz8wX88XK3IX8VKUyVS7li5WZjju6vPpfuVK5MBGz85fGaqVqbay6sHh6pjI/Wzt9bqYwVTpdynUtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYvOrC4nShXC7NbSeR7mgn9tOtRP/TUQ2JriaysXtF5OKJNs9GRK8Py0YXddNAz+5PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+7fwIAAP//IIQicg==") bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0xc0}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000ff60000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006a000000000000004c001400636d6163"], 0x13c}}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000440)=0x8000, 0x4) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='task_rename\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) unshare(0x4000400) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) 2m38.374723699s ago: executing program 3 (id=7896): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYRES8=r1, @ANYBLOB="bef75ea9e522242e0dcfc90a9007d9e22f33ce89f90c4be103feda2e172cfebba2731d569f3625fe4e75ad75f2a2f91a26b40a6824fe57971be0b38f7f07816cefaa50ae6515080fcce68078fc0f9bd1f62125626bc48e165adc83dd420e3d3b5112fc0afc510e9b8a18b70908567831d5ab7acb029a1d7d43a8be08a4287c605aefc8392f83e24d45fe290df9e4612e294418a51f610f018e0e184f58554a2e359805bd1a1a51e2b66d7dcaf98d07d6cca3e78f6bf946064523afe1cf06db641b71c452580c3016b456e1", @ANYRESHEX=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4f, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES64=r1, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) sendto$inet(r7, 0x0, 0x0, 0x60, 0x0, 0x0) 2m38.35584198s ago: executing program 0 (id=7897): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 2m38.23470289s ago: executing program 3 (id=7898): bind$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000011ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = fsopen(0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r8, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x3, &(0x7f0000000000)) 2m38.120350999s ago: executing program 1 (id=7899): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000000c0), 0xc}, 0x44, 0x10000, 0x0, 0x1, 0x8, 0x40020005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 2m38.094853621s ago: executing program 2 (id=7900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$phonet_pipe(0x23, 0x5, 0x2) 2m38.048976794s ago: executing program 1 (id=7901): socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b332abd70000000000015"], 0x34}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x802, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"}}, 0x80}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") 2m38.048465024s ago: executing program 2 (id=7902): socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b332abd70000000000015"], 0x34}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 2m37.909820555s ago: executing program 0 (id=7903): unshare(0x2060000) unshare(0x40000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600), 0x33, 0x7000000, &(0x7f0000000100)="6027a98820210172b82b22ecbdc64da99999ab9cdde9825980d5afd8654f38976e340713fac123221463a4645d8412ab50d14a"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000040)={0x80, 0x1, 0x7, 0xcb25, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 2m37.857985049s ago: executing program 4 (id=7904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x400, 0x800, 0x0, 0x10}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000900000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x80, 0x6) write(r5, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001900)={0x8, @remote, 0x4e22, 0x4, 'ovf\x00', 0x2, 0x3, 0x5b}, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x16b0, 0x0, 0x1480, 0x1268, 0x1128, 0x1480, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x6, &(0x7f0000000140), {[{{@ipv6={@mcast2, @local, [0xffffff00, 0x0, 0xff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff000000], 'bond_slave_0\x00', 'sit0\x00', {}, {}, 0x5e, 0x3, 0x2, 0x4}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup/syz1\x00', 0x9, {0x9}}}, @common=@eui64={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2d}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x26, 0x23, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'pimreg0\x00', 'ip6gretap0\x00', {}, {}, 0x2c, 0x8, 0x0, 0x50}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xa}}}, {{@ipv6={@mcast1, @local, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xffffff00, 0xff, 0xffffffff], 'ip6_vti0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x88, 0x6, 0x2, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x31, 0x2b}}}, {{@ipv6={@local, @mcast1, [0xffffff00, 0xc0cf6fcc0015453f, 0xff], [0xff000000], 'dummy0\x00', 'pim6reg0\x00', {0xff}, {}, 0x21, 0x6, 0x3, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x2, 0x0, [0x7, 0x3, 0xc, 0x9c, 0x1, 0x7ff, 0xffff, 0x8b8, 0x4, 0x1000, 0x2, 0x2, 0x8000, 0x1e, 0x2fbd], 0x6}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0, 0x3, 0x5, 0x3ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1710) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 2m37.826981031s ago: executing program 1 (id=7905): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000000"], &(0x7f0000000280)=""/201, 0x1a, 0xc9, 0x1, 0x5}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa) r9 = socket$netlink(0x10, 0x3, 0x0) sendfile(r9, r6, 0x0, 0x7ffff088) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x21, &(0x7f0000000280)=0x1800009, 0x48) sendmmsg$inet6(r10, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x2000008}, 0x1c, 0x0}}], 0x1, 0x20080081) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c0001007061796c676164001400028008000340000000b908000240000000040900010073797a30000000000900020073797a32"], 0xb0}}, 0x1) 2m37.813594743s ago: executing program 2 (id=7906): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]}) memfd_secret(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="8b33000000000000000005", @ANYRES32=0x0, @ANYBLOB="0c0099004000000000000000100019800c"], 0x38}}, 0x0) clock_getres(0x0, 0x0) sendfile(r0, r0, 0x0, 0x1) r10 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, 0x0, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r11 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) 2m12.390940241s ago: executing program 32 (id=7903): unshare(0x2060000) unshare(0x40000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600), 0x33, 0x7000000, &(0x7f0000000100)="6027a98820210172b82b22ecbdc64da99999ab9cdde9825980d5afd8654f38976e340713fac123221463a4645d8412ab50d14a"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000040)={0x80, 0x1, 0x7, 0xcb25, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 2m12.373344363s ago: executing program 33 (id=7905): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000000"], &(0x7f0000000280)=""/201, 0x1a, 0xc9, 0x1, 0x5}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa) r9 = socket$netlink(0x10, 0x3, 0x0) sendfile(r9, r6, 0x0, 0x7ffff088) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x21, &(0x7f0000000280)=0x1800009, 0x48) sendmmsg$inet6(r10, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x2000008}, 0x1c, 0x0}}], 0x1, 0x20080081) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c0001007061796c676164001400028008000340000000b908000240000000040900010073797a30000000000900020073797a32"], 0xb0}}, 0x1) 2m12.329309376s ago: executing program 34 (id=7906): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]}) memfd_secret(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="8b33000000000000000005", @ANYRES32=0x0, @ANYBLOB="0c0099004000000000000000100019800c"], 0x38}}, 0x0) clock_getres(0x0, 0x0) sendfile(r0, r0, 0x0, 0x1) r10 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, 0x0, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r11 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) 2m12.276145301s ago: executing program 35 (id=7898): bind$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000011ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = fsopen(0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r8, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x3, &(0x7f0000000000)) 2m12.223639395s ago: executing program 36 (id=7904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x400, 0x800, 0x0, 0x10}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000900000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x80, 0x6) write(r5, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001900)={0x8, @remote, 0x4e22, 0x4, 'ovf\x00', 0x2, 0x3, 0x5b}, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x16b0, 0x0, 0x1480, 0x1268, 0x1128, 0x1480, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x6, &(0x7f0000000140), {[{{@ipv6={@mcast2, @local, [0xffffff00, 0x0, 0xff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff000000], 'bond_slave_0\x00', 'sit0\x00', {}, {}, 0x5e, 0x3, 0x2, 0x4}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup/syz1\x00', 0x9, {0x9}}}, @common=@eui64={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2d}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x26, 0x23, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'pimreg0\x00', 'ip6gretap0\x00', {}, {}, 0x2c, 0x8, 0x0, 0x50}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xa}}}, {{@ipv6={@mcast1, @local, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xffffff00, 0xff, 0xffffffff], 'ip6_vti0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x88, 0x6, 0x2, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x31, 0x2b}}}, {{@ipv6={@local, @mcast1, [0xffffff00, 0xc0cf6fcc0015453f, 0xff], [0xff000000], 'dummy0\x00', 'pim6reg0\x00', {0xff}, {}, 0x21, 0x6, 0x3, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x2, 0x0, [0x7, 0x3, 0xc, 0x9c, 0x1, 0x7ff, 0xffff, 0x8b8, 0x4, 0x1000, 0x2, 0x2, 0x8000, 0x1e, 0x2fbd], 0x6}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0, 0x3, 0x5, 0x3ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1710) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 4.96479062s ago: executing program 6 (id=8952): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 4.460041329s ago: executing program 6 (id=8957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 4.002084315s ago: executing program 6 (id=8958): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x87, 0x20, 0x800, 0x3, {{0xe, 0x4, 0x1, 0x1f, 0x38, 0x68, 0x0, 0xb, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@end, @timestamp_prespec={0x44, 0xc, 0x7, 0x3, 0x1, [{@private=0xa010101, 0x9}]}, @timestamp={0x44, 0x14, 0xb9, 0x0, 0xc, [0x81, 0x9, 0x8000, 0x7]}]}}}}}) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000002c0)=""/162, 0xa2, 0x40, &(0x7f0000000440)=@xdp={0x2c, 0x9, r0, 0x33}, 0x80) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000004c0)='devlink_trap_report\x00', r7}, 0x18) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 4.001571275s ago: executing program 8 (id=8959): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x10000, 0xb, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x62040200) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xd076, 0x100, 0x0, 0x4000000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x20000010) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sync() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.81747417s ago: executing program 8 (id=8962): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="dd804f3f", 0x4}], 0x1}, 0x20004011) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/49, 0x31}], 0x1}, 0x2100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40010000) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300)={0x10002, 0x1, 0x8}, 0x18) r6 = openat(r5, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000200)=0x40) sendfile(r6, r4, 0x0, 0x3ffff) sendfile(r6, r4, 0x0, 0x7ffff000) 3.156303412s ago: executing program 6 (id=8974): mount$bind(&(0x7f0000000040)='./file2\x00', &(0x7f00000000c0)='./file2\x00', &(0x7f0000000140), 0x9, 0x0) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x208001, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0xff, @rand_addr=0x64010101, 0x4e20, 0x2, 'wlc\x00', 0x1, 0x3, 0x17}, 0x2c) 3.111654495s ago: executing program 6 (id=8976): unshare(0x2060000) unshare(0x40000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600), 0x43, 0x7000000, &(0x7f0000000100)="6027a98820210172b82b22ecbdc64da99999ab9cdde9825980d5afd8654f38976e340713fac123221463a4645d8412ab50d14af845e59a9b4c322bed0473fe3a0bc3e6"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000040)={0x80, 0x1, 0x7, 0xcb25, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) 2.902384042s ago: executing program 8 (id=8979): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0xb0}, {0xffffffffffffffff, 0x710534b5647828f1}, {0xffffffffffffffff, 0x1a1}, {r0}], 0x4, &(0x7f0000000680)={0x77359400}, &(0x7f00000006c0)={[0x3]}, 0x8) 2.203078157s ago: executing program 8 (id=8980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 2.121956143s ago: executing program 8 (id=8981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r5) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="070000000400000008020000d9f890947a000000d8506416e7292ad2161934f5e87b4621d938ef8305d220d73e1a7eb8e5c4fe10b9c6cbe26fa922a5788c4ceeadd58f8c11293f21ce28f13739b95c85ebc5014268b5d62df060a9425efe6d83d74c0e7c0ea245b9a562c409ded21fd0c87ff70effdf0d4039cefff120098c00ca522662e37e5de5642ec15ff1cbfddf54494af51f6e18e635f38fea680b35c09f5b755982b680021ca4eee470e71dd700369b2449ddc683179c64bdb30f7a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x8, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r2, @ANYRES64=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000950000000000000048b26e25b0afec277d031b81e1eb1db03d60d7651a555f7f72766840aff55c20d0d269f889303b7bbe08d0e2d5"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000ff0f00a283394665eecded23448f0007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r14}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) 2.013903551s ago: executing program 8 (id=8983): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0xb0}, {r0}], 0x2, &(0x7f0000000680)={0x77359400}, &(0x7f00000006c0)={[0x3]}, 0x8) 1.669252188s ago: executing program 5 (id=8988): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) 1.636805551s ago: executing program 5 (id=8989): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) quotactl$Q_QUOTAOFF(0xffffffff80000302, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ldst={0x2, 0x1, 0x3, 0xb, 0xa, 0xfffffffffffffffe, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x33, &(0x7f0000000280)=""/51, 0x40f00, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x2, 0x3, 0x2}, {0x5, 0x2, 0x3, 0xb}], 0x10, 0x10001}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl1\x00', 0x0}) r3 = getpgrp(0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r2, 0x0, 0x25, 0x4, @val=@uprobe_multi={&(0x7f00000007c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000800)=[0x1, 0x6, 0x615f, 0xff, 0x3, 0xffffffffffff2209, 0x80000001, 0xffffffffffffffff], &(0x7f0000000840)=[0x5], 0x4, 0x8, 0x1, r3}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) rename(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) r8 = dup2(r6, r7) getsockopt$inet_pktinfo(r8, 0x3a, 0x8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = dup(r11) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}}) 1.430180567s ago: executing program 5 (id=8992): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESHEX], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 1.403291419s ago: executing program 5 (id=8994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x0) 1.183794926s ago: executing program 9 (id=8995): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 1.174514807s ago: executing program 5 (id=8996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x144, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x21}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x2, 0x0, 0x0, 0x8, 0x8, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}, [@algo_aead={0x52, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x30, 0x80, "25cac5216d3c"}}]}, 0x144}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 1.035425018s ago: executing program 9 (id=9000): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, 'wg2\x00'}}, 0x1e) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x2808480, &(0x7f0000000000)={[{@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@dos1xfloppy}]}, 0x1, 0x11e9, &(0x7f0000002440)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x9, 0x1}, &(0x7f00000000c0)=0x10) 490.186431ms ago: executing program 9 (id=9003): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000002c0)={[{@noblock_validity}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x803}}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS") r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 425.821956ms ago: executing program 7 (id=9004): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x18000, &(0x7f0000000200)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f646f74732c6e6f646f74732c646f74732c646f74732c646f74732c00009191ba4a9b6388d54828a3c3830c42987338a9190197eb172a21b7cfa7523e2b311d1f21fe773c1a557203941edefa8945730f6addf5d620d186e7a427df2c849c4743dde508a71789e24605df9a7108223b334f24b6ef3973fd06e3c8d4d12c"], 0x1, 0x1c8, &(0x7f0000000580)="$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") 375.94203ms ago: executing program 9 (id=9005): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x82, &(0x7f0000000000), 0x8) sendmsg$inet(r4, &(0x7f00000011c0)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)='x', 0x1}], 0x1}, 0xfc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)}, 0x8040) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0xf, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0xffff}}]}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xe}}]}}]}, 0x38}}, 0x20040054) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x18000, &(0x7f0000000200)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f646f74732c6e6f646f74732c646f74732c646f74732c646f74732c00009191ba4a9b6388d54828a3c3830c42987338a9190197eb172a21b7cfa7523e2b311d1f21fe773c1a557203941edefa8945730f6addf5d620d186e7a427df2c849c4743dde508a71789e24605df9a7108223b334f24b6ef3973fd06e3c8d4d12c"], 0x1, 0x1c8, &(0x7f0000000580)="$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") 374.44599ms ago: executing program 7 (id=9006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x0) 176.862756ms ago: executing program 7 (id=9007): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}, @in6={0xa, 0x4e23, 0x2, @empty, 0x3}, @in6={0xa, 0x4e21, 0x3eb, @private1, 0xfffffffe}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0xe44, @local, 0x1}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0xc4c, @remote, 0x5}, @in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, @in6={0xa, 0x4e22, 0xccf, @empty, 0x7}, @in6={0xa, 0x4e24, 0x8, @local, 0x3ff}]}, &(0x7f0000000440)=0x10) 145.459288ms ago: executing program 7 (id=9008): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) 144.986588ms ago: executing program 7 (id=9009): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) quotactl$Q_QUOTAOFF(0xffffffff80000302, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x4, 0x1e, 0x5, 0x2, 0x2, @local, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x20, 0x10, 0x800, 0x7}}) r4 = getpgrp(0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r2, r3, 0x25, 0x4, @val=@uprobe_multi={&(0x7f00000007c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000800)=[0x1, 0x6, 0x615f, 0xff, 0x3, 0xffffffffffff2209, 0x80000001, 0xffffffffffffffff], &(0x7f0000000840)=[0x5], 0x4, 0x8, 0x1, r4}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) rename(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = dup2(r7, r8) getsockopt$inet_pktinfo(r9, 0x3a, 0x8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r10) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) 142.575188ms ago: executing program 9 (id=9010): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x100) mount$bind(&(0x7f0000000040)='./file2\x00', &(0x7f00000000c0)='./file2\x00', &(0x7f0000000140), 0x9, 0x0) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000300)='./file2\x00', &(0x7f0000000340), 0x208001, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0xff, @rand_addr=0x64010101, 0x4e20, 0x2, 'wlc\x00', 0x1, 0x3, 0x17}, 0x2c) 119.239641ms ago: executing program 9 (id=9011): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 114.935ms ago: executing program 5 (id=9012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 60.955135ms ago: executing program 6 (id=9013): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 0s ago: executing program 7 (id=9014): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) quotactl$Q_QUOTAOFF(0xffffffff80000302, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ldst={0x2, 0x1, 0x3, 0xb, 0xa, 0xfffffffffffffffe, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x33, &(0x7f0000000280)=""/51, 0x40f00, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x2, 0x3, 0x2}, {0x5, 0x2, 0x3, 0xb}], 0x10, 0x10001}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl1\x00', 0x0}) r3 = getpgrp(0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r2, 0x0, 0x25, 0x4, @val=@uprobe_multi={&(0x7f00000007c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000800)=[0x1, 0x6, 0x615f, 0xff, 0x3, 0xffffffffffff2209, 0x80000001, 0xffffffffffffffff], &(0x7f0000000840)=[0x5], 0x4, 0x8, 0x1, r3}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) rename(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) r8 = dup2(r6, r7) getsockopt$inet_pktinfo(r8, 0x3a, 0x8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = dup(r11) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}}) kernel console output (not intermixed with test programs): 000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.117860][T30759] loop9: detected capacity change from 0 to 8192 [ 866.170503][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.403320][T30779] program syz.7.8475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 866.657510][T30782] loop5: detected capacity change from 0 to 512 [ 866.780303][T30782] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 866.794328][T30782] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.8472: corrupted xattr entries [ 866.806912][T30782] EXT4-fs (loop5): 1 truncate cleaned up [ 866.813529][T30782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.046947][T30787] loop8: detected capacity change from 0 to 512 [ 867.160053][T28818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.500327][T30787] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.697588][T30797] loop6: detected capacity change from 0 to 512 [ 867.706269][T30797] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 867.720799][T30797] EXT4-fs (loop6): 1 truncate cleaned up [ 867.736403][T30797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.802935][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.275648][T30809] lo speed is unknown, defaulting to 1000 [ 868.807711][T30820] program syz.5.8486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.167925][T30830] loop9: detected capacity change from 0 to 512 [ 869.194929][T30830] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 869.227277][T30830] EXT4-fs (loop9): mount failed [ 869.271364][T30836] loop5: detected capacity change from 0 to 512 [ 869.282086][T30836] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 869.313976][T30836] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.8489: corrupted xattr entries [ 869.326582][T30836] EXT4-fs (loop5): 1 truncate cleaned up [ 869.333144][T30836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.571692][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.777793][T30852] loop9: detected capacity change from 0 to 8192 [ 869.787324][T30851] lo speed is unknown, defaulting to 1000 [ 869.823274][T30851] siw: device registration error -23 [ 870.096122][T28818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.626362][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 870.626451][ T29] audit: type=1326 audit(1754198242.761:54741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30862 comm="syz.8.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 870.662976][T30865] siw: device registration error -23 [ 870.734658][ T29] audit: type=1326 audit(1754198242.811:54742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30862 comm="syz.8.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 870.758399][ T29] audit: type=1326 audit(1754198242.811:54743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30862 comm="syz.8.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 870.782267][ T29] audit: type=1326 audit(1754198242.811:54744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30862 comm="syz.8.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 870.806085][ T29] audit: type=1326 audit(1754198242.811:54745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30862 comm="syz.8.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 870.829678][ T29] audit: type=1326 audit(1754198242.811:54746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30862 comm="syz.8.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 870.853323][ T29] audit: type=1326 audit(1754198242.811:54747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30862 comm="syz.8.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 870.876919][ T29] audit: type=1326 audit(1754198242.811:54748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30862 comm="syz.8.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 870.900661][ T29] audit: type=1326 audit(1754198242.811:54749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30862 comm="syz.8.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 870.924247][ T29] audit: type=1326 audit(1754198242.811:54750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30862 comm="syz.8.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 870.990533][T30861] lo speed is unknown, defaulting to 1000 [ 871.049726][T30870] program syz.5.8499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 871.206350][T30878] loop5: detected capacity change from 0 to 512 [ 871.215656][T30878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.336330][T30880] loop8: detected capacity change from 0 to 512 [ 871.359884][T30880] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 871.420012][T30880] EXT4-fs error (device loop8): xattr_find_entry:333: inode #15: comm syz.8.8503: corrupted xattr entries [ 871.433133][T30880] EXT4-fs (loop8): 1 truncate cleaned up [ 871.440074][T30880] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.826888][T30890] lo speed is unknown, defaulting to 1000 [ 871.868528][T30890] siw: device registration error -23 [ 872.058615][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.947165][T30901] loop8: detected capacity change from 0 to 512 [ 873.954506][T30901] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 873.968461][T30901] EXT4-fs error (device loop8): xattr_find_entry:333: inode #15: comm syz.8.8511: corrupted xattr entries [ 873.980370][T30901] EXT4-fs (loop8): 1 truncate cleaned up [ 873.986775][T30901] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.047135][T30906] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 874.186287][T30910] loop6: detected capacity change from 0 to 8192 [ 874.197300][T30912] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 874.241064][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.304795][T30916] loop9: detected capacity change from 0 to 512 [ 874.334706][T30918] loop8: detected capacity change from 0 to 512 [ 874.351375][T30916] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 874.366351][T30918] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 874.381732][T30916] EXT4-fs (loop9): mount failed [ 874.391506][T30918] EXT4-fs (loop8): 1 truncate cleaned up [ 874.416556][T30918] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.505531][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.588697][T30925] loop7: detected capacity change from 0 to 8192 [ 874.598518][T28818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.835592][T30936] lo speed is unknown, defaulting to 1000 [ 875.045641][T30941] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.126420][T30941] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.222103][T30941] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.443021][T30941] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.518484][T30948] loop9: detected capacity change from 0 to 512 [ 875.617627][T30948] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 875.646761][T30948] EXT4-fs (loop9): mount failed [ 875.662281][T30955] loop7: detected capacity change from 0 to 512 [ 875.684328][ T51] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.693207][T30956] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 875.716481][T30955] __quota_error: 87 callbacks suppressed [ 875.716498][T30955] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 875.716530][ T51] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.740590][ T51] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.748912][T30955] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 875.775005][ T4903] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.787622][T30930] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 875.795167][T30930] vhci_hcd: invalid port number 253 [ 875.800480][T30930] vhci_hcd: invalid port number 253 [ 875.802640][ T29] audit: type=1326 audit(1754198247.941:54836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30959 comm="syz.9.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 875.829504][ T29] audit: type=1326 audit(1754198247.941:54837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30959 comm="syz.9.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 875.870523][T30955] EXT4-fs (loop7): mount failed [ 875.875920][ T29] audit: type=1326 audit(1754198247.991:54838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30959 comm="syz.9.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 875.899687][ T29] audit: type=1326 audit(1754198247.991:54839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30959 comm="syz.9.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 875.923392][ T29] audit: type=1326 audit(1754198247.991:54840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30959 comm="syz.9.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 875.947036][ T29] audit: type=1326 audit(1754198248.001:54841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30959 comm="syz.9.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 875.970716][ T29] audit: type=1326 audit(1754198248.001:54842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30959 comm="syz.9.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 875.994403][ T29] audit: type=1326 audit(1754198248.001:54843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30959 comm="syz.9.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 876.017992][ T29] audit: type=1326 audit(1754198248.001:54844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30959 comm="syz.9.8530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 876.090562][T30964] loop7: detected capacity change from 0 to 512 [ 876.097864][T30964] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 876.120844][T30968] program syz.5.8534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 876.248654][T30964] EXT4-fs (loop7): 1 truncate cleaned up [ 876.257708][T30964] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.368447][T30975] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.496501][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.661339][T30975] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.867252][T30985] lo speed is unknown, defaulting to 1000 [ 876.898688][T30985] siw: device registration error -23 [ 877.021318][T30975] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.100938][T30975] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.212079][ T52] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.270318][ T52] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.309941][ T52] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.343036][ T52] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.453845][T30990] loop7: detected capacity change from 0 to 8192 [ 877.618815][T30998] loop8: detected capacity change from 0 to 512 [ 877.640974][T30998] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.650673][T30988] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8540'. [ 877.781801][T31003] lo speed is unknown, defaulting to 1000 [ 877.805684][T31008] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.844560][T31010] loop7: detected capacity change from 0 to 512 [ 877.871510][T31010] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 877.886637][T31010] EXT4-fs (loop7): mount failed [ 877.912718][T31008] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.980974][T31008] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.004670][T31024] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 878.173662][T31008] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.451786][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.526531][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.630437][ T12] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.724085][ T12] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.787720][T31029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8552'. [ 879.026190][T31038] loop9: detected capacity change from 0 to 8192 [ 879.277285][T31036] blktrace: Concurrent blktraces are not allowed on loop11 [ 879.568366][T31036] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 879.586235][T31036] vhci_hcd: invalid port number 253 [ 879.591493][T31036] vhci_hcd: invalid port number 253 [ 879.652480][T31044] loop9: detected capacity change from 0 to 512 [ 879.670446][T31044] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 879.691422][T31044] EXT4-fs (loop9): 1 truncate cleaned up [ 879.709440][T31044] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.753889][T28838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.922499][T31049] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 880.009649][T31051] loop7: detected capacity change from 0 to 512 [ 880.016703][T31053] program syz.9.8560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 880.064154][T31051] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 880.212410][T31051] EXT4-fs (loop7): mount failed [ 880.315384][T31066] loop5: detected capacity change from 0 to 512 [ 880.327246][T31066] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 880.376262][T31061] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 880.395100][T31066] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.8561: corrupted xattr entries [ 880.407516][T31066] EXT4-fs (loop5): 1 truncate cleaned up [ 880.413788][T31066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.457992][T31061] vhci_hcd: invalid port number 253 [ 880.463298][T31061] vhci_hcd: invalid port number 253 [ 880.751297][T31073] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.785918][T31073] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.795995][T31071] loop7: detected capacity change from 0 to 8192 [ 880.843353][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.853593][T31073] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.923713][T31080] loop6: detected capacity change from 0 to 512 [ 881.000076][T31073] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.011793][T28818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.011947][T31080] __quota_error: 83 callbacks suppressed [ 881.011965][T31080] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 881.037676][T31080] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 881.064069][T31080] EXT4-fs (loop6): mount failed [ 881.104473][ T29] audit: type=1326 audit(1754198253.231:54926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31084 comm="syz.5.8569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 881.128212][ T29] audit: type=1326 audit(1754198253.231:54927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31084 comm="syz.5.8569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 881.151896][ T29] audit: type=1326 audit(1754198253.231:54928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31084 comm="syz.5.8569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 881.175555][ T29] audit: type=1326 audit(1754198253.231:54929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31084 comm="syz.5.8569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 881.199258][ T29] audit: type=1326 audit(1754198253.231:54930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31084 comm="syz.5.8569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 881.222851][ T29] audit: type=1326 audit(1754198253.231:54931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31084 comm="syz.5.8569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 881.246470][ T29] audit: type=1326 audit(1754198253.231:54932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31084 comm="syz.5.8569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 881.270119][ T29] audit: type=1326 audit(1754198253.231:54933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31084 comm="syz.5.8569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 881.293754][ T29] audit: type=1326 audit(1754198253.231:54934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31084 comm="syz.5.8569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 881.342187][T31089] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 881.371416][T31096] loop7: detected capacity change from 0 to 512 [ 881.400971][T31096] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 881.423812][T31101] loop6: detected capacity change from 0 to 512 [ 881.433197][T31096] EXT4-fs (loop7): mount failed [ 881.440111][T31095] lo speed is unknown, defaulting to 1000 [ 881.451144][T31097] lo speed is unknown, defaulting to 1000 [ 881.457049][T31102] siw: device registration error -23 [ 881.487867][T31101] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 881.504233][T31101] EXT4-fs (loop6): mount failed [ 881.510011][T31107] loop7: detected capacity change from 0 to 512 [ 881.541542][T31107] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 881.557874][T31109] loop6: detected capacity change from 0 to 512 [ 881.566962][T31107] EXT4-fs (loop7): mount failed [ 881.580898][T31109] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 881.597517][T31114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.609402][T31109] EXT4-fs (loop6): mount failed [ 881.614479][T31114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.807140][T31125] loop6: detected capacity change from 0 to 8192 [ 881.894885][T31116] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 881.909055][T31116] vhci_hcd: invalid port number 253 [ 881.914293][T31116] vhci_hcd: invalid port number 253 [ 882.130551][T31129] loop8: detected capacity change from 0 to 8192 [ 882.264172][T31132] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8583'. [ 882.482876][T31141] loop6: detected capacity change from 0 to 512 [ 882.497300][T31143] loop8: detected capacity change from 0 to 512 [ 882.505531][T31145] loop7: detected capacity change from 0 to 512 [ 882.506003][T31141] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 882.513377][T31143] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 882.528651][T31141] EXT4-fs (loop6): mount failed [ 882.543485][T31143] EXT4-fs (loop8): 1 truncate cleaned up [ 882.549822][T31143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.563771][T31145] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 882.585499][T31145] EXT4-fs (loop7): mount failed [ 882.595175][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.657732][T31157] loop8: detected capacity change from 0 to 8192 [ 882.797713][T31158] lo speed is unknown, defaulting to 1000 [ 882.813323][T31163] siw: device registration error -23 [ 883.028789][T31166] lo speed is unknown, defaulting to 1000 [ 883.085878][T31166] siw: device registration error -23 [ 883.574529][T31172] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8596'. [ 883.798247][T31177] loop6: detected capacity change from 0 to 8192 [ 883.855943][T31170] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 883.864224][T31170] vhci_hcd: invalid port number 253 [ 883.869603][T31170] vhci_hcd: invalid port number 253 [ 884.090230][T31182] lo speed is unknown, defaulting to 1000 [ 884.115155][T31183] siw: device registration error -23 [ 884.419774][T31186] loop7: detected capacity change from 0 to 2048 [ 884.444410][T31186] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 884.483154][T31188] loop5: detected capacity change from 0 to 2048 [ 884.506227][T31186] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8599'. [ 884.510445][T31188] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 884.600543][T31188] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8600'. [ 884.634687][T31190] program syz.7.8602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 884.667227][T31188] batman_adv: batadv0: Adding interface: dummy0 [ 884.673554][T31188] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.705828][T31192] program syz.6.8601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 884.739012][T31188] batman_adv: batadv0: Interface activated: dummy0 [ 884.751621][T31199] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8600'. [ 884.762626][T31193] net_ratelimit: 10 callbacks suppressed [ 884.762641][T31193] batadv0: mtu less than device minimum [ 884.774497][T31193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 884.785248][T31193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 884.796131][T31193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 884.806823][T31193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 884.817725][T31193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 884.828481][T31193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 884.839200][T31193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 884.849875][T31193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 884.860897][T31193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 884.913133][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.047271][T31207] loop5: detected capacity change from 0 to 512 [ 885.056544][T31205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.070009][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.078255][T31195] lo speed is unknown, defaulting to 1000 [ 885.091318][T31205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.118980][ T12] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.130633][T31207] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 885.147938][T31206] lo speed is unknown, defaulting to 1000 [ 885.154155][T31210] siw: device registration error -23 [ 885.163093][ T12] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.210872][T31207] EXT4-fs (loop5): mount failed [ 885.372699][T31219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.425675][T31214] lo speed is unknown, defaulting to 1000 [ 885.452194][T31219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.478438][T31213] loop9: detected capacity change from 0 to 8192 [ 885.924458][T31226] loop6: detected capacity change from 0 to 8192 [ 886.280799][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 886.280814][ T29] audit: type=1326 audit(1754198258.421:55049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31232 comm="syz.5.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 886.310815][ T29] audit: type=1326 audit(1754198258.421:55050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31232 comm="syz.5.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 886.336815][ T29] audit: type=1326 audit(1754198258.471:55051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31232 comm="syz.5.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 886.360511][ T29] audit: type=1326 audit(1754198258.471:55052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31232 comm="syz.5.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c4e45eba3 code=0x7ffc0000 [ 886.394474][ T29] audit: type=1326 audit(1754198258.531:55053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31232 comm="syz.5.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c4e45d61f code=0x7ffc0000 [ 886.534263][T31233] loop5: detected capacity change from 0 to 8192 [ 886.535351][ T29] audit: type=1326 audit(1754198258.671:55054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31232 comm="syz.5.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6c4e45ebf7 code=0x7ffc0000 [ 886.564275][ T29] audit: type=1326 audit(1754198258.671:55055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31232 comm="syz.5.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c4e45d4d0 code=0x7ffc0000 [ 886.587918][ T29] audit: type=1326 audit(1754198258.671:55056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31232 comm="syz.5.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c4e45e76b code=0x7ffc0000 [ 886.659323][ T29] audit: type=1326 audit(1754198258.681:55057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31232 comm="syz.5.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6c4e45d7ca code=0x7ffc0000 [ 886.682951][ T29] audit: type=1326 audit(1754198258.681:55058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31232 comm="syz.5.8612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6c4e45d7ca code=0x7ffc0000 [ 887.770444][T31252] program syz.9.8618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 887.921707][T31254] loop9: detected capacity change from 0 to 512 [ 887.991436][T31258] loop5: detected capacity change from 0 to 512 [ 887.998457][T31258] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 888.021118][T31254] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 888.037348][T31258] EXT4-fs (loop5): 1 truncate cleaned up [ 888.044065][T31258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.057349][T31254] EXT4-fs (loop9): mount failed [ 888.083023][T28818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.174528][T31264] syz!: rxe_newlink: already configured on team_slave_0 [ 888.239276][T31268] loop5: detected capacity change from 0 to 8192 [ 888.298635][T31270] loop9: detected capacity change from 0 to 8192 [ 888.726142][T31276] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.790961][T31276] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.812127][T31284] loop7: detected capacity change from 0 to 512 [ 888.842365][T31284] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 888.847310][T31286] loop8: detected capacity change from 0 to 8192 [ 888.879899][T31284] EXT4-fs (loop7): mount failed [ 888.886365][T31276] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.950622][T31276] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.178371][T31294] lo speed is unknown, defaulting to 1000 [ 889.190439][T31295] siw: device registration error -23 [ 889.302793][T31299] loop5: detected capacity change from 0 to 512 [ 889.341355][T31299] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 889.388192][T31299] EXT4-fs (loop5): mount failed [ 889.506187][T31305] loop5: detected capacity change from 0 to 8192 [ 889.734253][T31308] loop8: detected capacity change from 0 to 2048 [ 889.740981][T31308] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 889.756297][T31308] netlink: 76 bytes leftover after parsing attributes in process `syz.8.8638'. [ 889.767485][T31308] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8638'. [ 889.869871][T31317] loop8: detected capacity change from 0 to 512 [ 889.906759][T31318] lo speed is unknown, defaulting to 1000 [ 889.940938][T31317] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 889.967686][T31317] EXT4-fs (loop8): mount failed [ 890.065046][T31326] loop8: detected capacity change from 0 to 512 [ 890.128518][T14681] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.145225][T31326] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 890.212669][T14681] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.226452][T31330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.269323][T31326] EXT4-fs (loop8): mount failed [ 890.274303][T14681] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.325721][T14681] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.743030][T31337] lo speed is unknown, defaulting to 1000 [ 890.938970][T31323] loop7: detected capacity change from 0 to 8192 [ 891.062552][T31340] loop8: detected capacity change from 0 to 8192 [ 891.426100][T31330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.435304][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 891.435322][ T29] audit: type=1326 audit(1754198263.571:55148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31321 comm="syz.7.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0faf00d4d0 code=0x7ffc0000 [ 891.507502][ T29] audit: type=1326 audit(1754198263.571:55149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31321 comm="syz.7.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0faf00d8b7 code=0x7ffc0000 [ 891.531138][ T29] audit: type=1326 audit(1754198263.571:55150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31321 comm="syz.7.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0faf00d4d0 code=0x7ffc0000 [ 891.554745][ T29] audit: type=1326 audit(1754198263.571:55151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31321 comm="syz.7.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faf00eb69 code=0x7ffc0000 [ 891.578590][ T29] audit: type=1326 audit(1754198263.571:55152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31321 comm="syz.7.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faf00eb69 code=0x7ffc0000 [ 891.602201][ T29] audit: type=1326 audit(1754198263.571:55153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31321 comm="syz.7.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0faf00eb69 code=0x7ffc0000 [ 891.625842][ T29] audit: type=1326 audit(1754198263.601:55154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31321 comm="syz.7.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faf00eb69 code=0x7ffc0000 [ 891.649472][ T29] audit: type=1326 audit(1754198263.601:55155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31321 comm="syz.7.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faf00eb69 code=0x7ffc0000 [ 891.673124][ T29] audit: type=1326 audit(1754198263.601:55156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31321 comm="syz.7.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0faf00eb69 code=0x7ffc0000 [ 891.696727][ T29] audit: type=1326 audit(1754198263.601:55157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31321 comm="syz.7.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0faf00eb69 code=0x7ffc0000 [ 891.950458][T31355] loop6: detected capacity change from 0 to 512 [ 891.957334][T31355] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 891.968781][T31355] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.8650: corrupted xattr entries [ 891.983250][T31355] EXT4-fs (loop6): 1 truncate cleaned up [ 891.989383][T31355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.209774][T31365] loop8: detected capacity change from 0 to 8192 [ 892.217283][T31364] lo speed is unknown, defaulting to 1000 [ 892.285602][T31369] lo speed is unknown, defaulting to 1000 [ 892.519111][T31372] loop7: detected capacity change from 0 to 512 [ 892.531431][T31372] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 892.559514][T31372] EXT4-fs (loop7): mount failed [ 892.652533][T31378] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.711195][T31378] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.725776][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.761130][T31378] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.851790][T31378] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.887680][T31379] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 892.899501][T31386] loop5: detected capacity change from 0 to 512 [ 892.905866][T31379] vhci_hcd: invalid port number 253 [ 892.906692][T31386] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 892.911117][T31379] vhci_hcd: invalid port number 253 [ 892.980976][T31389] loop9: detected capacity change from 0 to 512 [ 892.999194][T31386] EXT4-fs (loop5): 1 truncate cleaned up [ 893.005310][T31386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 893.022797][ T4903] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.040559][T31389] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 893.056231][ T4903] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.074400][ T4903] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.098733][T31389] EXT4-fs (loop9): mount failed [ 893.107462][T28818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.118318][ T4903] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.143040][T31395] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 893.274955][T31397] loop8: detected capacity change from 0 to 8192 [ 893.413033][T31402] loop5: detected capacity change from 0 to 8192 [ 893.596560][T31410] loop7: detected capacity change from 0 to 8192 [ 893.690625][T31405] lo speed is unknown, defaulting to 1000 [ 894.009696][T31415] loop9: detected capacity change from 0 to 512 [ 894.045282][T31415] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 894.104892][T31415] EXT4-fs (loop9): mount failed [ 894.208427][T31421] lo speed is unknown, defaulting to 1000 [ 894.250545][T31434] loop9: detected capacity change from 0 to 512 [ 894.273370][T31421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.290184][T31438] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8675'. [ 894.301042][T31434] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 894.346135][T31434] EXT4-fs (loop9): mount failed [ 894.355142][T31445] loop8: detected capacity change from 0 to 512 [ 894.469436][T31445] EXT4-fs: Ignoring removed orlov option [ 894.490696][T31445] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 894.493939][T31448] FAULT_INJECTION: forcing a failure. [ 894.493939][T31448] name failslab, interval 1, probability 0, space 0, times 0 [ 894.511847][T31448] CPU: 1 UID: 0 PID: 31448 Comm: syz.9.8679 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 894.511884][T31448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 894.511910][T31448] Call Trace: [ 894.511919][T31448] [ 894.511976][T31448] __dump_stack+0x1d/0x30 [ 894.512052][T31448] dump_stack_lvl+0xe8/0x140 [ 894.512070][T31448] dump_stack+0x15/0x1b [ 894.512086][T31448] should_fail_ex+0x265/0x280 [ 894.512128][T31448] should_failslab+0x8c/0xb0 [ 894.512160][T31448] kmem_cache_alloc_node_noprof+0x57/0x320 [ 894.512237][T31448] ? __alloc_skb+0x101/0x320 [ 894.512270][T31448] __alloc_skb+0x101/0x320 [ 894.512308][T31448] netlink_alloc_large_skb+0xba/0xf0 [ 894.512347][T31448] netlink_sendmsg+0x3cf/0x6b0 [ 894.512461][T31448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.512591][T31448] __sock_sendmsg+0x145/0x180 [ 894.512622][T31448] ____sys_sendmsg+0x31e/0x4e0 [ 894.512657][T31448] ___sys_sendmsg+0x17b/0x1d0 [ 894.512785][T31448] __x64_sys_sendmsg+0xd4/0x160 [ 894.512931][T31448] x64_sys_call+0x191e/0x2ff0 [ 894.512959][T31448] do_syscall_64+0xd2/0x200 [ 894.512990][T31448] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 894.513013][T31448] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 894.513078][T31448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.513106][T31448] RIP: 0033:0x7fe833f9eb69 [ 894.513123][T31448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.513192][T31448] RSP: 002b:00007fe832607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.513215][T31448] RAX: ffffffffffffffda RBX: 00007fe8341c5fa0 RCX: 00007fe833f9eb69 [ 894.513227][T31448] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 894.513239][T31448] RBP: 00007fe832607090 R08: 0000000000000000 R09: 0000000000000000 [ 894.513251][T31448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.513262][T31448] R13: 0000000000000000 R14: 00007fe8341c5fa0 R15: 00007ffebbe56428 [ 894.513339][T31448] [ 894.789471][T31449] lo speed is unknown, defaulting to 1000 [ 894.849599][T31449] loop7: detected capacity change from 0 to 512 [ 894.856415][T31449] EXT4-fs: Ignoring removed mblk_io_submit option [ 894.863010][T31449] EXT4-fs: Ignoring removed bh option [ 894.978346][T31449] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 895.120325][T31421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.129195][T31449] EXT4-fs (loop7): 1 truncate cleaned up [ 895.129313][T31445] EXT4-fs (loop8): orphan cleanup on readonly fs [ 895.135352][T31449] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.143370][T31445] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8676: bg 0: block 248: padding at end of block bitmap is not set [ 895.189442][T31443] loop6: detected capacity change from 0 to 8192 [ 895.197276][T31445] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.8676: Failed to acquire dquot type 1 [ 895.211951][T31445] EXT4-fs (loop8): 1 truncate cleaned up [ 895.224398][T31445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 895.257862][T31445] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 895.290295][T31445] EXT4-fs error (device loop8): __ext4_remount:6736: comm syz.8.8676: Abort forced by user [ 895.363469][T31445] EXT4-fs (loop8): Remounting filesystem read-only [ 895.370140][T31445] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 895.381856][T31445] ext4 filesystem being remounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 895.400139][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.433052][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.461652][T31463] loop9: detected capacity change from 0 to 512 [ 895.534961][T31463] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 895.553891][T31463] EXT4-fs (loop9): mount failed [ 895.563659][T31474] loop6: detected capacity change from 0 to 128 [ 895.570575][T31473] program syz.8.8682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 895.581954][T31474] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 895.618787][T31474] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.797487][T31477] loop8: detected capacity change from 0 to 512 [ 895.810872][T28820] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 895.840601][T31477] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 895.857319][T31477] EXT4-fs (loop8): mount failed [ 895.991249][T31485] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8688'. [ 896.008613][T31486] loop9: detected capacity change from 0 to 2048 [ 896.017289][T31486] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 896.026031][T31488] loop8: detected capacity change from 0 to 512 [ 896.041644][T31488] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 896.058595][T31488] EXT4-fs (loop8): mount failed [ 896.070748][T31486] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8689'. [ 896.081980][T31486] netlink: 52 bytes leftover after parsing attributes in process `syz.9.8689'. [ 896.204110][T31499] loop8: detected capacity change from 0 to 8192 [ 896.404652][T31504] loop7: detected capacity change from 0 to 1024 [ 896.425519][T31504] EXT4-fs: Ignoring removed orlov option [ 896.481758][T31504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.531091][T31511] loop9: detected capacity change from 0 to 512 [ 896.572507][T31511] __quota_error: 71 callbacks suppressed [ 896.572523][T31511] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 896.629002][T31511] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 896.655944][T31504] FAULT_INJECTION: forcing a failure. [ 896.655944][T31504] name failslab, interval 1, probability 0, space 0, times 0 [ 896.668725][T31504] CPU: 0 UID: 0 PID: 31504 Comm: syz.7.8695 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 896.668766][T31504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 896.668806][T31504] Call Trace: [ 896.668815][T31504] [ 896.668825][T31504] __dump_stack+0x1d/0x30 [ 896.668852][T31504] dump_stack_lvl+0xe8/0x140 [ 896.668877][T31504] dump_stack+0x15/0x1b [ 896.668898][T31504] should_fail_ex+0x265/0x280 [ 896.668951][T31504] should_failslab+0x8c/0xb0 [ 896.668977][T31504] __kmalloc_noprof+0xa5/0x3e0 [ 896.669004][T31504] ? alloc_pipe_info+0x1c9/0x350 [ 896.669101][T31504] alloc_pipe_info+0x1c9/0x350 [ 896.669133][T31504] splice_direct_to_actor+0x592/0x680 [ 896.669154][T31504] ? kstrtouint_from_user+0x9f/0xf0 [ 896.669172][T31504] ? copy_to_user_nofault+0xf4/0x120 [ 896.669264][T31504] ? __pfx_direct_splice_actor+0x10/0x10 [ 896.669291][T31504] ? __rcu_read_unlock+0x4f/0x70 [ 896.669311][T31504] ? avc_policy_seqno+0x15/0x30 [ 896.669415][T31504] ? selinux_file_permission+0x1e4/0x320 [ 896.669452][T31504] do_splice_direct+0xda/0x150 [ 896.669506][T31504] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 896.669539][T31504] do_sendfile+0x380/0x650 [ 896.669578][T31504] __x64_sys_sendfile64+0x105/0x150 [ 896.669684][T31504] x64_sys_call+0x2bb0/0x2ff0 [ 896.669711][T31504] do_syscall_64+0xd2/0x200 [ 896.669752][T31504] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 896.669775][T31504] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 896.669883][T31504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.669906][T31504] RIP: 0033:0x7f0faf00eb69 [ 896.669925][T31504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.669944][T31504] RSP: 002b:00007f0fad677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 896.669963][T31504] RAX: ffffffffffffffda RBX: 00007f0faf235fa0 RCX: 00007f0faf00eb69 [ 896.669975][T31504] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 896.669987][T31504] RBP: 00007f0fad677090 R08: 0000000000000000 R09: 0000000000000000 [ 896.670004][T31504] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 896.670031][T31504] R13: 0000000000000000 R14: 00007f0faf235fa0 R15: 00007ffdf3eb08e8 [ 896.670054][T31504] [ 896.979162][T31511] EXT4-fs (loop9): mount failed [ 897.079690][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.107166][T31521] loop7: detected capacity change from 0 to 512 [ 897.114940][T31522] syz!: rxe_newlink: already configured on team_slave_0 [ 897.163705][T31521] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 897.185778][T31521] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 897.214430][T31527] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.225538][T31521] EXT4-fs (loop7): mount failed [ 897.928098][ T29] audit: type=1326 audit(1754198270.061:55220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31526 comm="syz.8.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 897.932986][T31540] loop6: detected capacity change from 0 to 512 [ 897.971489][T31527] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.980286][ T29] audit: type=1326 audit(1754198270.091:55221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31526 comm="syz.8.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 897.981782][T31540] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 898.004923][ T29] audit: type=1326 audit(1754198270.091:55222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31526 comm="syz.8.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 898.038470][ T29] audit: type=1326 audit(1754198270.091:55223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31526 comm="syz.8.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 898.056328][T31540] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 898.062121][ T29] audit: type=1326 audit(1754198270.101:55224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31526 comm="syz.8.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 898.062155][ T29] audit: type=1326 audit(1754198270.101:55225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31526 comm="syz.8.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 898.124085][ T29] audit: type=1326 audit(1754198270.101:55226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31526 comm="syz.8.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 898.148216][T31540] EXT4-fs (loop6): mount failed [ 898.180934][T31527] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.270744][T31527] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.485983][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.502957][T31553] loop8: detected capacity change from 0 to 8192 [ 898.512418][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.537611][ T12] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.584527][ T12] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.985515][T31560] loop7: detected capacity change from 0 to 512 [ 898.987470][T31558] loop9: detected capacity change from 0 to 8192 [ 898.995163][T31560] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 899.016575][T31560] EXT4-fs (loop7): 1 truncate cleaned up [ 899.024906][T31560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.052664][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.065848][T31549] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 899.077943][T31549] vhci_hcd: invalid port number 253 [ 899.083472][T31549] vhci_hcd: invalid port number 253 [ 899.309592][T31572] loop5: detected capacity change from 0 to 2048 [ 899.336482][T31572] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 899.446322][T31572] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8717'. [ 899.490407][T31572] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8717'. [ 901.616022][T31586] loop7: detected capacity change from 0 to 512 [ 901.625686][T31582] loop8: detected capacity change from 0 to 512 [ 901.735432][T31586] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 901.746598][T31582] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 901.758677][T31586] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.8718: corrupted xattr entries [ 901.770786][T31582] EXT4-fs error (device loop8): xattr_find_entry:333: inode #15: comm syz.8.8716: corrupted xattr entries [ 901.783383][T31586] EXT4-fs (loop7): 1 truncate cleaned up [ 901.789607][T31586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.803787][T31582] EXT4-fs (loop8): 1 truncate cleaned up [ 901.809856][T31582] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.085066][T31601] loop9: detected capacity change from 0 to 512 [ 902.249910][T31601] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 902.263699][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.276239][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.295316][T31601] EXT4-fs error (device loop9): xattr_find_entry:333: inode #15: comm syz.9.8722: corrupted xattr entries [ 902.308084][T31601] EXT4-fs (loop9): 1 truncate cleaned up [ 902.314496][T31601] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.356033][T31598] lo speed is unknown, defaulting to 1000 [ 902.370411][T31606] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8724'. [ 902.403146][T31610] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8725'. [ 902.412376][T31610] 8021q: VLANs not supported on ip6tnl0 [ 902.418492][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 902.418505][ T29] audit: type=1400 audit(1754198274.551:55278): avc: denied { ioctl } for pid=31608 comm="syz.7.8725" path="socket:[115845]" dev="sockfs" ino=115845 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 902.546635][T31612] loop5: detected capacity change from 0 to 8192 [ 902.549093][ T29] audit: type=1326 audit(1754198274.591:55279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31611 comm="syz.5.8727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 902.576800][ T29] audit: type=1326 audit(1754198274.591:55280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31611 comm="syz.5.8727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6c4e45eb69 code=0x7ffc0000 [ 902.578934][T28838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.600407][ T29] audit: type=1326 audit(1754198274.591:55281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31611 comm="syz.5.8727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c4e45eba3 code=0x7ffc0000 [ 902.600443][ T29] audit: type=1400 audit(1754198274.601:55282): avc: denied { bind } for pid=31608 comm="syz.7.8725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 902.652363][ T29] audit: type=1326 audit(1754198274.651:55283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31611 comm="syz.5.8727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c4e45d61f code=0x7ffc0000 [ 902.675838][ T29] audit: type=1326 audit(1754198274.681:55284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31611 comm="syz.5.8727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6c4e45ebf7 code=0x7ffc0000 [ 902.699454][ T29] audit: type=1326 audit(1754198274.681:55285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31611 comm="syz.5.8727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c4e45d4d0 code=0x7ffc0000 [ 902.723114][ T29] audit: type=1326 audit(1754198274.681:55286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31611 comm="syz.5.8727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c4e45e76b code=0x7ffc0000 [ 902.743663][T31615] loop8: detected capacity change from 0 to 8192 [ 902.752433][ T29] audit: type=1326 audit(1754198274.691:55287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31611 comm="syz.5.8727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6c4e45d7ca code=0x7ffc0000 [ 902.978217][T31627] loop9: detected capacity change from 0 to 512 [ 903.014279][T31629] loop6: detected capacity change from 0 to 512 [ 903.028052][T31629] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 903.049386][T31627] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 903.081010][T31629] EXT4-fs (loop6): 1 truncate cleaned up [ 903.093792][T31629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.094893][T31627] EXT4-fs (loop9): mount failed [ 903.185888][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.209947][T31636] Option ' ' to dns_resolver key: bad/missing value [ 904.393824][T31642] loop6: detected capacity change from 0 to 8192 [ 904.409318][T31650] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8738'. [ 904.424619][T31647] loop5: detected capacity change from 0 to 512 [ 904.434235][T31647] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 904.450178][T31647] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.8736: corrupted xattr entries [ 904.470499][T31647] EXT4-fs (loop5): 1 truncate cleaned up [ 904.476698][T31647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.508536][T31653] loop9: detected capacity change from 0 to 512 [ 904.542828][T31653] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 904.590585][T31653] EXT4-fs (loop9): mount failed [ 904.595397][T31664] loop8: detected capacity change from 0 to 512 [ 904.627250][T31662] loop7: detected capacity change from 0 to 8192 [ 904.662621][T28818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.678435][T31664] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 904.757271][T31664] EXT4-fs (loop8): mount failed [ 904.760577][T31673] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 904.874551][T31684] loop8: detected capacity change from 0 to 512 [ 904.932160][T31682] loop6: detected capacity change from 0 to 8192 [ 904.952116][T31684] EXT4-fs (loop8): 1 orphan inode deleted [ 904.958468][T31684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.000064][T31676] lo speed is unknown, defaulting to 1000 [ 905.027128][T31684] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.047982][T31684] EXT4-fs (loop8): resizing filesystem from 64 to 1 blocks [ 905.055298][T31684] EXT4-fs warning (device loop8): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 905.094051][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.383391][T31678] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 905.410177][T31678] vhci_hcd: invalid port number 253 [ 905.415446][T31678] vhci_hcd: invalid port number 253 [ 906.169301][T31705] loop7: detected capacity change from 0 to 8192 [ 906.293834][T31710] FAULT_INJECTION: forcing a failure. [ 906.293834][T31710] name failslab, interval 1, probability 0, space 0, times 0 [ 906.306514][T31710] CPU: 1 UID: 0 PID: 31710 Comm: syz.5.8757 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 906.306543][T31710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 906.306556][T31710] Call Trace: [ 906.306562][T31710] [ 906.306570][T31710] __dump_stack+0x1d/0x30 [ 906.306590][T31710] dump_stack_lvl+0xe8/0x140 [ 906.306634][T31710] dump_stack+0x15/0x1b [ 906.306656][T31710] should_fail_ex+0x265/0x280 [ 906.306698][T31710] should_failslab+0x8c/0xb0 [ 906.306725][T31710] kmem_cache_alloc_node_noprof+0x57/0x320 [ 906.306813][T31710] ? __alloc_skb+0x101/0x320 [ 906.306934][T31710] __alloc_skb+0x101/0x320 [ 906.306972][T31710] netlink_alloc_large_skb+0xba/0xf0 [ 906.307082][T31710] netlink_sendmsg+0x3cf/0x6b0 [ 906.307157][T31710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.307198][T31710] __sock_sendmsg+0x145/0x180 [ 906.307285][T31710] ____sys_sendmsg+0x31e/0x4e0 [ 906.307336][T31710] ___sys_sendmsg+0x17b/0x1d0 [ 906.307459][T31710] __x64_sys_sendmsg+0xd4/0x160 [ 906.307522][T31710] x64_sys_call+0x191e/0x2ff0 [ 906.307624][T31710] do_syscall_64+0xd2/0x200 [ 906.307724][T31710] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 906.307756][T31710] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 906.307779][T31710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.307801][T31710] RIP: 0033:0x7f6c4e45eb69 [ 906.307815][T31710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.307911][T31710] RSP: 002b:00007f6c4cac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.307929][T31710] RAX: ffffffffffffffda RBX: 00007f6c4e685fa0 RCX: 00007f6c4e45eb69 [ 906.307947][T31710] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 906.307963][T31710] RBP: 00007f6c4cac7090 R08: 0000000000000000 R09: 0000000000000000 [ 906.308051][T31710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.308063][T31710] R13: 0000000000000000 R14: 00007f6c4e685fa0 R15: 00007fff07b93bc8 [ 906.308092][T31710] [ 906.674124][T31717] loop6: detected capacity change from 0 to 512 [ 906.750472][T31717] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 906.895771][T31717] EXT4-fs (loop6): mount failed [ 907.157190][T31724] lo speed is unknown, defaulting to 1000 [ 907.229757][T31730] loop6: detected capacity change from 0 to 512 [ 907.289637][T31730] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 907.311886][T31730] EXT4-fs (loop6): mount failed [ 907.320867][T31737] loop9: detected capacity change from 0 to 512 [ 907.330109][T31737] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 907.348644][T31737] EXT4-fs (loop9): 1 truncate cleaned up [ 907.355686][T31737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.381554][T31696] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 907.389902][T31696] vhci_hcd: invalid port number 253 [ 907.395154][T31696] vhci_hcd: invalid port number 253 [ 907.402152][T28838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.430460][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 907.430473][ T29] audit: type=1400 audit(1754198279.571:55467): avc: denied { bind } for pid=31741 comm="syz.6.8765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 907.440873][T31745] loop5: detected capacity change from 0 to 512 [ 907.456293][ T29] audit: type=1400 audit(1754198279.571:55468): avc: denied { name_bind } for pid=31741 comm="syz.6.8765" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 907.484468][ T29] audit: type=1400 audit(1754198279.571:55469): avc: denied { node_bind } for pid=31741 comm="syz.6.8765" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 907.497383][T31745] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 907.521805][ T29] audit: type=1400 audit(1754198279.621:55470): avc: denied { write } for pid=31741 comm="syz.6.8765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 907.541467][ T29] audit: type=1400 audit(1754198279.621:55471): avc: denied { connect } for pid=31741 comm="syz.6.8765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 907.561252][ T29] audit: type=1400 audit(1754198279.621:55472): avc: denied { name_connect } for pid=31741 comm="syz.6.8765" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 907.596766][T31743] loop6: detected capacity change from 0 to 2048 [ 907.641559][T31745] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.8768: corrupted xattr entries [ 907.674701][T31745] EXT4-fs (loop5): 1 truncate cleaned up [ 907.680746][T31745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.824891][T31753] lo speed is unknown, defaulting to 1000 [ 907.956575][T31753] siw: device registration error -23 [ 908.029426][ T29] audit: type=1326 audit(1754198280.171:55473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31754 comm="syz.8.8769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 908.101651][ T29] audit: type=1326 audit(1754198280.191:55474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31754 comm="syz.8.8769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 908.125339][ T29] audit: type=1326 audit(1754198280.191:55475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31754 comm="syz.8.8769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 908.148895][ T29] audit: type=1326 audit(1754198280.191:55476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31754 comm="syz.8.8769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 908.200557][T31757] loop8: detected capacity change from 0 to 8192 [ 908.208086][T31743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.223017][T28818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.348287][T31748] 9pnet_fd: Insufficient options for proto=fd [ 908.450565][T31763] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 908.485119][T31769] loop9: detected capacity change from 0 to 8192 [ 908.527810][T11548] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 908.564661][T11548] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 908.577182][T11548] EXT4-fs (loop6): This should not happen!! Data will be lost [ 908.577182][T11548] [ 908.586890][T11548] EXT4-fs (loop6): Total free blocks count 0 [ 908.592917][T11548] EXT4-fs (loop6): Free/Dirty block details [ 908.598830][T11548] EXT4-fs (loop6): free_blocks=2415919104 [ 908.604647][T11548] EXT4-fs (loop6): dirty_blocks=4160 [ 908.609988][T11548] EXT4-fs (loop6): Block reservation details [ 908.616070][T11548] EXT4-fs (loop6): i_reserved_data_blocks=260 [ 908.645706][T31778] loop7: detected capacity change from 0 to 512 [ 908.698602][T31778] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 908.758269][T31771] lo speed is unknown, defaulting to 1000 [ 908.764090][T31778] EXT4-fs (loop7): mount failed [ 908.800021][T11548] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 908.908670][T31786] lo speed is unknown, defaulting to 1000 [ 908.914873][T31789] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 909.201135][T31803] loop8: detected capacity change from 0 to 512 [ 909.241061][T31803] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 909.309862][T31803] EXT4-fs error (device loop8): xattr_find_entry:333: inode #15: comm syz.8.8781: corrupted xattr entries [ 909.356483][T31803] EXT4-fs (loop8): 1 truncate cleaned up [ 909.363378][T31803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.384721][T31805] lo speed is unknown, defaulting to 1000 [ 909.401697][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.430628][T31810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.559254][T31814] loop9: detected capacity change from 0 to 8192 [ 909.587419][T31793] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 909.597901][T31793] vhci_hcd: invalid port number 253 [ 909.603198][T31793] vhci_hcd: invalid port number 253 [ 909.765899][T31810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.794344][T31822] loop8: detected capacity change from 0 to 512 [ 909.820375][T31822] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 909.854752][T31822] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 909.884778][T31822] EXT4-fs (loop8): orphan cleanup on readonly fs [ 909.909530][T31822] EXT4-fs error (device loop8): __ext4_iget:5464: inode #11: block 16777236: comm syz.8.8786: invalid block [ 909.949159][T31822] EXT4-fs (loop8): Remounting filesystem read-only [ 909.956198][T31822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 910.048773][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 910.079886][T31832] loop7: detected capacity change from 0 to 1024 [ 910.096249][T31832] EXT4-fs: Ignoring removed orlov option [ 910.114385][T31832] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.228567][T31847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8789'. [ 910.286659][T31849] loop8: detected capacity change from 0 to 512 [ 910.293198][T31847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8789'. [ 910.312672][T31847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8789'. [ 910.346577][T31847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8789'. [ 910.353907][T31849] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 910.374502][T31851] loop9: detected capacity change from 0 to 8192 [ 910.382363][T31849] EXT4-fs (loop8): mount failed [ 910.518750][T31863] loop8: detected capacity change from 0 to 8192 [ 910.623967][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.871099][T31867] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 910.881367][T31867] vhci_hcd: invalid port number 253 [ 910.886645][T31867] vhci_hcd: invalid port number 253 [ 910.934796][T31882] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8804'. [ 910.997378][T31880] lo speed is unknown, defaulting to 1000 [ 911.167320][T31880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.176401][T31880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.342597][T31893] lo speed is unknown, defaulting to 1000 [ 911.470302][T31893] siw: device registration error -23 [ 911.703590][T31898] lo speed is unknown, defaulting to 1000 [ 911.877912][T31903] loop6: detected capacity change from 0 to 512 [ 912.049788][T31903] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 912.107082][T31903] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.8808: corrupted xattr entries [ 912.119893][T31903] EXT4-fs (loop6): 1 truncate cleaned up [ 912.126341][T31903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.237529][T31909] loop9: detected capacity change from 0 to 512 [ 912.270165][T31909] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 912.302493][T31909] EXT4-fs (loop9): 1 truncate cleaned up [ 912.330817][T31909] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 912.360910][T31920] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8815'. [ 912.391347][T28838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.402529][T31913] loop7: detected capacity change from 0 to 8192 [ 912.452052][T31922] loop9: detected capacity change from 0 to 512 [ 912.458687][T31924] FAULT_INJECTION: forcing a failure. [ 912.458687][T31924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.471786][T31924] CPU: 1 UID: 0 PID: 31924 Comm: syz.5.8817 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 912.471821][T31924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 912.471837][T31924] Call Trace: [ 912.471846][T31924] [ 912.471855][T31924] __dump_stack+0x1d/0x30 [ 912.471882][T31924] dump_stack_lvl+0xe8/0x140 [ 912.471979][T31924] dump_stack+0x15/0x1b [ 912.472002][T31924] should_fail_ex+0x265/0x280 [ 912.472082][T31924] should_fail+0xb/0x20 [ 912.472118][T31924] should_fail_usercopy+0x1a/0x20 [ 912.472137][T31924] _copy_to_user+0x20/0xa0 [ 912.472164][T31924] simple_read_from_buffer+0xb5/0x130 [ 912.472193][T31924] proc_fail_nth_read+0x10e/0x150 [ 912.472278][T31924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 912.472304][T31924] vfs_read+0x1a0/0x6f0 [ 912.472323][T31924] ? __rcu_read_unlock+0x4f/0x70 [ 912.472343][T31924] ? __fget_files+0x184/0x1c0 [ 912.472410][T31924] ksys_read+0xda/0x1a0 [ 912.472436][T31924] __x64_sys_read+0x40/0x50 [ 912.472457][T31924] x64_sys_call+0x27bc/0x2ff0 [ 912.472478][T31924] do_syscall_64+0xd2/0x200 [ 912.472505][T31924] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 912.472607][T31924] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 912.472634][T31924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.472684][T31924] RIP: 0033:0x7f6c4e45d57c [ 912.472757][T31924] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 912.472781][T31924] RSP: 002b:00007f6c4cac7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 912.472806][T31924] RAX: ffffffffffffffda RBX: 00007f6c4e685fa0 RCX: 00007f6c4e45d57c [ 912.472823][T31924] RDX: 000000000000000f RSI: 00007f6c4cac70a0 RDI: 0000000000000003 [ 912.472839][T31924] RBP: 00007f6c4cac7090 R08: 0000000000000000 R09: 0000000000000000 [ 912.472855][T31924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.472867][T31924] R13: 0000000000000000 R14: 00007f6c4e685fa0 R15: 00007fff07b93bc8 [ 912.472913][T31924] [ 912.772816][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.791160][T31922] __quota_error: 69 callbacks suppressed [ 912.791240][T31922] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 912.840918][T31922] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 912.858703][ T29] audit: type=1400 audit(1754198284.991:55544): avc: denied { connect } for pid=31935 comm="syz.7.8820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 912.904243][T31922] EXT4-fs (loop9): mount failed [ 912.940204][ T29] audit: type=1400 audit(1754198285.071:55545): avc: denied { write } for pid=31935 comm="syz.7.8820" path="socket:[117058]" dev="sockfs" ino=117058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 913.001210][T31953] FAULT_INJECTION: forcing a failure. [ 913.001210][T31953] name failslab, interval 1, probability 0, space 0, times 0 [ 913.013945][T31953] CPU: 1 UID: 0 PID: 31953 Comm: syz.6.8824 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 913.014002][T31953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 913.014017][T31953] Call Trace: [ 913.014026][T31953] [ 913.014098][T31953] __dump_stack+0x1d/0x30 [ 913.014121][T31953] dump_stack_lvl+0xe8/0x140 [ 913.014141][T31953] dump_stack+0x15/0x1b [ 913.014213][T31953] should_fail_ex+0x265/0x280 [ 913.014247][T31953] should_failslab+0x8c/0xb0 [ 913.014302][T31953] kmem_cache_alloc_noprof+0x50/0x310 [ 913.014333][T31953] ? getname_flags+0x80/0x3b0 [ 913.014363][T31953] getname_flags+0x80/0x3b0 [ 913.014391][T31953] user_path_at+0x28/0x130 [ 913.014471][T31953] __se_sys_quotactl+0xb6/0x670 [ 913.014505][T31953] __x64_sys_quotactl+0x55/0x70 [ 913.014535][T31953] x64_sys_call+0x15d6/0x2ff0 [ 913.014603][T31953] do_syscall_64+0xd2/0x200 [ 913.014634][T31953] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 913.014663][T31953] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 913.014688][T31953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.014715][T31953] RIP: 0033:0x7f71cd86eb69 [ 913.014805][T31953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.014825][T31953] RSP: 002b:00007f71cbed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 913.014863][T31953] RAX: ffffffffffffffda RBX: 00007f71cda95fa0 RCX: 00007f71cd86eb69 [ 913.014876][T31953] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffff80000202 [ 913.014888][T31953] RBP: 00007f71cbed7090 R08: 0000000000000000 R09: 0000000000000000 [ 913.014901][T31953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.014915][T31953] R13: 0000000000000000 R14: 00007f71cda95fa0 R15: 00007ffe0d091178 [ 913.014938][T31953] [ 913.204562][T31934] lo speed is unknown, defaulting to 1000 [ 913.288683][T31960] loop6: detected capacity change from 0 to 512 [ 913.303131][T31960] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 913.313330][T31960] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 913.324672][T31965] loop7: detected capacity change from 0 to 512 [ 913.336097][T31965] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 913.346199][T31960] EXT4-fs (loop6): mount failed [ 913.356744][T31965] EXT4-fs (loop7): 1 truncate cleaned up [ 913.362931][T31965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.385266][T31968] loop9: detected capacity change from 0 to 512 [ 913.415524][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.426712][T31968] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 913.437076][T31968] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 913.458289][T31968] EXT4-fs (loop9): mount failed [ 913.520088][T31974] loop5: detected capacity change from 0 to 8192 [ 913.623191][T31984] loop6: detected capacity change from 0 to 512 [ 913.631789][T31984] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 913.965993][ T29] audit: type=1400 audit(1754198286.101:55546): avc: granted { setsecparam } for pid=31986 comm="syz.5.8834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 914.035140][T31984] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.8829: corrupted xattr entries [ 914.048689][T31984] EXT4-fs (loop6): 1 truncate cleaned up [ 914.054982][T31984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.099866][ T29] audit: type=1326 audit(1754198286.231:55547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.8.8836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 914.123701][ T29] audit: type=1326 audit(1754198286.231:55548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.8.8836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 914.147395][ T29] audit: type=1326 audit(1754198286.231:55549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.8.8836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 914.171040][ T29] audit: type=1326 audit(1754198286.231:55550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31991 comm="syz.8.8836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 914.292073][T32008] loop8: detected capacity change from 0 to 512 [ 914.330346][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.353551][T32008] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 914.372305][T32008] EXT4-fs (loop8): mount failed [ 914.382636][T32017] Option ' ' to dns_resolver key: bad/missing value [ 914.433865][T32020] syz!: rxe_newlink: already configured on team_slave_0 [ 914.476896][T32021] loop7: detected capacity change from 0 to 8192 [ 914.553036][T32011] lo speed is unknown, defaulting to 1000 [ 914.576378][T32034] capability: warning: `wg1' uses deprecated v2 capabilities in a way that may be insecure [ 914.608038][T32037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.669111][T32029] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 914.678439][T32029] vhci_hcd: invalid port number 253 [ 914.683700][T32029] vhci_hcd: invalid port number 253 [ 914.743100][T32025] lo speed is unknown, defaulting to 1000 [ 914.854965][T32037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.886210][T32045] FAULT_INJECTION: forcing a failure. [ 914.886210][T32045] name failslab, interval 1, probability 0, space 0, times 0 [ 914.899062][T32045] CPU: 0 UID: 0 PID: 32045 Comm: syz.5.8852 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 914.899097][T32045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 914.899112][T32045] Call Trace: [ 914.899118][T32045] [ 914.899125][T32045] __dump_stack+0x1d/0x30 [ 914.899164][T32045] dump_stack_lvl+0xe8/0x140 [ 914.899189][T32045] dump_stack+0x15/0x1b [ 914.899249][T32045] should_fail_ex+0x265/0x280 [ 914.899365][T32045] should_failslab+0x8c/0xb0 [ 914.899396][T32045] kmem_cache_alloc_noprof+0x50/0x310 [ 914.899432][T32045] ? audit_log_start+0x365/0x6c0 [ 914.899507][T32045] audit_log_start+0x365/0x6c0 [ 914.899552][T32045] audit_seccomp+0x48/0x100 [ 914.899581][T32045] ? __seccomp_filter+0x68c/0x10d0 [ 914.899606][T32045] __seccomp_filter+0x69d/0x10d0 [ 914.899634][T32045] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 914.899713][T32045] ? vfs_write+0x75e/0x8e0 [ 914.899736][T32045] ? __rcu_read_unlock+0x4f/0x70 [ 914.899856][T32045] ? __fget_files+0x184/0x1c0 [ 914.899883][T32045] __secure_computing+0x82/0x150 [ 914.899903][T32045] syscall_trace_enter+0xcf/0x1e0 [ 914.899926][T32045] do_syscall_64+0xac/0x200 [ 914.899989][T32045] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 914.900019][T32045] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 914.900043][T32045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.900064][T32045] RIP: 0033:0x7f6c4e45eb69 [ 914.900078][T32045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.900101][T32045] RSP: 002b:00007f6c4cac7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 914.900148][T32045] RAX: ffffffffffffffda RBX: 00007f6c4e685fa0 RCX: 00007f6c4e45eb69 [ 914.900166][T32045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000af2 [ 914.900182][T32045] RBP: 00007f6c4cac7090 R08: 0000000000000000 R09: 0000000000000000 [ 914.900210][T32045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.900222][T32045] R13: 0000000000000000 R14: 00007f6c4e685fa0 R15: 00007fff07b93bc8 [ 914.900240][T32045] [ 915.866216][T32062] loop7: detected capacity change from 0 to 512 [ 915.928062][T32062] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 916.022888][T32066] Option ' ' to dns_resolver key: bad/missing value [ 916.041786][T32062] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.8853: corrupted xattr entries [ 916.054838][T32062] EXT4-fs (loop7): 1 truncate cleaned up [ 916.061583][T32062] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 916.192617][T32069] syz!: rxe_newlink: already configured on team_slave_0 [ 916.234825][T32075] loop9: detected capacity change from 0 to 512 [ 916.252295][T32075] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 916.269861][T32075] EXT4-fs (loop9): mount failed [ 916.277643][T32079] loop6: detected capacity change from 0 to 512 [ 916.284705][T32079] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 916.296959][T32079] EXT4-fs (loop6): 1 truncate cleaned up [ 916.304240][T32079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.329370][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.344646][T32084] loop9: detected capacity change from 0 to 512 [ 916.351658][T32084] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 916.357266][T32086] tipc: Started in network mode [ 916.365036][T32084] EXT4-fs (loop9): 1 truncate cleaned up [ 916.366602][T32086] tipc: Node identity 82d794419d9c, cluster identity 4711 [ 916.373117][T32084] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.379532][T32086] tipc: Enabled bearer , priority 0 [ 916.407906][T28838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.422530][T32086] loop6: detected capacity change from 0 to 1024 [ 916.430401][T32086] EXT4-fs: Ignoring removed orlov option [ 916.523153][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.526163][T32086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 916.552875][T32085] tipc: Disabling bearer [ 916.629580][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.826821][T32098] loop7: detected capacity change from 0 to 512 [ 916.835979][T32098] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 916.846470][T32098] EXT4-fs (loop7): failed to open journal device unknown-block(8,3) -6 [ 917.021545][T32100] loop5: detected capacity change from 0 to 512 [ 917.052037][T32100] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 917.067573][T32100] EXT4-fs (loop5): mount failed [ 917.185481][T32108] loop7: detected capacity change from 0 to 512 [ 917.308354][T32108] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 917.308840][T32104] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 917.324878][T32108] EXT4-fs (loop7): mount failed [ 917.330559][T32104] vhci_hcd: invalid port number 253 [ 917.340676][T32104] vhci_hcd: invalid port number 253 [ 917.420538][T32116] loop5: detected capacity change from 0 to 512 [ 917.459304][T32116] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 917.505557][T32116] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.8872: corrupted xattr entries [ 917.518101][T32116] EXT4-fs (loop5): 1 truncate cleaned up [ 917.524565][T32116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.580849][T32119] loop9: detected capacity change from 0 to 512 [ 917.604773][T32119] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 917.626707][T32119] EXT4-fs (loop9): failed to open journal device unknown-block(8,3) -6 [ 917.841581][T32133] loop7: detected capacity change from 0 to 1024 [ 917.856133][T32133] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 917.921662][T32138] loop6: detected capacity change from 0 to 512 [ 917.931460][T32133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.940984][T32138] EXT4-fs (loop6): 1 orphan inode deleted [ 917.951266][T32138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.954284][T32133] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.8880: missing EA_INODE flag [ 917.963908][T32138] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.975275][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 917.975294][ T29] audit: type=1400 audit(1754198290.091:55691): avc: denied { append } for pid=32132 comm="syz.7.8880" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 917.987829][T32133] EXT4-fs (loop7): Remounting filesystem read-only [ 918.607292][T32142] lo speed is unknown, defaulting to 1000 [ 918.646901][T28818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.712005][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.052629][T32153] lo speed is unknown, defaulting to 1000 [ 919.095261][ T29] audit: type=1400 audit(1754198291.231:55692): avc: denied { execute } for pid=32154 comm="+}[@" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=117411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 919.174422][T32159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.273409][ T29] audit: type=1400 audit(1754198291.301:55693): avc: denied { ioctl } for pid=32154 comm="+}[@" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 919.743212][T32163] loop6: detected capacity change from 0 to 8192 [ 919.879524][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.911860][T32166] FAULT_INJECTION: forcing a failure. [ 919.911860][T32166] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 919.925250][T32166] CPU: 1 UID: 0 PID: 32166 Comm: syz.9.8889 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 919.925358][T32166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 919.925379][T32166] Call Trace: [ 919.925388][T32166] [ 919.925397][T32166] __dump_stack+0x1d/0x30 [ 919.925417][T32166] dump_stack_lvl+0xe8/0x140 [ 919.925436][T32166] dump_stack+0x15/0x1b [ 919.925454][T32166] should_fail_ex+0x265/0x280 [ 919.925570][T32166] should_fail_alloc_page+0xf2/0x100 [ 919.925596][T32166] __alloc_frozen_pages_noprof+0xff/0x360 [ 919.925644][T32166] alloc_pages_mpol+0xb3/0x250 [ 919.925696][T32166] folio_alloc_mpol_noprof+0x39/0x80 [ 919.925784][T32166] shmem_get_folio_gfp+0x3cf/0xd60 [ 919.925882][T32166] ? simple_xattr_get+0xb9/0x120 [ 919.925927][T32166] shmem_write_begin+0xa8/0x190 [ 919.926013][T32166] generic_perform_write+0x181/0x490 [ 919.926049][T32166] shmem_file_write_iter+0xc5/0xf0 [ 919.926081][T32166] do_iter_readv_writev+0x421/0x4c0 [ 919.926111][T32166] vfs_writev+0x2df/0x8b0 [ 919.926223][T32166] __se_sys_pwritev2+0xfc/0x1c0 [ 919.926259][T32166] __x64_sys_pwritev2+0x67/0x80 [ 919.926293][T32166] x64_sys_call+0x2c55/0x2ff0 [ 919.926321][T32166] do_syscall_64+0xd2/0x200 [ 919.926344][T32166] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 919.926404][T32166] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 919.926477][T32166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.926498][T32166] RIP: 0033:0x7fe833f9eb69 [ 919.926512][T32166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.926533][T32166] RSP: 002b:00007fe832607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 919.926557][T32166] RAX: ffffffffffffffda RBX: 00007fe8341c5fa0 RCX: 00007fe833f9eb69 [ 919.926575][T32166] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 919.926591][T32166] RBP: 00007fe832607090 R08: 0000000000000000 R09: 0000000000000003 [ 919.926603][T32166] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 919.926615][T32166] R13: 0000000000000000 R14: 00007fe8341c5fa0 R15: 00007ffebbe56428 [ 919.926637][T32166] [ 920.214485][ T29] audit: type=1400 audit(1754198292.351:55694): avc: denied { name_connect } for pid=32167 comm="syz.9.8890" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 920.254275][T32168] loop9: detected capacity change from 0 to 256 [ 920.380825][ T29] audit: type=1326 audit(1754198292.521:55695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32171 comm="syz.9.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 920.404571][ T29] audit: type=1326 audit(1754198292.521:55696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32171 comm="syz.9.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 920.544156][T32172] loop9: detected capacity change from 0 to 8192 [ 920.560676][T32170] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 920.578372][T32170] vhci_hcd: invalid port number 253 [ 920.583662][T32170] vhci_hcd: invalid port number 253 [ 920.615489][ T29] audit: type=1326 audit(1754198292.571:55697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32171 comm="syz.9.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe833f9eb69 code=0x7ffc0000 [ 920.639337][ T29] audit: type=1326 audit(1754198292.571:55698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32171 comm="syz.9.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe833f9eba3 code=0x7ffc0000 [ 920.649861][T32159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.662855][ T29] audit: type=1326 audit(1754198292.611:55699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32171 comm="syz.9.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe833f9d61f code=0x7ffc0000 [ 920.694173][ T29] audit: type=1326 audit(1754198292.681:55700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32171 comm="syz.9.8892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe833f9ebf7 code=0x7ffc0000 [ 920.798963][T32177] loop7: detected capacity change from 0 to 512 [ 920.830584][T32183] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.860458][T32177] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 920.877017][T32177] EXT4-fs (loop7): mount failed [ 920.883549][T32183] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.933962][T32183] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.960949][T32192] loop7: detected capacity change from 0 to 512 [ 920.968263][T32192] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 920.985567][T32192] EXT4-fs (loop7): 1 truncate cleaned up [ 920.992779][T32183] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.999045][T32192] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.037104][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.083217][ T5176] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.102728][ T5176] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.115763][ T5176] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.124571][ T5176] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.172924][T32199] FAULT_INJECTION: forcing a failure. [ 921.172924][T32199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.186198][T32199] CPU: 1 UID: 0 PID: 32199 Comm: syz.5.8898 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 921.186231][T32199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 921.186248][T32199] Call Trace: [ 921.186255][T32199] [ 921.186264][T32199] __dump_stack+0x1d/0x30 [ 921.186334][T32199] dump_stack_lvl+0xe8/0x140 [ 921.186358][T32199] dump_stack+0x15/0x1b [ 921.186378][T32199] should_fail_ex+0x265/0x280 [ 921.186419][T32199] should_fail+0xb/0x20 [ 921.186505][T32199] should_fail_usercopy+0x1a/0x20 [ 921.186529][T32199] strncpy_from_user+0x25/0x230 [ 921.186601][T32199] ? kmem_cache_alloc_noprof+0x186/0x310 [ 921.186635][T32199] ? getname_flags+0x80/0x3b0 [ 921.186671][T32199] getname_flags+0xae/0x3b0 [ 921.186783][T32199] do_sys_openat2+0x60/0x110 [ 921.186824][T32199] __x64_sys_openat+0xf2/0x120 [ 921.186884][T32199] x64_sys_call+0x2e9c/0x2ff0 [ 921.186911][T32199] do_syscall_64+0xd2/0x200 [ 921.186941][T32199] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 921.187027][T32199] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 921.187050][T32199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.187072][T32199] RIP: 0033:0x7f6c4e45d4d0 [ 921.187089][T32199] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 921.187132][T32199] RSP: 002b:00007f6c4cac6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 921.187178][T32199] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6c4e45d4d0 [ 921.187194][T32199] RDX: 0000000000000002 RSI: 00007f6c4cac6c10 RDI: 00000000ffffff9c [ 921.187254][T32199] RBP: 00007f6c4cac6c10 R08: 0000000000000000 R09: 0000000000000000 [ 921.187270][T32199] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 921.187286][T32199] R13: 0000000000000001 R14: 00007f6c4e685fa0 R15: 00007fff07b93bc8 [ 921.187309][T32199] [ 921.603290][T32205] loop6: detected capacity change from 0 to 512 [ 921.623083][T32205] EXT4-fs (loop6): 1 orphan inode deleted [ 921.629702][T32205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.644421][T32205] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.705079][T32208] loop5: detected capacity change from 0 to 512 [ 921.712891][T32208] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 921.740768][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.815105][T32208] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.8900: corrupted xattr entries [ 921.828370][T32208] EXT4-fs (loop5): 1 truncate cleaned up [ 921.834987][T32208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 921.998566][T32216] loop6: detected capacity change from 0 to 512 [ 922.066263][T32216] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 922.076352][T32212] loop9: detected capacity change from 0 to 8192 [ 922.089884][T32216] EXT4-fs (loop6): 1 truncate cleaned up [ 922.105096][T32216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.136270][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.161309][T32225] loop7: detected capacity change from 0 to 512 [ 922.202320][T32225] EXT4-fs (loop7): 1 orphan inode deleted [ 922.208836][T32225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.222701][T32225] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.247006][T32227] loop6: detected capacity change from 0 to 1024 [ 922.260497][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.269865][T32227] EXT4-fs: Ignoring removed orlov option [ 922.279920][T32227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.325906][T32227] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 922.360840][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.371312][T28818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.509308][T32245] loop5: detected capacity change from 0 to 512 [ 922.517587][T32245] EXT4-fs (loop5): orphan cleanup on readonly fs [ 922.523997][T32245] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 922.534388][T32245] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 922.786069][T32248] loop6: detected capacity change from 0 to 512 [ 922.804612][T32248] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 922.821622][T32245] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.8914: attempt to clear invalid blocks 2 len 1 [ 923.017205][T32250] loop9: detected capacity change from 0 to 512 [ 923.025100][T32250] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 923.064638][T32248] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.8911: corrupted xattr entries [ 923.076254][T32250] EXT4-fs error (device loop9): xattr_find_entry:333: inode #15: comm syz.9.8912: corrupted xattr entries [ 923.090385][T32248] EXT4-fs (loop6): 1 truncate cleaned up [ 923.096676][T32248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.109610][T32250] EXT4-fs (loop9): 1 truncate cleaned up [ 923.116188][T32250] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.230550][T32245] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.8914: invalid indirect mapped block 1819239214 (level 0) [ 923.383564][T32258] loop7: detected capacity change from 0 to 512 [ 923.398398][T32245] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.8914: invalid indirect mapped block 1819239214 (level 1) [ 923.425678][T32258] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 923.447826][T32245] EXT4-fs (loop5): 1 truncate cleaned up [ 923.499144][T32258] EXT4-fs (loop7): 1 truncate cleaned up [ 923.560603][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 923.560618][ T29] audit: type=1326 audit(1754198295.681:55721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32263 comm="syz.8.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 923.579549][T32266] loop8: detected capacity change from 0 to 8192 [ 923.590442][ T29] audit: type=1326 audit(1754198295.681:55722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32263 comm="syz.8.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 923.620514][ T29] audit: type=1326 audit(1754198295.681:55723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32263 comm="syz.8.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7bbcd9eb69 code=0x7ffc0000 [ 923.644330][ T29] audit: type=1326 audit(1754198295.681:55724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32263 comm="syz.8.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7bbcd9eba3 code=0x7ffc0000 [ 923.667755][ T29] audit: type=1326 audit(1754198295.701:55725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32263 comm="syz.8.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7bbcd9d61f code=0x7ffc0000 [ 923.692327][ T29] audit: type=1326 audit(1754198295.711:55726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32263 comm="syz.8.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7bbcd9ebf7 code=0x7ffc0000 [ 923.715866][ T29] audit: type=1326 audit(1754198295.721:55727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32263 comm="syz.8.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bbcd9d4d0 code=0x7ffc0000 [ 923.719753][T32245] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 923.739547][ T29] audit: type=1326 audit(1754198295.721:55728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32263 comm="syz.8.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7bbcd9e76b code=0x7ffc0000 [ 923.772346][ T29] audit: type=1400 audit(1754198295.761:55729): avc: denied { read } for pid=32243 comm="syz.5.8914" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 923.792726][ T29] audit: type=1326 audit(1754198295.831:55730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32263 comm="syz.8.8919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7bbcd9d7ca code=0x7ffc0000 [ 923.820944][T32271] FAULT_INJECTION: forcing a failure. [ 923.820944][T32271] name failslab, interval 1, probability 0, space 0, times 0 [ 923.821667][T32245] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.8914: Abort forced by user [ 923.833652][T32271] CPU: 0 UID: 0 PID: 32271 Comm: syz.9.8920 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 923.833753][T32271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 923.833782][T32271] Call Trace: [ 923.833791][T32271] [ 923.833802][T32271] __dump_stack+0x1d/0x30 [ 923.833831][T32271] dump_stack_lvl+0xe8/0x140 [ 923.833857][T32271] dump_stack+0x15/0x1b [ 923.833880][T32271] should_fail_ex+0x265/0x280 [ 923.833924][T32271] should_failslab+0x8c/0xb0 [ 923.833972][T32271] kmem_cache_alloc_node_noprof+0x57/0x320 [ 923.834013][T32271] ? __alloc_skb+0x101/0x320 [ 923.834051][T32271] __alloc_skb+0x101/0x320 [ 923.834126][T32271] netlink_alloc_large_skb+0xba/0xf0 [ 923.834222][T32271] netlink_sendmsg+0x3cf/0x6b0 [ 923.834268][T32271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.834344][T32271] __sock_sendmsg+0x145/0x180 [ 923.834377][T32271] ____sys_sendmsg+0x31e/0x4e0 [ 923.834431][T32271] ___sys_sendmsg+0x17b/0x1d0 [ 923.834529][T32271] __x64_sys_sendmsg+0xd4/0x160 [ 923.834581][T32271] x64_sys_call+0x191e/0x2ff0 [ 923.834611][T32271] do_syscall_64+0xd2/0x200 [ 923.834718][T32271] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 923.834751][T32271] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 923.834788][T32271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.834817][T32271] RIP: 0033:0x7fe833f9eb69 [ 923.834889][T32271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.834913][T32271] RSP: 002b:00007fe832607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.834939][T32271] RAX: ffffffffffffffda RBX: 00007fe8341c5fa0 RCX: 00007fe833f9eb69 [ 923.834955][T32271] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 923.834996][T32271] RBP: 00007fe832607090 R08: 0000000000000000 R09: 0000000000000000 [ 923.835013][T32271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.835030][T32271] R13: 0000000000000000 R14: 00007fe8341c5fa0 R15: 00007ffebbe56428 [ 923.835056][T32271] [ 923.892215][T32276] loop7: detected capacity change from 0 to 512 [ 923.998677][T32245] EXT4-fs (loop5): Remounting filesystem read-only [ 924.060130][T32245] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 924.088810][T32276] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.272972][T32287] lo speed is unknown, defaulting to 1000 [ 924.300073][T32295] loop5: detected capacity change from 0 to 512 [ 924.338845][T32295] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 924.388855][T32295] EXT4-fs (loop5): 1 truncate cleaned up [ 924.504002][T32301] loop7: detected capacity change from 0 to 512 [ 924.579925][T32301] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 924.737966][T32301] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.8928: corrupted xattr entries [ 924.751583][T32301] EXT4-fs (loop7): 1 truncate cleaned up [ 924.874291][T32305] lo speed is unknown, defaulting to 1000 [ 925.009963][T32318] loop6: detected capacity change from 0 to 2048 [ 925.079016][T32319] loop9: detected capacity change from 0 to 512 [ 925.432977][T32321] loop5: detected capacity change from 0 to 512 [ 925.542182][T32318] EXT4-fs (loop6): #clusters per group too big: 151011328 [ 925.550414][T32319] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 925.561469][T32321] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 925.574942][T32319] EXT4-fs error (device loop9): xattr_find_entry:333: inode #15: comm syz.9.8933: corrupted xattr entries [ 925.586872][T32319] EXT4-fs (loop9): 1 truncate cleaned up [ 925.627755][T32321] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.8932: corrupted xattr entries [ 925.641873][T32321] EXT4-fs (loop5): 1 truncate cleaned up [ 925.781791][T32327] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8936'. [ 925.834402][T32318] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8935'. [ 925.853817][T32329] loop9: detected capacity change from 0 to 512 [ 925.877649][T32333] netlink: 'syz.7.8940': attribute type 4 has an invalid length. [ 925.901713][T32333] netlink: 'syz.7.8940': attribute type 4 has an invalid length. [ 925.920354][T32334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8935'. [ 925.939706][T32329] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 925.987423][T32329] EXT4-fs (loop9): mount failed [ 926.123838][T32341] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 926.139437][T32339] loop8: detected capacity change from 0 to 8192 [ 926.172618][T32345] loop9: detected capacity change from 0 to 512 [ 926.185279][T32347] loop6: detected capacity change from 0 to 512 [ 926.209829][T32345] EXT4-fs (loop9): 1 orphan inode deleted [ 926.218740][T32345] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 926.254138][T32347] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 926.293575][T32345] EXT4-fs (loop9): resizing filesystem from 64 to 1 blocks [ 926.300895][T32345] EXT4-fs warning (device loop9): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 926.322156][T32349] lo speed is unknown, defaulting to 1000 [ 926.328051][T32347] EXT4-fs (loop6): mount failed [ 926.610980][T32375] loop9: detected capacity change from 0 to 512 [ 926.619036][T32375] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 926.853674][T32375] EXT4-fs error (device loop9): xattr_find_entry:333: inode #15: comm syz.9.8947: corrupted xattr entries [ 926.865614][T32375] EXT4-fs (loop9): 1 truncate cleaned up [ 926.872253][T32375] EXT4-fs mount: 18 callbacks suppressed [ 926.872265][T32375] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.005667][T32386] loop6: detected capacity change from 0 to 1024 [ 927.013361][T32386] EXT4-fs: Ignoring removed orlov option [ 927.023382][T32386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.087346][T32390] loop8: detected capacity change from 0 to 1024 [ 927.094008][T32390] EXT4-fs: Ignoring removed orlov option [ 927.106698][T32390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.193769][T32396] tipc: Started in network mode [ 927.198722][T32396] tipc: Node identity 3a9b439ce43, cluster identity 4711 [ 927.205866][T32396] tipc: Enabled bearer , priority 0 [ 927.213425][T32396] syzkaller0: entered promiscuous mode [ 927.218944][T32396] syzkaller0: entered allmulticast mode [ 927.239292][T32396] tipc: Resetting bearer [ 927.278315][T28838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.287954][T32395] tipc: Resetting bearer [ 927.316463][T32395] tipc: Disabling bearer [ 927.531287][T32401] loop9: detected capacity change from 0 to 512 [ 927.700078][T32401] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 927.714121][T32401] EXT4-fs error (device loop9): xattr_find_entry:333: inode #15: comm syz.9.8956: corrupted xattr entries [ 927.729530][T32401] EXT4-fs (loop9): 1 truncate cleaned up [ 927.736328][T32401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.762157][T28820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.925450][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.017786][T32408] lo speed is unknown, defaulting to 1000 [ 928.197412][T32422] loop7: detected capacity change from 0 to 512 [ 928.212174][T28838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.220765][T32422] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 928.238331][T32422] EXT4-fs (loop7): mount failed [ 928.244955][T32425] loop8: detected capacity change from 0 to 1024 [ 928.256721][T32425] EXT4-fs: Ignoring removed orlov option [ 928.271615][T32425] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 928.300675][T32435] loop7: detected capacity change from 0 to 512 [ 928.310217][T32435] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 928.325103][T32435] EXT4-fs (loop7): mount failed [ 928.354742][T32439] syz!: rxe_newlink: already configured on team_slave_0 [ 928.371991][T32443] loop7: detected capacity change from 0 to 512 [ 928.380694][T32443] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 928.394045][T32445] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.500653][T32445] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.541021][T32445] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.591633][T32445] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.668083][ T422] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.694556][ T422] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.703605][ T422] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.712363][ T422] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.928285][T32460] lo speed is unknown, defaulting to 1000 [ 929.053140][T28833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.154823][T32469] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.210298][T32472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.246317][T32472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.280675][T32469] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.370461][T32469] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.481214][T32469] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.625894][ T52] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.657801][ T52] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.697661][ T52] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.721034][ T52] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.899588][T28826] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.910429][T32480] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 929.946709][T32482] loop7: detected capacity change from 0 to 512 [ 929.970378][T32484] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.009514][T32482] __quota_error: 106 callbacks suppressed [ 930.009530][T32482] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 930.040490][T32482] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 930.057299][T32484] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.095647][T32482] EXT4-fs (loop7): mount failed [ 930.110866][T32484] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.155484][T32490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8984'. [ 930.176763][T32484] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.210854][ T29] audit: type=1400 audit(1754198302.351:55833): avc: denied { firmware_load } for pid=32489 comm="syz.7.8984" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 930.343543][ T29] audit: type=1400 audit(1754198302.481:55834): avc: denied { write } for pid=32499 comm="syz.7.8990" name="raw" dev="proc" ino=4026533816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 930.386428][ T29] audit: type=1400 audit(1754198302.521:55835): avc: denied { mount } for pid=32499 comm="syz.7.8990" name="/" dev="ramfs" ino=119339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 930.636914][T32511] lo speed is unknown, defaulting to 1000 [ 930.787332][T32517] loop9: detected capacity change from 0 to 512 [ 930.852698][T32517] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 930.876428][T32517] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 930.892882][T32517] EXT4-fs (loop9): mount failed [ 930.972979][T32532] loop7: detected capacity change from 0 to 8192 [ 931.174566][T32535] loop9: detected capacity change from 0 to 8192 [ 931.484791][T32541] loop9: detected capacity change from 0 to 512 [ 931.508392][T32541] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 931.535146][T32541] EXT4-fs (loop9): failed to open journal device unknown-block(8,3) -6 [ 931.542984][T32543] loop7: detected capacity change from 0 to 256 [ 931.692217][T32546] loop9: detected capacity change from 0 to 256 [ 931.845460][T32557] loop9: detected capacity change from 0 to 512 [ 931.848417][T32559] loop5: detected capacity change from 0 to 512 [ 931.874297][T32557] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 931.885042][T32557] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 931.910013][T32559] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 931.922023][T32557] EXT4-fs (loop9): mount failed [ 931.922133][T32565] ================================================================== [ 931.922129][T32559] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 931.922175][T32565] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 931.922222][T32565] [ 931.922228][T32565] write to 0xffffffff868f5678 of 88 bytes by task 32557 on cpu 1: [ 931.922243][T32565] prb_reserve+0x696/0xaf0 [ 931.922271][T32565] vprintk_store+0x56d/0x860 [ 931.922310][T32565] vprintk_emit+0x178/0x650 [ 931.922328][T32565] vprintk_default+0x26/0x30 [ 931.922344][T32565] vprintk+0x1d/0x30 [ 931.922372][T32565] _printk+0x79/0xa0 [ 931.922402][T32565] __ext4_msg+0x18f/0x1a0 [ 931.922430][T32565] ext4_fill_super+0x2894/0x34e0 [ 931.922384][T32559] EXT4-fs (loop5): mount failed [ 931.922458][T32565] get_tree_bdev_flags+0x291/0x300 [ 931.922484][T32565] get_tree_bdev+0x1f/0x30 [ 931.922508][T32565] ext4_get_tree+0x1c/0x30 [ 931.922545][T32565] vfs_get_tree+0x54/0x1d0 [ 931.922570][T32565] do_new_mount+0x207/0x5e0 [ 931.922589][T32565] path_mount+0x4a4/0xb20 [ 931.922606][T32565] __se_sys_mount+0x28f/0x2e0 [ 931.922624][T32565] __x64_sys_mount+0x67/0x80 [ 931.922646][T32565] x64_sys_call+0x2b4d/0x2ff0 [ 931.922668][T32565] do_syscall_64+0xd2/0x200 [ 931.922689][T32565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.922708][T32565] [ 931.922712][T32565] read to 0xffffffff868f5678 of 8 bytes by task 32565 on cpu 0: [ 931.922727][T32565] _prb_read_valid+0x383/0x920 [ 931.922756][T32565] prb_read_valid+0x3c/0x60 [ 931.922783][T32565] printk_get_next_message+0xc8/0x510 [ 931.922801][T32565] console_flush_all+0x290/0x730 [ 931.922824][T32565] console_unlock+0xa1/0x330 [ 931.922843][T32565] show_console_dev+0x8a/0x340 [ 931.922867][T32565] traverse+0x144/0x3a0 [ 931.922896][T32565] seq_read_iter+0x853/0x940 [ 931.922932][T32565] proc_reg_read_iter+0x110/0x180 [ 931.922962][T32565] __io_read+0x435/0xc20 [ 931.923002][T32565] io_read+0x1c/0x60 [ 931.923031][T32565] __io_issue_sqe+0xfb/0x2e0 [ 931.923061][T32565] io_issue_sqe+0x53/0x970 [ 931.923090][T32565] io_submit_sqes+0x664/0x1050 [ 931.923120][T32565] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 931.923151][T32565] __x64_sys_io_uring_enter+0x78/0x90 [ 931.923183][T32565] x64_sys_call+0x2de1/0x2ff0 [ 931.923203][T32565] do_syscall_64+0xd2/0x200 [ 931.923226][T32565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.923246][T32565] [ 931.923250][T32565] value changed: 0x0000000000003103 -> 0x0000000000005103 [ 931.923261][T32565] [ 931.923264][T32565] Reported by Kernel Concurrency Sanitizer on: [ 931.923275][T32565] CPU: 0 UID: 0 PID: 32565 Comm: syz.6.9013 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 931.923301][T32565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 931.923314][T32565] ================================================================== [ 933.614776][ T422] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.625651][ T422] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.636797][ T422] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.647984][ T422] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0