last executing test programs: 4m56.8200069s ago: executing program 1 (id=66): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x8e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa1b9}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x480d0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x4009, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x0) 4m56.76476615s ago: executing program 1 (id=69): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 4m56.727579931s ago: executing program 1 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x28, r3, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011"], 0xe0}}, 0x0) 4m56.557829422s ago: executing program 1 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00b1ab00"/28], 0x48) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf25080001000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fcfffff718110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000830000009f090000000010005509010000000000950000000800eeffbe91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r8, 0x0, 0x3}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141040, 0x0) ioctl$TUNSETIFF(r9, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x1}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 4m56.382697264s ago: executing program 1 (id=80): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 4m56.336509394s ago: executing program 1 (id=82): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x1018ed8, &(0x7f00000005c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}, {@nodelalloc}, {@usrquota}, {@nolazytime}, {@noblock_validity}, {@block_validity}, {@barrier}]}, 0x6, 0x647, &(0x7f0000002740)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) (rerun: 64) msgget$private(0x0, 0x790) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)=r0}, 0x20) (async) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x60) (async, rerun: 32) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) semop(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async, rerun: 64) mknod$loop(0x0, 0x100000000000600d, 0x1) (async, rerun: 64) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000"], 0x48) (async, rerun: 64) msgsnd(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7da8ab7cc6c17b12aabbf7833ac6bb2f8051de2f1f99bc21203f0b1e420e94a44bce568b06089912d9979787aa5b0bd78f4fa14fd0454c"], 0x8, 0x800) (rerun: 64) 4m55.498235902s ago: executing program 2 (id=97): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000220702500000000202020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') fsopen(&(0x7f0000000180)='incremental-fs\x00', 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000cc0)={[], [{@uid_lt}, {@hash}, {@subj_role}]}, 0x0, 0x452, &(0x7f0000000780)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64, @ANYRES16=r2, @ANYRES8, @ANYRES16, @ANYRESHEX=r2, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) close_range(r3, r2, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000540)={@dev={0xac, 0x14, 0x14, 0x57}, @broadcast, 0xffffffffffffffff, "246717e1db80a6f60c82a68d7cb18eceaf6d2be4f153ee47a665c900", 0x7, 0xffffffff, 0x7fff, 0x774f}, 0x3c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x69, 0x535, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x68, 0x0, 0x3, 0x29, 0x0, @empty, @rand_addr=0x64010100}}}}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000300)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) capset(0x0, &(0x7f0000000500)={0x0, 0x2000, 0xb6fa, 0x0, 0x0, 0x3cd}) mremap(&(0x7f00000ad000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00000ae000/0x1000)=nil) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) setresgid(0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0xc5fffffc) getpid() capget(&(0x7f0000000340)={0x20080522}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 4m55.168531405s ago: executing program 2 (id=102): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x52e, &(0x7f0000000a80)="$eJzs3c9vI1cdAPDvTH52mza70ANUwC5QWNBq7Y23XVW9tHsBoaoSouKAOGxD4o1C7DjETmlCJNK/ASSQOMGfwAGJA1JPHLhxROKAkMoBaYEItEECyWjGk9RNnMY0jg3x5yONZt48+33fW+/Mm3l25gUwtm5ExF5ETEfEGxExX+xPiiVe6SzZ6x7v7y4d7O8uJdFuv/7XJM/P9kXXezJPFmXORsTXvhzxreRk3Ob2ztpirVbdLNLlVn2j3Nzeub1aX1yprlTXK5V7C/fuvHj3hcrA2nq9/vNHX1p99eu/+uUn3/3t3he/l1VrrsjrbscgdZo+dRQnMxkRr15EsBGYKNbTI64HH04aER+JiM/kx/98TOT/OwGAy6zdno/2fHcaALjs0nwMLElLxVjAXKRpqdQZw3smrqS1RrN162Fja325M1Z2NabSh6u16p1rM7//Tn7FMJVk6YU8L8/P05Vj6bsRcS0ifjjzRJ4uLTVqy6O77AGAsfbksf7/HzOd/r8PPb7VAwD+b8yOugIAwNDp/wFg/Oj/AWD89NH/F1/27114XQCA4XD/DwDjR/8PAONH/w8AY+Wrr72WLe2D4vnXy29ub6013ry9XG2ulepbS6WlxuZGaaXRWMmf2VM/q7xao7Gx8HxsvVVuVZutcnN750G9sbXeepA/1/tBdWoorQIAPsi16+/8LomIvZeeyJfomstBXw2XWzrqCgAjMzHqCgAjY7YvGF/93+P/5kLrAYxOz4d5z/bcfL8f/xdB/M4I/qfc/Hj/4//meIbLxfg/jK8PN/7/8sDrAQyf8X8YX+12cnzO/+mjLADgUjrHb/zb3x/URQgwUmdN5j2Q7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkpmLiG9HkpaKucDnIk1LpYinIuJqTCUPV2vVOxHxdFyPiKmZLL0w6koDAOeU/jkp5v+6Of/c3PHc6eSfM/k6Ir77k9d/9NZiq7W5kO3/29H+mcPpwyrvve8c8woCAAOW99+VYt11I/94f3fpcBlmfR7dj38XUxEvHezv5ksnZzIm8/Vsfi1x5e9Jke7MRfpsREwMIP7e2xHxsV7tT/KxkavFzKfd8aOI/dRQ46fvi5/meZ11dvH10QHUBcbNO/cj4pVex18aN/J17+N/Nj9Dnd+j+53CDs99B13xD89/Ez3iZ8f8jX5jPP/rr5zY2Z7v5L0d8exkr/jJUfzklPjP9Rn/D5/41A9ePiWv/dOIm9E7fnescqu+UW5u79xerS+uVFeq65XKvYV7d168+0KlnI9Rlw9Hqk/6y0u3nj6tbln7r5wSf7Zn+6eP3vu5Ptv/s3+98c1Pf0D8L3y29+f/TM/4HVmf+Pk+4y9e+cWp03dn8ZdPaf9Zn/+tPuO/+6ed5T5fCgAMQXN7Z22xVqtunmsjuwsdRDknNrIqDrTAMzb+GMOLdebG1EX9q174xuTRteJgS/5GVuKQm5MOvBXn2ng8rFijPS8BF++9g37UNQEAAAAAAAAAAAAAAE4zjD9dGnUbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLz+EwAA//+2KMyN") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r2, 0x0, 0x30, 0xe1515f8735398fe, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x40) 4m55.017650386s ago: executing program 2 (id=107): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r5, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100000, 0x5, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 4m54.850713997s ago: executing program 2 (id=111): r0 = syz_clone(0xa9202340, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x3808004, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="abed3528f0"], 0x4, 0x7d2, &(0x7f0000001ec0)="$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") unshare(0x6020400) r2 = socket(0x25, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x472) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r5, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5c}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20004044) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=r6], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="6d9310000000fcdbdf25010000000c00060000000000020000005cfbdea4f55cfea70727b2896321f7f48d2302e550a3e5279f7eb17f30d4f111b4fc17"], 0x20}, 0x1, 0x1000000000000000, 0x0, 0x48891}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r11, r6, 0x0, 0x7ffff000) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x800) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r13 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r13, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x10001, 0x0, 0x0, 0x6, 0x1e, 0x7e, 0x0, 0x46}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000dd180001090000000000000000021000000002fd0168687e49f004eada2cbc6d0e00000000"], 0x1c}}, 0x0) 4m54.59076258s ago: executing program 2 (id=115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 4m54.339586442s ago: executing program 2 (id=125): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x94}}, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', &(0x7f0000000040), 0x58) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x10f, &(0x7f00000003c0)={0x0, 0x0, 0x800, 0x0, 0x33f}, &(0x7f0000000840)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) rt_sigsuspend(&(0x7f0000000040)={[0x2000000]}, 0x8) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = dup2(r10, r10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=ANY=[@ANYBLOB="3000000003080500000000000000000007000005050003002f00000014000480"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x8844) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0xff, 0xba, 0x9, 0x51, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x20, 0x8000, 0x9, 0xc}}) sendmsg$xdp(r11, &(0x7f0000000800)={&(0x7f0000000880)={0x2c, 0x4, r12, 0x2a}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000500)="cb27698d0af58cc69bc7c0af5383a2e77a97e4a3c063a1da91fe4216db9116401cb8b1217197c789b0cb75443c19647215eeb7f63db8394156fb24644666f14f450f1f11ee30bcbf0268461deec90852129efc644b701eedcc94608b88d7", 0x5e}, {&(0x7f00000002c0)="c931f9685f5c40dfb39c4830d4ec4dfb4a5c6881f20a4546c299dc1af1631c45d90d7362f5c8494057050e19d0f5d16b6a01", 0x32}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002900)="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", 0x1000}, {&(0x7f0000000580)="9c6fa9d6e456acdea13a18581e91a9f99e11cd1a45e2b527a097953a72d700e1dd3dfcdaa1c3c0fbb75597b1b5ea1d0658b71012ccb5fb97873be4755cd765601a6ab8dd4b10aa5c3616499c785a26d137d83e06ae468392051d49bd24b595dcc1de06feb49271d6780bc64736830f905c794e53b718c6ac4948340a3fd4dfaea34e748f54fb820fff8aa06ada79bf38fedb66e6056ced531ec7a22a4ea0aa12b3038bb486fec2f2", 0xa8}, {&(0x7f0000000640)="0c24b41be57078bb84a9251449f0562df46296ea2011c5beb430b69006a06f9b1fbb2401e0a0e79e9b781159d1c1c866da8aa7a224b638a9bf59ee89b119be954765af77376a45a7d2b0108aea97d967347cc050c805aa", 0x57}, {&(0x7f0000000340)="950bcd5be2a0400f390d7efaaec9a0118bfe1073bb6f5dec024118b0b09fb6b0c51a9ed66fc4eb6380f1a100bd4d094cb72d774f95c318", 0x37}], 0x7, 0x0, 0x0, 0x1}, 0x80c0) 4m54.325866832s ago: executing program 32 (id=125): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x94}}, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', &(0x7f0000000040), 0x58) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x10f, &(0x7f00000003c0)={0x0, 0x0, 0x800, 0x0, 0x33f}, &(0x7f0000000840)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) rt_sigsuspend(&(0x7f0000000040)={[0x2000000]}, 0x8) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = dup2(r10, r10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=ANY=[@ANYBLOB="3000000003080500000000000000000007000005050003002f00000014000480"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x8844) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0xff, 0xba, 0x9, 0x51, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x20, 0x8000, 0x9, 0xc}}) sendmsg$xdp(r11, &(0x7f0000000800)={&(0x7f0000000880)={0x2c, 0x4, r12, 0x2a}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000500)="cb27698d0af58cc69bc7c0af5383a2e77a97e4a3c063a1da91fe4216db9116401cb8b1217197c789b0cb75443c19647215eeb7f63db8394156fb24644666f14f450f1f11ee30bcbf0268461deec90852129efc644b701eedcc94608b88d7", 0x5e}, {&(0x7f00000002c0)="c931f9685f5c40dfb39c4830d4ec4dfb4a5c6881f20a4546c299dc1af1631c45d90d7362f5c8494057050e19d0f5d16b6a01", 0x32}, {&(0x7f0000001780)="20fba0d80eeefc9e0bb46b6236c8e1f6f15d56c124cddba8b700fe55c1a6e9c2db562a239778cdd23f4aa7617a4879a60325ce636ac204116cbaf5696cf282ddf0be7e81e4819f5ed1c29a8c23630094541e7c22f36818ad491cab8b9eeeedd5d2e8b68972c4057df7e64bd4682efb1ac1886462af663298517ac77dafb1d16da7be9d317ff8e6a6347dbba89bdd6be906db6c88499cb2c291aa7eee517d33536e0b4cde03c28cae2c8b5756569f76352e9b9ebef7cea191a970da8a6ae31e537eae6e05ce03728f39231cdb274695be9eba5c1661dc2dd9983ebbbea4dd6d06f8b188f467fd8d852410da6ad3c217f74ca3f98a0535bdf9b0e27877d480d877936b47a01881a6160ecc5d7a71c851cbe4171e7e6cfd608ce4ffa2c088b6cb201895d028c154ea0ab7992390e2f50183298d252873ca0c1b5611685b89138a9d594e35bff47601197e36413d49d2bb2015dbae449ef5f9a86f11e5cb0d2292905effcee74d02246ed72b70653a2eab2bccd1a8e31e0e6690a48af536b0c3970294f428333e1179022fc62022bf15f13e17ab1255d5d97a65113b93e60d83cc4c306564e4b7777c6f51ddf70e948076fe7ee236f2e6001e58834c98f109b1c3fe2529d33b099a549ff07497431775d9aa1a1a762fb422861576b3ba007fe7a936982fb89f2c3d6d431ab5f76ddf16743590a97cfd39a316f1f839fe9260117a5039a29e1def4b9cae49f6f19888c2b1953696d38ebe074baf68216b5adebc3970b8b0ab7e0af4d5336117c8d4baf1162761f8496c70f128d658b2e380f963e80bc86f4fbf048dbc6f379bea75cfec0952e69aa53acd0d47f6ebeaa143e6e1d0dc1cb6b3bc329b94045dda731b93ee1884eeb5c0f2b428aadb6fd681310c24f08681f6f5405cebe0a5da4bec6f7f29699a27635892f54222e6bc242f8d1542f2e2fc952df7d775384c27abc7b7490e18206bad87574cd024c68bfd6995fc825548e7346ca9b7ec7e163fce20002004cc84868a8c82a13c33a619b8f246f5e9e28169b74bf5279ac9bb92325c56deead1af1105b8023cdeffffed98a448ea1369e240dc8880c0c551427d50905431d647a9ecd76096ec90dd461e24805c7ba6153043a49ba292309684d284fd93a0747bd82a15c60d5a37ce6e721dd56db128f80fd9e9ecb169fe774de7331cb642105b34afc2f955f5c1876d51b013bff6a7639cbe2e3bbebc742455c24964120c38acb4f33a3420b993277804ff9bfcd25f0f3119bedd82469f336274926664270da71a14a71f680a680637b743a775830ac7c3e85d224c09f65ca01dfe61795fd06208beaad9cbecd11da75d0d77d5dadb9f76203994d559703efbf2fc62a3c3a7ae211a8f188ab71e7c22a03405d0c4b7076079afbdca941b3e626c39dab25ce627f92c7b0d21cfa200daf6261869d9aa37011576ea6f79b84e50dce4a639c96111e7c577cf6e80de1ed58f15429906f5d56dd2bf126a31412fcebab56897d15551304ab9d350c519460d388d857c7a49aa1407e3b4f34ac87ae823698ab583255d88b856e6265480f07086e5c57dc8bc6195d64de0e8a1916fd16343489b81a73d9a3291bdf9c607238c772ea343cf45a864649fb93e158fc78990cdd355ede8877029632a4e746f758b14571260c70f19708a646623f6c7d83ed3a1b976618c5dae5d8e98ef5a50ed478bbe41485a2fad7fbf71660c6681d67b82d1280bc3f25f8d2be02b49fd044caed2732d6fc7b42e2f180fcf757698c3576e8da485fa2e522fc4d142b30cb602fb879cc7f0f44fc9238f5a73e49608ee2785bede6277f1caa2ae9dcd363f9d7ed94d4679a2bb1fa9f81c3220865afff55da4af16629ed2795cf75e42b4a664e74986acfc5d81b4d6bae796affbeb8ed4d94094e363674cf9bc19bfe5f0d249c86780c7b275c8ec089e6540d6a6eba6c36dc0173af7540f654d6c37e4cc797fd78ef5e3a0c44297d7803ece344f2a5d8cf61174c144b74a1ed2792bac1375e3fd39a7653a857de6f761591614944cebbc5cbe310e55712343c83384ba5be57d352aeee661af1dc5291bdd984d54647ea6b091efd14d8006e3a0b9f392209f8ef9da7a1ecefb6ad224794b096372e83166c14139d7557d6fce42d73777dade7dcf7b9a1502278fc1f13a8ce71d4baa69571ff9e91526c1575787ce69255fb5b4af4c34fc93b83e1668ebdc437227a77e9970d5b0e93d4a6940c48834bdd7a4d7219692aa7fda19a633f20cb528d6d0e5c65383615f5843a8ae0336f5b87f9deb68cbff59febd0e9e4d0e33042f5fa9209aa54c27007bd6d9d4ce1535ae5785097c528202b141ec2a7c380c7fa1150da84d92435d7b721993c7223a121ef969706ac48396f13c8d625e25b62e1ff6dcf0cc20a3321abdaadb6fafb7403c69143c5b434284afd611d2b81a16136d5bed554e986e3782e2575a5f5cad9a92135b870b1dde3432a093286b483f7232a7b066188aa74e73bbe3f2434edd7557d7e25ebd7b1954999f6496e058a73e5b6da2b7bca21d538b64b4ec704ec924d7789b97b1e2de3a316f566ed616f935758ce18c2f321e5d0857ab9ea393cb088c702bf42c6ce4031fb1f1789959d358aa336f682e8f23362f7a086cd5f7c44e68358cd2e04ef04a5153a70dcc3e5daad94e878c13ee8addbb76aed941fbac003a6efd28fae8ebc5cabc9b80d2f00036bb09567b67200199655013668674964f33487af5f1d43f3fbbfd26ef4eafb9ea0d0a873e49ab5967fa5888871f78e59b1ff140a4584ce856a7e2aab379d4f08ee72810d7a91c5b7d7b03e6771f2551fae0e6dac5e3447c0efbc47a2fdb9e2ae1eabc70e77e1d929f79eaebb1fae574ec86a88bada0bfefe1d3f1a1db539c64f20aa3c39fbb7cad27a90ac2a85e13dd619940ebd7e1aa887e02a929de084de716793bf6414742d2b088b176390e900a8b55151bdb66aa50ec587329cf18ef9c2f7a75a192b56da5bb589c20c0bb70914a3288b13fe3c8a4265ebf3cf9a662dee299129fe3f2d937057012abfe949aa7830a8f0336d948eb1e96fa8d16c41d3f1e27e2ec9799d099d4031426db445a25be0e60e07811f9cb81737ff646589329bf25032d414974369e97ffa5d5f285a57169abf5ef094904582408f6d595527c14fbc812da49a473e8d27ebc7f818f0a9fe66d328c2a2c1f0cbe682e62af2ca4f310ee8e285827a2f8811558425216b049da532ddbac02b383dc064c49d7b11393e2639857ce43f1099f7ecc108b0bdda15b1ee01fe3fd005dfebadc7bc274264abc87963a7050e20a605a04893ab5e77929d4c3025f267705501bd9e1824e023d33067b33650ef9c4a83c656c1ef564f3075dd35e0ecec13e5abd33011962aeecb8d53f6de1001b308a13acac486f87b55a35aa50c6d1146875c68181158dcf1c0feb1c3269f7a6f375419830aa9025cb8f53d619037dd4b886f48dbf3518b2cff17dc90e073430fafc7cebcb3e1ce192f5b1d60e8f39be87f23f0c7113502f7ec0f03809dd9427c0ced3e138d14153b783f8f10cc3356a3da56dff8e7082c5c6a83ce899ad2bc6855cd1ceb5d6467bd73c8ae380fc97675df5a704a7f20b00be53629176870669aedb648e6bc1bd4c33852207f0a4b79999ec4a3146e57b99c5ca6bf6893b3e7b7c61e432fca1146f0630974d797eed5fdecfdb89df276596d2369abc411ff1c6f0ef3bcdd4c6f73b89e5bfb41bf354f0cdb54918b90983e76f97cafc8fdabbf66b491d659114f6c4482da3ac21186a7f1dd9b4f1b4fa308600f05177f29298819c19eb009011201925312bc682ddb9e3ff669f11b01f46bfa04030e58c87a8392c55a7b44830c662e557a3bdadd6ac5a8eba3876922e1cfe7ba49495c8e7c63f2f9a9d3ea00bbad3390ec3271152c9b2bdba5beaa55611607a996f8f8add5c0a6d52cb4943e99540d42689b4f99278ad3a04531827480005a1db69cc2cf53236ff5c9b7df72c977c6a6a49529bc08b5e8eb6d23a24be3ed247fb97fd519518a06b18a8cab3d6ef1a7f33fcf821b65b4b39e48f47e12945087ff5bfbfa5a021e5e0f3271ddbf6d7ae712663766843d374a2f73c85a585da8b1dec7e17825fe55e8f4b825aa3c4e724438d77e9df8ddb18f525269928063a4081d0c3dd1d71fa75df78dd3d2b69e2a9b0d5b353d618099ed1b8f3cc83de145d4d2bad5e2b91d67d8b3bcb0b2fa6843ac6fd148ff35a49e793ea88a8cdabdfb31aba97109eadf1dce5a166e5bf02b5d259b04fe45c99fb2fb4f61b1f532edbd7e3252bf69008f8bc27ff528c94367bdcefcd70899208b1159061df8b7e5c9b653251f097bc2ec372a9b6ef1f56442992fa53b1775b66b4ba283e690c90475c163c5ba252302fe74c2c62980a0c6511f55540eca4c086ff5645d917373a369cb5c3bc1b95a54d7ce0a80bb3441e27a51d440ad840bc3c087edb88f7ce0fe7f79602d4b8dafd6fad81500785a84762d20d1040f46ebb3af97f4bda7dc9401e5dadeeaf8401251e085779da57233a3c754170181d3d5b0ad1d844bb02bc649000b4df4a92f573c8dff98d0d85c7937a199d420cdfc9527f81a333d5538415b28df3d191f9a36aaf51b430b14f1abcc46f28e1be67b828082d0fb599931bdfef88b6c3aa274176f51a9848a0f6ab30744800090eebadd34aecf722c61003acdbf51c1d20b3fc103b41de6a371627bc45be81bdd50f9d6e6888512de22d824d7343a5378fe97a5f22a5e355c57c0a184b1b96240082b3a4f9e1a406884c3e601dc68b8fc5cf77811d906da811225b20d07670dc4c7115281dfab7e5fb24da8c1f2d46f9aed60535ef7207db7705effba66361014b26549a88cd3c382241a96685341a09a83e4604d3da6597f3a5319f3039dde0eba7a5b78169413c0922394c8045f53630d8c2de7df0b1cc6bd8ddb33c3f71db43c1fa38463c81f0c9932a4c6e06378ac023622937de11efb530f749fdd7d181487ad93046c747d9574a7820f704f0f9a59b842a237d0c8792d7be85c299388b76fefe5a8093ec503b6d7a8a45d1952cb66d163ea9c77833eed240a93015bc1932b0a6575922d5c8f3e0e4d39cf9d93c54e6ad4b60446df393c8ec8403469c55867345135b515ad971e5d038f422febb4ff613bb9db509a35914e074dcfab659004e627f323221ce879ca1b7bc36a9c2cce32d43eb90a46dd51a7b1eb6b12899aa25326beaaa9b454584963757bca0bca39e568381d5f99ed02c4e0f777b895af64dffcd032a1f3eae2adf673ce6fc99fb804df33461114df04d4161f29d89000f7095fee6fccb3ac33ae8c5aad34145931dbe6ae6c78c887671da8d1f7b17787e2fdf9c22b629eb6c7e7115a6aac6800649a0f7399e4121317a85b59538750916e2f78efbfcc2c8894f3c4f857678831d6b71c6397a21fad60300f5a4e314a20c80bf96c04dfa4d8673e8f23624e74d13d61a55a90d5386180d9da842c4da97a30c0eb6786ffa0786aea8dc0cb909467dc7ea3a2ef399fad01d154481f42c0ca6fdc95da894d8cfb45cc0bc6af817d60dfc5e9dc0119d59e5af58e6763df37ed16a5296cc3dbd869a5767ee615be8b78224855410cdff60c14f9ce152ede1a03f5743506526db81ea0f8c6bd5030b4f296dcf1c5d70d23060094ab0deacc3480a11a86aedeb460c71cbda608e389737d614a58471edd7423fb3358e280bd48d6ce7b7473722ffaeca1fd85fc13985c0b6c534b377874d1d919e1ea14f848ab128ac0121617ada4b436bc705fa8b", 0x1000}, {&(0x7f0000002900)="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", 0x1000}, {&(0x7f0000000580)="9c6fa9d6e456acdea13a18581e91a9f99e11cd1a45e2b527a097953a72d700e1dd3dfcdaa1c3c0fbb75597b1b5ea1d0658b71012ccb5fb97873be4755cd765601a6ab8dd4b10aa5c3616499c785a26d137d83e06ae468392051d49bd24b595dcc1de06feb49271d6780bc64736830f905c794e53b718c6ac4948340a3fd4dfaea34e748f54fb820fff8aa06ada79bf38fedb66e6056ced531ec7a22a4ea0aa12b3038bb486fec2f2", 0xa8}, {&(0x7f0000000640)="0c24b41be57078bb84a9251449f0562df46296ea2011c5beb430b69006a06f9b1fbb2401e0a0e79e9b781159d1c1c866da8aa7a224b638a9bf59ee89b119be954765af77376a45a7d2b0108aea97d967347cc050c805aa", 0x57}, {&(0x7f0000000340)="950bcd5be2a0400f390d7efaaec9a0118bfe1073bb6f5dec024118b0b09fb6b0c51a9ed66fc4eb6380f1a100bd4d094cb72d774f95c318", 0x37}], 0x7, 0x0, 0x0, 0x1}, 0x80c0) 4m41.302365438s ago: executing program 33 (id=82): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x1018ed8, &(0x7f00000005c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}, {@nodelalloc}, {@usrquota}, {@nolazytime}, {@noblock_validity}, {@block_validity}, {@barrier}]}, 0x6, 0x647, &(0x7f0000002740)="$eJzs3c9rHG0dAPDvzCZpfvmmr4j4BsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHSQq2FpqABwUFEa9FevEf8C69exNBvXkWqkjFgpauzOxsu9nsZrdNdjfJfD6w2WeeeTbP893ZZ+eZnX12AiituexPGvFJxJsbScRM07rpqK+cK8q9/Nfjm9ktiVrtu/9MIinyGuWT4n6qWBiPiD9GxKcru+vdePjo9lK1Vvck4uzmnftnNx4+OrN2Z+nWyq2Vu4vnvnb+wsLXF88vNjX0w00V91eufufzv/jJD7+6+qfqmSQuxvXRHy9HSxwHZS7m4k0RYnP+SERcyBJtnpej5hiEUGqV4vU4GhGfjZmo5Et1M7H286E2DuirWiWitrekWwHgqNK9oawa44DGsX1vx8HX+zwqGZwXl+oHQLvjHyk+chjPj40mXyZNR0b1zzZOHkD9WR2vH48/ff149mns+Bzi1dutM3IA9XSytR0Rn2sXf5K37WQeaRZ/uuNYP4mIhYgYK9r3rX20IWlK9+NzmL30GH8li795O6QRcbG4z/Ivf2D9rR9rDTp+AMrp+aViR76VLTX2f83nKxr7/3z886SRO73/UzK5Ye//Oo//Gvv78Xzck7aMw7Ixy7X2/3K0NeNvP7vyq07118d/s08bt6z+xlhwEF5sR8y2xP/TLNhi/JPFn7QZ/2ZFblzsrY5v//kfVzqtG3b8tWcRp9oe/7wblWapPc5Pnl1dq64s1P+2reP3f/jBbzvV3z7+E32ItL1s+092iL9p+6etj8uek/vt/+V2a8bvrj2706n+6a7bP/37WFI/3hwrcn60vbm5vhgxllwtihT5S5ub6+d2/v/LUzuX62Ve1fL7xXr8p7/Uvv/veP23RDXReMvswf3v3X7Zad2HvP6b3pzf1HpsQydZ/Ce6b/9d/T/L+2WPdfzn+w++0Gld+/iTfcUEAAAAAAAAZZXm52CTdP5tOk3n5+vzZT8Tk2n13sbml1fvPbi7HHE6/z7kaBppkn9lZKa+nKyuVVcWi+/DNpbPtSx/JSI+johfVyby5fmb96rLww4eAAAAAAAAAAAAAAAAAAAADompYv5/4zrV/67U5/8DJdH9AnO7rv8AHBP9vMAkcLjl/X+vXfxHg2sLMFj2/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMCx9PEXn/81iYitb0zkt8xYsc6kXzjeRt+rdKVv7QAGT4+G8np76t9gH0qnp/H/f4sfB+x/c4AhSNpl5oOD2t6d/3nbR76zvf+2AQAAAAAAAAAAAAB1pz7pPP///eYGA0eNaX9QXvuY/++nA+CI89P/UF6O8YEus/hjvNOKbvP/AQAAAAAAAAAAAIADM53fknS+mAs8HWk6Px/xqYg4GaPJ6lp1ZSEiPoqIv1RGT2TLi8NuNAAAAAAAAAAAAAAAAAAAABwzGw8f3V6qVlfWmxP/25VzvBONq6B2L1zrocyeiW/Gez4qksE/LRMRMfSN0rfESFNOErGVbflD0bD1jTgczcgTQ35jAgAAAAAAAAAAAAAAAACAEmqae9ze7G8G3CIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGLx31//vklierD+gp8I7E8OOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4mv4fAAD//+uzO4c=") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) (rerun: 64) msgget$private(0x0, 0x790) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)=r0}, 0x20) (async) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x60) (async, rerun: 32) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) semop(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async, rerun: 64) mknod$loop(0x0, 0x100000000000600d, 0x1) (async, rerun: 64) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000"], 0x48) (async, rerun: 64) msgsnd(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7da8ab7cc6c17b12aabbf7833ac6bb2f8051de2f1f99bc21203f0b1e420e94a44bce568b06089912d9979787aa5b0bd78f4fa14fd0454c"], 0x8, 0x800) (rerun: 64) 3m21.464070921s ago: executing program 3 (id=2054): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x4}, {0x0}, &(0x7f0000000c80)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1, 0x41, 0x4}}], 0x48, 0x2000054}, 0x0) 3m21.427851952s ago: executing program 3 (id=2056): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/3, 0x3}, {0x0}], 0x2}, 0xfffffffb}], 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r2) 3m20.594019399s ago: executing program 3 (id=2066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r1, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0) 3m20.573284929s ago: executing program 3 (id=2067): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000080)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000880)={[], [{@subj_type={'subj_type', 0x3d, 'kfree\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x66, 0x38, 0x38, 0x64, 0x35, 0x36, 0x62], 0x2d, [0x35, 0x66, 0x34, 0x39], 0x2d, [0x31, 0x63, 0x30, 0x65], 0x2d, [0x32, 0x65, 0x63, 0x39], 0x2d, [0x62, 0x1, 0x64, 0x0, 0x64, 0x38, 0x63, 0x37]}}}, {@fsmagic={'fsmagic', 0x3d, 0x100000000}}, {@euid_eq={'euid', 0x3d, r0}}, {@appraise}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f6ff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0xff, 0x5, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x2}, 0x1a, 0x7, 0x800, 0x4, 0x8, 0x2}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3m20.501028349s ago: executing program 3 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250b0000006c0005"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r4, r4, 0x0, 0xfffe80) 3m17.240085599s ago: executing program 3 (id=2126): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/3, 0x3}, {0x0}], 0x2}, 0xfffffffb}], 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r2) 3m17.205958089s ago: executing program 34 (id=2126): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/3, 0x3}, {0x0}], 0x2}, 0xfffffffb}], 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r2) 2.782867195s ago: executing program 7 (id=6375): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16b, @time={0x6fd, 0x7}, 0x0, {0x0, 0xff}, 0x0, 0x0, 0x2}) 2.777822285s ago: executing program 7 (id=6376): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10162, 0x0) fchdir(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r3, 0x8000000000000001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) signalfd4(r7, &(0x7f0000000180)={[0x2]}, 0x8, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 2.666318836s ago: executing program 7 (id=6379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x50, 0x2087, 0x703, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x20, 0x35, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x7c, 0x7, 0x1, {0x22, 0x4ee}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0xd8, 0xde}}}}}]}}]}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) 1.848430243s ago: executing program 7 (id=6393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) fcntl$addseals(0xffffffffffffffff, 0x409, 0x10) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000806050000000000000000000300000a0500010007000000362f6107b98eb1c40ad1edcb2d112c4b7384"], 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, 0xffffffffffffffff, 0x0) syncfs(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00'}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb7020000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.629967065s ago: executing program 5 (id=6403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000280)={r0, &(0x7f0000000080), &(0x7f0000000600)=""/131}, 0xfffffffffffffeec) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b00)={0x0, &(0x7f0000000a40)=""/60, &(0x7f0000001000), &(0x7f0000000a80), 0xe7, r0, 0x4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x58}}, 0x0) 1.597109946s ago: executing program 5 (id=6404): r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f909, 0xfffb, 0x0, 0x0, 0x0, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) 1.238034469s ago: executing program 5 (id=6412): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r3, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100000, 0x5, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x723b, 0x23dd) sync() rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 1.170956039s ago: executing program 4 (id=6415): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='&\x00'/15, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80d, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@migrate={0x50, 0x21, 0x1, 0x70bd29, 0x25dfdbff, {{@in=@remote, @in=@empty, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0xa0, 0x2b}, 0x6e6bbc, 0x1}}, 0x50}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x1a0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x0, 0x1, 0x1], 0x2, 0x6}, {0x3, [0x3, 0x1, 0x0, 0x2, 0x4, 0x7], 0x2, 0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xffffff00], 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x3, 0x3ff, 0x6, 0x7716, 0x2c9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x800, 0xf, [0x2, 0x16, 0x2c, 0x1b, 0x18, 0x22, 0x2, 0x33, 0x1a, 0xd, 0x38, 0x3f, 0x38, 0x35, 0x36, 0x3d], 0x0, 0x7, 0x10000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 1.10039666s ago: executing program 4 (id=6417): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000002c0)='system_u:object_r:var_t:s0\x00', 0x1b) 1.031303231s ago: executing program 4 (id=6420): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000001c0)=0x9, 0x4) io_uring_setup(0x7d18, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r1 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000001000432ca84023e2f54f4f82d41a525553d7fa2e34af4eecfe072832d94599333e80a7ebe01c1b685f5b8e94a51de96fe0aa533dc82d3a127dece361b7af03a91dbc9998c0b2376efbcc8587154f30868aa03b5eb856"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x204) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) listen(r1, 0x8957) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 870.577302ms ago: executing program 0 (id=6422): r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f909, 0xfffb, 0x0, 0x0, 0x0, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) 869.657462ms ago: executing program 7 (id=6424): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000001c0)=0x9, 0x4) r1 = io_uring_setup(0x7d18, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r2 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000001000432ca84023e2f54f4f82d41a525553d7fa2e34af4eecfe072832d94599333e80a7ebe01c1b685f5b8e94a51de96fe0aa533dc82d3a127dece361b7af03a91dbc9998c0b2376efbcc8587154f30868aa03b5eb856"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr, 0x1}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) listen(r2, 0x8957) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept4(r2, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 840.498873ms ago: executing program 7 (id=6425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000d39ce4000071e788c71200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) io_uring_setup(0x9da, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x71, 0x2000, @fd_index=0xa, 0xb3, 0x0, 0x0, 0x1, 0x0, {0x2}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 819.932423ms ago: executing program 0 (id=6426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 749.855433ms ago: executing program 0 (id=6428): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=']) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x4}, 0x18) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r3, &(0x7f0000000680)={0x14, 0x67, 0x2, {0x80, 0x0, 0x8}}, 0x14) close_range(0xffffffffffffffff, r2, 0x0) 652.233924ms ago: executing program 0 (id=6430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000001409748e0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = socket(0x1, 0x803, 0x0) r3 = accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0xffffffffffffffe2) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xffffffffffffff05) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) (async) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000080)={{0x6, 0xffffffc0}, 0x20}, 0x10) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r13}, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r9, @ANYRES16=r9, @ANYRESHEX=r6, @ANYRES8=r5, @ANYRESOCT, @ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=r8, @ANYRES8=0x0, @ANYRES8=r6, @ANYRES16, @ANYRES32=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r15}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 589.501635ms ago: executing program 0 (id=6431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000d39ce4000071e788c71200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x5ea) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x71, 0x2000, @fd_index=0xa, 0xb3, 0x0, 0x0, 0x1, 0x0, {0x2}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 451.947046ms ago: executing program 0 (id=6433): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/249, 0x101d0}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}}, 0x0) r6 = dup3(r0, r2, 0x80000) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d637075736574202d6d00006b7279202d63700f736574202b63ba91e89e7e9af5ef73a65d165477801a4fe201810d5f54e2ed07ee9fb81546e85dc7fae0720376e84f3034bc092c"], 0x21) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0x328, r8, 0x404, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x98, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x8001}, 0x4001a) 405.073456ms ago: executing program 6 (id=6434): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@float={0x6, 0x0, 0x0, 0x10, 0xc}, @func_proto]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34, 0x0, 0x0, 0x3, 0x0, @void, @value}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="2d00000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) close(r1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000100003050000000000bbd72242000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10) getuid() 321.911327ms ago: executing program 6 (id=6435): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000002c000b0000ffffffffffffff01000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000180)={0x11, 0x3, '\x00', [@ra={0x5, 0x2, 0x40}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x4}]}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x1, "e2fa5b57c9cd952ac8e1e0a45a2cfe9f7473a9f47bb44140a389d97081110714", 0x7, 0x8000, 0x4bc5, 0x7}, 0x3c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 256.317878ms ago: executing program 6 (id=6436): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 222.403468ms ago: executing program 5 (id=6437): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x14c95, &(0x7f0000000840)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5", @ANYRES64, @ANYRES16, @ANYRES8], 0xf9, 0x306, &(0x7f0000000480)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x1019c1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {0xe, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x80) r3 = socket$inet6(0xa, 0x80001, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRESOCT=r0, @ANYBLOB="955f2305b98d54bd7b2ea7839b555fdfb1bd1b1f567a0d046f71d70aa61662fff7007f37433a"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) personality(0x400000d) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet(0x2, 0x4000000000000001, 0x0) iopl(0x3) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xeb}]}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001500)={0xf0, {{0xa, 0x4e20, 0x2, @loopback, 0x5}}, 0x1, 0x5, [{{0xa, 0x4e23, 0x6, @local, 0x8}}, {{0xa, 0x4e24, 0x8, @empty, 0x3}}, {{0xa, 0x4e22, 0x1, @mcast1, 0x1}}, {{0xa, 0x4e23, 0x9, @remote, 0x7}}, {{0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}]}, 0x310) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={[0x7]}, 0x8) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x24008004) socket$netlink(0x10, 0x3, 0x0) eventfd2(0x10001, 0x801) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x0) 197.217478ms ago: executing program 6 (id=6438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 146.932758ms ago: executing program 4 (id=6439): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x0, 0x1}, 0x23) 65.210309ms ago: executing program 4 (id=6440): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=']) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x4}, 0x18) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r3, &(0x7f0000000680)={0x14, 0x67, 0x2, {0x80, 0x0, 0x8}}, 0x14) close_range(0xffffffffffffffff, r2, 0x0) 64.189539ms ago: executing program 6 (id=6441): r0 = socket(0x15, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 50.168579ms ago: executing program 5 (id=6442): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/4082, 0x1020}, 0x80181}], 0x400000000000039, 0x10000, 0x0) 30.68314ms ago: executing program 6 (id=6443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x800000f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000d39ce4000071e788c71200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x5ea) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x71, 0x2000, @fd_index=0xa, 0xb3, 0x0, 0x0, 0x1, 0x0, {0x2}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 675.7µs ago: executing program 5 (id=6444): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100000, 0x5, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x723b, 0x23dd) sync() rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 0s ago: executing program 4 (id=6445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000ea000000691065000000000004000000000000009500000000000000", @ANYRES8=r0, @ANYRES64=r0, @ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r3, 0x5406, &(0x7f00000001c0)={0xffff, 0x80, 0x0, 0x8000, 0x0, "a0590469a322d928"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 5979.696:36097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=624 comm="syz.0.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 307.826679][ T30] audit: type=1326 audit(1741605979.696:36098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=624 comm="syz.0.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 307.850312][ T30] audit: type=1326 audit(1741605979.706:36099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=624 comm="syz.0.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 307.873646][ T30] audit: type=1326 audit(1741605979.706:36100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=624 comm="syz.0.5890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 308.000747][ T642] __nla_validate_parse: 13 callbacks suppressed [ 308.000768][ T642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5894'. [ 308.022659][ T644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5896'. [ 308.069852][ T650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5899'. [ 308.157524][ T650] 9pnet_fd: Insufficient options for proto=fd [ 308.298348][ T707] loop4: detected capacity change from 0 to 512 [ 308.333557][ T707] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.489209][ T707] EXT4-fs (loop4): 1 truncate cleaned up [ 308.521319][ T836] loop7: detected capacity change from 0 to 1024 [ 308.881011][ T975] SELinux: ebitmap: truncated map [ 308.945415][ T975] SELinux: failed to load policy [ 309.058670][ T1224] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5910'. [ 309.094385][ T1235] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5911'. [ 309.185834][ T1251] random: crng reseeded on system resumption [ 309.348851][ T1261] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 309.404236][ T1222] SELinux: ebitmap: truncated map [ 309.410086][ T1222] SELinux: failed to load policy [ 309.433405][ T1256] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 309.443195][ T1256] SELinux: failed to load policy [ 309.450649][ T1256] FAULT_INJECTION: forcing a failure. [ 309.450649][ T1256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.463779][ T1256] CPU: 1 UID: 0 PID: 1256 Comm: syz.5.5916 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 309.463812][ T1256] Tainted: [W]=WARN [ 309.463821][ T1256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.463835][ T1256] Call Trace: [ 309.463843][ T1256] [ 309.463852][ T1256] dump_stack_lvl+0xf2/0x150 [ 309.463945][ T1256] dump_stack+0x15/0x1a [ 309.463973][ T1256] should_fail_ex+0x24a/0x260 [ 309.464011][ T1256] should_fail+0xb/0x10 [ 309.464081][ T1256] should_fail_usercopy+0x1a/0x20 [ 309.464114][ T1256] _copy_from_user+0x1c/0xa0 [ 309.464133][ T1256] perf_copy_attr+0x146/0x5c0 [ 309.464215][ T1256] ? selinux_file_permission+0x22a/0x360 [ 309.464296][ T1256] ? __rcu_read_unlock+0x4e/0x70 [ 309.464325][ T1256] __se_sys_perf_event_open+0x6d/0x2230 [ 309.464357][ T1256] ? proc_fail_nth_write+0x12a/0x150 [ 309.464464][ T1256] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 309.464501][ T1256] ? vfs_write+0x644/0x920 [ 309.464539][ T1256] __x64_sys_perf_event_open+0x67/0x80 [ 309.464584][ T1256] x64_sys_call+0x1deb/0x2dc0 [ 309.464616][ T1256] do_syscall_64+0xc9/0x1c0 [ 309.464713][ T1256] ? clear_bhb_loop+0x55/0xb0 [ 309.464746][ T1256] ? clear_bhb_loop+0x55/0xb0 [ 309.464778][ T1256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.464912][ T1256] RIP: 0033:0x7fc4ab31d169 [ 309.464927][ T1256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.464945][ T1256] RSP: 002b:00007fc4a9987038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 309.464967][ T1256] RAX: ffffffffffffffda RBX: 00007fc4ab535fa0 RCX: 00007fc4ab31d169 [ 309.464982][ T1256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000000 [ 309.464996][ T1256] RBP: 00007fc4a9987090 R08: 0000000000000000 R09: 0000000000000000 [ 309.465021][ T1256] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 309.465036][ T1256] R13: 0000000000000000 R14: 00007fc4ab535fa0 R15: 00007ffd7261e138 [ 309.465055][ T1256] [ 309.683687][ T1282] bridge0: entered promiscuous mode [ 309.691781][ T1282] bridge0: port 4(macsec1) entered blocking state [ 309.698370][ T1282] bridge0: port 4(macsec1) entered disabled state [ 309.706872][ T1282] macsec1: entered allmulticast mode [ 309.712279][ T1282] bridge0: entered allmulticast mode [ 309.720050][ T1282] macsec1: left allmulticast mode [ 309.725120][ T1282] bridge0: left allmulticast mode [ 309.731857][ T1279] xt_hashlimit: max too large, truncated to 1048576 [ 309.757176][ T1282] bridge0: left promiscuous mode [ 309.768323][ T1286] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5924'. [ 309.790896][ T1284] netlink: 'syz.6.5923': attribute type 29 has an invalid length. [ 309.800916][ T1284] netlink: 'syz.6.5923': attribute type 29 has an invalid length. [ 309.813293][ T1290] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 309.841040][ T1292] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5926'. [ 309.856286][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.863739][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.871255][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.874614][ T1294] bridge0: entered promiscuous mode [ 309.878726][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.889682][ T1294] bridge0: port 3(macsec1) entered blocking state [ 309.891390][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.898602][ T1294] bridge0: port 3(macsec1) entered disabled state [ 309.905077][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.919017][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.926456][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.934019][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.938936][ T1299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5930'. [ 309.941468][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.953913][ T1294] macsec1: entered allmulticast mode [ 309.957844][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.957914][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.957940][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.957965][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.958001][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.958027][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.958048][T23524] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 309.961051][T23524] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 309.963744][ T1294] bridge0: entered allmulticast mode [ 310.034191][ T1294] macsec1: left allmulticast mode [ 310.039374][ T1294] bridge0: left allmulticast mode [ 310.044929][ T1306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5932'. [ 310.054809][ T1294] bridge0: left promiscuous mode [ 310.063457][ T1300] netlink: 'syz.7.5927': attribute type 29 has an invalid length. [ 310.071692][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.079263][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.089263][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.096762][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.124078][ T1315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5935'. [ 310.170906][ T1322] FAULT_INJECTION: forcing a failure. [ 310.170906][ T1322] name failslab, interval 1, probability 0, space 0, times 0 [ 310.184022][ T1322] CPU: 0 UID: 0 PID: 1322 Comm: syz.5.5937 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 310.184077][ T1322] Tainted: [W]=WARN [ 310.184085][ T1322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.184164][ T1322] Call Trace: [ 310.184172][ T1322] [ 310.184181][ T1322] dump_stack_lvl+0xf2/0x150 [ 310.184213][ T1322] dump_stack+0x15/0x1a [ 310.184239][ T1322] should_fail_ex+0x24a/0x260 [ 310.184274][ T1322] should_failslab+0x8f/0xb0 [ 310.184374][ T1322] kmem_cache_alloc_noprof+0x52/0x320 [ 310.184398][ T1322] ? p9_client_prepare_req+0xf9/0x870 [ 310.184475][ T1322] p9_client_prepare_req+0xf9/0x870 [ 310.184559][ T1322] ? delete_node+0x40b/0x450 [ 310.184589][ T1322] p9_client_rpc+0xf0/0x710 [ 310.184670][ T1322] ? radix_tree_iter_tag_clear+0x109/0x180 [ 310.184769][ T1322] p9_client_walk+0xfb/0x4e0 [ 310.184796][ T1322] v9fs_file_open+0x163/0x530 [ 310.184896][ T1322] ? __pfx_v9fs_file_open+0x10/0x10 [ 310.184927][ T1322] do_dentry_open+0x621/0xa20 [ 310.184949][ T1322] vfs_open+0x38/0x1e0 [ 310.184969][ T1322] path_openat+0x1ae0/0x1fc0 [ 310.185053][ T1322] ? _parse_integer+0x27/0x30 [ 310.185085][ T1322] ? kstrtoull+0x110/0x140 [ 310.185115][ T1322] do_filp_open+0x107/0x230 [ 310.185167][ T1322] do_sys_openat2+0xab/0x120 [ 310.185192][ T1322] __x64_sys_creat+0x66/0x90 [ 310.185293][ T1322] x64_sys_call+0x1084/0x2dc0 [ 310.185322][ T1322] do_syscall_64+0xc9/0x1c0 [ 310.185461][ T1322] ? clear_bhb_loop+0x55/0xb0 [ 310.185557][ T1322] ? clear_bhb_loop+0x55/0xb0 [ 310.185586][ T1322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.185656][ T1322] RIP: 0033:0x7fc4ab31d169 [ 310.185673][ T1322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.185692][ T1322] RSP: 002b:00007fc4a9987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 310.185712][ T1322] RAX: ffffffffffffffda RBX: 00007fc4ab535fa0 RCX: 00007fc4ab31d169 [ 310.185726][ T1322] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000400000000380 [ 310.185739][ T1322] RBP: 00007fc4a9987090 R08: 0000000000000000 R09: 0000000000000000 [ 310.185753][ T1322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.185765][ T1322] R13: 0000000000000000 R14: 00007fc4ab535fa0 R15: 00007ffd7261e138 [ 310.185848][ T1322] [ 310.419116][ T1304] netlink: 'syz.7.5927': attribute type 29 has an invalid length. [ 310.427966][ T3376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.440596][ T1315] netlink: 'syz.4.5935': attribute type 21 has an invalid length. [ 310.455363][ T1315] netlink: 'syz.4.5935': attribute type 1 has an invalid length. [ 310.493924][ T1328] loop7: detected capacity change from 0 to 2048 [ 310.528176][ T1328] EXT4-fs mount: 30 callbacks suppressed [ 310.528257][ T1328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.550199][ T1324] xt_hashlimit: max too large, truncated to 1048576 [ 310.622747][ T1337] loop4: detected capacity change from 0 to 512 [ 310.640079][ T1337] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 310.687135][ T1337] EXT4-fs (loop4): 1 truncate cleaned up [ 310.693370][ T1337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.863141][ T1357] bond1: entered promiscuous mode [ 310.868293][ T1357] bond1: entered allmulticast mode [ 310.874249][ T1357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.885670][ T1357] bond1 (unregistering): Released all slaves [ 310.897377][ T1360] tipc: Started in network mode [ 310.902289][ T1360] tipc: Node identity 4, cluster identity 4711 [ 310.908532][ T1360] tipc: Node number set to 4 [ 311.325222][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.504374][T29663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.544996][ T1660] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.638065][ T1660] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.679678][ T1673] bond1: entered promiscuous mode [ 311.684894][ T1673] bond1: entered allmulticast mode [ 311.691363][ T1673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.702668][ T1673] bond1 (unregistering): Released all slaves [ 311.718796][ T1660] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.809758][ T1660] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.885782][ T1693] netlink: 'syz.5.5963': attribute type 21 has an invalid length. [ 311.894011][ T1684] loop4: detected capacity change from 0 to 512 [ 311.894739][ T1693] netlink: 'syz.5.5963': attribute type 1 has an invalid length. [ 311.902698][ T1684] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 311.931102][ T1660] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.945055][ T1660] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.958199][ T1660] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.972454][ T1660] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.002997][ T1707] FAULT_INJECTION: forcing a failure. [ 312.002997][ T1707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.016176][ T1707] CPU: 1 UID: 0 PID: 1707 Comm: syz.5.5964 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 312.016208][ T1707] Tainted: [W]=WARN [ 312.016215][ T1707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.016229][ T1707] Call Trace: [ 312.016237][ T1707] [ 312.016244][ T1707] dump_stack_lvl+0xf2/0x150 [ 312.016272][ T1707] dump_stack+0x15/0x1a [ 312.016370][ T1707] should_fail_ex+0x24a/0x260 [ 312.016402][ T1707] should_fail+0xb/0x10 [ 312.016487][ T1707] should_fail_usercopy+0x1a/0x20 [ 312.016564][ T1707] strncpy_from_user+0x25/0x210 [ 312.016594][ T1707] strncpy_from_user_nofault+0x66/0xe0 [ 312.016619][ T1707] bpf_probe_read_compat_str+0xb3/0x130 [ 312.016660][ T1707] bpf_prog_597e1462992804d8+0x46/0x48 [ 312.016731][ T1707] bpf_trace_run2+0x104/0x1d0 [ 312.016762][ T1707] ? tls_sw_release_resources_tx+0x16b/0x310 [ 312.016793][ T1707] ? tls_sw_release_resources_tx+0x16b/0x310 [ 312.016864][ T1707] kfree+0x247/0x2f0 [ 312.016889][ T1707] tls_sw_release_resources_tx+0x16b/0x310 [ 312.016918][ T1707] tls_sk_proto_close+0x1ae/0x520 [ 312.016957][ T1707] inet_release+0xce/0xf0 [ 312.016998][ T1707] inet6_release+0x3e/0x60 [ 312.017032][ T1707] sock_close+0x68/0x150 [ 312.017068][ T1707] ? __pfx_sock_close+0x10/0x10 [ 312.017099][ T1707] __fput+0x2ac/0x640 [ 312.017149][ T1707] ____fput+0x1c/0x30 [ 312.017173][ T1707] task_work_run+0x13a/0x1a0 [ 312.017212][ T1707] syscall_exit_to_user_mode+0xa8/0x120 [ 312.017323][ T1707] do_syscall_64+0xd6/0x1c0 [ 312.017357][ T1707] ? clear_bhb_loop+0x55/0xb0 [ 312.017441][ T1707] ? clear_bhb_loop+0x55/0xb0 [ 312.017472][ T1707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.017505][ T1707] RIP: 0033:0x7fc4ab31d169 [ 312.017522][ T1707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.017555][ T1707] RSP: 002b:00007fc4a9987038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 312.017577][ T1707] RAX: 0000000000000000 RBX: 00007fc4ab535fa0 RCX: 00007fc4ab31d169 [ 312.017592][ T1707] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 312.017606][ T1707] RBP: 00007fc4a9987090 R08: 0000000000000000 R09: 0000000000000000 [ 312.017620][ T1707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.017634][ T1707] R13: 0000000000000000 R14: 00007fc4ab535fa0 R15: 00007ffd7261e138 [ 312.017655][ T1707] [ 312.018662][ T1684] EXT4-fs (loop4): 1 truncate cleaned up [ 312.267036][ T1684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.309108][ T1684] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 312.398297][T29663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.495195][ T1951] bond1: entered promiscuous mode [ 312.500297][ T1951] bond1: entered allmulticast mode [ 312.507347][ T1951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.528256][ T1960] loop7: detected capacity change from 0 to 512 [ 312.536460][ T1960] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 312.550737][ T1951] bond1 (unregistering): Released all slaves [ 312.554697][ T1960] EXT4-fs (loop7): 1 truncate cleaned up [ 312.563353][ T1960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.581800][ T1958] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.646825][ T1958] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.693272][ T1993] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.717729][ T1958] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.747343][ T1993] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.787351][ T1958] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.828569][ T1993] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.897330][ T1958] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.918387][ T1958] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.933035][ T1958] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.944068][ T1993] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.963126][ T1958] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.004410][ T1993] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.016414][ T1993] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.029693][ T1993] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.043541][ T1993] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.097225][ T2016] __nla_validate_parse: 10 callbacks suppressed [ 313.097246][ T2016] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5982'. [ 313.136038][ T2021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5985'. [ 313.145108][ T2021] IPVS: Error joining to the multicast group [ 313.152742][ T30] kauditd_printk_skb: 265 callbacks suppressed [ 313.152760][ T30] audit: type=1400 audit(1741605985.186:36366): avc: denied { write } for pid=2020 comm="syz.6.5985" name="mcfilter" dev="proc" ino=4026533683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 313.154055][ T2021] sg_write: data in/out 122/14 bytes for SCSI command 0x1-- guessing data in; [ 313.154055][ T2021] program syz.6.5985 not setting count and/or reply_len properly [ 313.312161][ T30] audit: type=1400 audit(1741605985.316:36367): avc: denied { mount } for pid=2027 comm="syz.4.5988" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 313.389457][ T2033] lo speed is unknown, defaulting to 1000 [ 313.441769][ T30] audit: type=1326 audit(1741605985.476:36368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.6.5990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 313.487979][ T2032] loop6: detected capacity change from 0 to 512 [ 313.501626][ T2032] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 313.535932][ T2041] loop5: detected capacity change from 0 to 512 [ 313.542919][ T2041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.552586][ T2041] EXT4-fs (loop5): filesystem is read-only [ 313.559363][ T2041] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 313.573626][ T30] audit: type=1326 audit(1741605985.506:36369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.6.5990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 313.597354][ T30] audit: type=1326 audit(1741605985.506:36370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.6.5990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 313.620999][ T30] audit: type=1326 audit(1741605985.506:36371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.6.5990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 313.644512][ T30] audit: type=1326 audit(1741605985.506:36372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.6.5990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 313.668091][ T30] audit: type=1326 audit(1741605985.506:36373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.6.5990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 313.691700][ T30] audit: type=1326 audit(1741605985.506:36374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.6.5990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 313.715418][ T30] audit: type=1326 audit(1741605985.506:36375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2031 comm="syz.6.5990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 313.763139][ T3156] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.792871][ T2041] EXT4-fs (loop5): filesystem is read-only [ 313.793296][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.798748][ T2041] EXT4-fs (loop5): orphan cleanup on readonly fs [ 313.799114][ T2041] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5987: bg 0: block 64: padding at end of block bitmap is not set [ 313.799287][ T2041] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 313.799874][ T2041] EXT4-fs (loop5): 1 orphan inode deleted [ 313.816293][ T2032] EXT4-fs (loop6): 1 truncate cleaned up [ 313.829619][ T2041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 313.881856][ T2047] loop7: detected capacity change from 0 to 512 [ 313.902190][ T2032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.922880][ T2032] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 313.944420][ T2047] EXT4-fs (loop7): too many log groups per flexible block group [ 313.952814][ T2047] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 313.953938][ T2034] lo speed is unknown, defaulting to 1000 [ 313.977071][ T2047] EXT4-fs (loop7): mount failed [ 314.038988][T13911] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.087995][ T2058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5995'. [ 314.100231][ T2056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5993'. [ 314.145949][ T2056] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.157463][T12601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.248053][ T2056] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.289400][ T2056] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.295757][ T2084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6002'. [ 314.317497][ T2084] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.362948][ T2056] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.408519][ T2084] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.433611][ T2095] loop7: detected capacity change from 0 to 512 [ 314.441222][ T2095] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 314.444534][ T2097] random: crng reseeded on system resumption [ 314.453304][ T2095] EXT4-fs (loop7): 1 truncate cleaned up [ 314.465394][ T2095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.526952][ T2084] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.579405][ T2084] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.643255][ T2084] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.654739][ T2084] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.667218][ T2084] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.679371][ T2084] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.848616][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.856273][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.864234][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.871840][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.879941][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.887467][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.894862][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.902315][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.910485][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.917899][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.925353][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.932846][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.941134][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.948612][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.956130][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.963709][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.971915][ T3437] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 314.980233][ T3437] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 315.064994][ T2126] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 315.076841][ T2126] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.084067][ T2126] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.242504][ T2143] netlink: 272 bytes leftover after parsing attributes in process `syz.4.6020'. [ 315.255999][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.270364][ T2145] sg_write: data in/out 122/14 bytes for SCSI command 0x1-- guessing data in; [ 315.270364][ T2145] program syz.5.6021 not setting count and/or reply_len properly [ 315.318074][ T2151] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6024'. [ 315.330682][ T2154] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6025'. [ 315.363735][ T2155] loop7: detected capacity change from 0 to 512 [ 315.375801][ T2155] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 315.402363][ T2155] EXT4-fs (loop7): 1 truncate cleaned up [ 315.411748][ T2162] loop5: detected capacity change from 0 to 2048 [ 315.412056][ T2155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.444128][ T2162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.556141][ T2171] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6027'. [ 316.039530][ T2388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6030'. [ 316.198133][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.226558][ T2501] loop4: detected capacity change from 0 to 512 [ 316.240328][ T2501] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 316.264707][T12601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.274077][ T2500] loop7: detected capacity change from 0 to 1024 [ 316.283571][ T2501] EXT4-fs (loop4): 1 truncate cleaned up [ 316.290401][ T2501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.317880][ T2500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.350273][ T2583] random: crng reseeded on system resumption [ 316.511693][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.553300][ T2657] sg_write: data in/out 122/14 bytes for SCSI command 0x1-- guessing data in; [ 316.553300][ T2657] program syz.7.6035 not setting count and/or reply_len properly [ 316.621217][ T2659] loop7: detected capacity change from 0 to 128 [ 316.629296][ T2659] FAULT_INJECTION: forcing a failure. [ 316.629296][ T2659] name failslab, interval 1, probability 0, space 0, times 0 [ 316.641993][ T2659] CPU: 1 UID: 0 PID: 2659 Comm: syz.7.6038 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 316.642022][ T2659] Tainted: [W]=WARN [ 316.642029][ T2659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 316.642041][ T2659] Call Trace: [ 316.642048][ T2659] [ 316.642056][ T2659] dump_stack_lvl+0xf2/0x150 [ 316.642138][ T2659] dump_stack+0x15/0x1a [ 316.642164][ T2659] should_fail_ex+0x24a/0x260 [ 316.642196][ T2659] should_failslab+0x8f/0xb0 [ 316.642226][ T2659] kmem_cache_alloc_noprof+0x52/0x320 [ 316.642249][ T2659] ? alloc_empty_file+0xd0/0x200 [ 316.642329][ T2659] alloc_empty_file+0xd0/0x200 [ 316.642350][ T2659] path_openat+0x6a/0x1fc0 [ 316.642381][ T2659] ? exc_page_fault+0x32e/0x650 [ 316.642474][ T2659] do_filp_open+0x107/0x230 [ 316.642561][ T2659] do_sys_openat2+0xab/0x120 [ 316.642584][ T2659] __x64_sys_openat+0xf3/0x120 [ 316.642605][ T2659] x64_sys_call+0x2b30/0x2dc0 [ 316.642632][ T2659] do_syscall_64+0xc9/0x1c0 [ 316.642675][ T2659] ? clear_bhb_loop+0x55/0xb0 [ 316.642703][ T2659] ? clear_bhb_loop+0x55/0xb0 [ 316.642730][ T2659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.642759][ T2659] RIP: 0033:0x7fe36bbed169 [ 316.642774][ T2659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.642792][ T2659] RSP: 002b:00007fe36a257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 316.642810][ T2659] RAX: ffffffffffffffda RBX: 00007fe36be05fa0 RCX: 00007fe36bbed169 [ 316.642829][ T2659] RDX: 000000000000275a RSI: 0000400000000000 RDI: ffffffffffffff9c [ 316.642842][ T2659] RBP: 00007fe36a257090 R08: 0000000000000000 R09: 0000000000000000 [ 316.642854][ T2659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.642866][ T2659] R13: 0000000000000000 R14: 00007fe36be05fa0 R15: 00007ffffe014e18 [ 316.643016][ T2659] [ 316.858179][ T2662] SELinux: syz.0.6039 (2662) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 316.932117][ T2668] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.986750][ T2668] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.037009][ T2668] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.087408][ T2668] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.121547][T29663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.148417][ T2056] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.160142][ T2677] FAULT_INJECTION: forcing a failure. [ 317.160142][ T2677] name failslab, interval 1, probability 0, space 0, times 0 [ 317.170546][ T2056] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.172834][ T2677] CPU: 1 UID: 0 PID: 2677 Comm: syz.4.6046 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 317.172914][ T2677] Tainted: [W]=WARN [ 317.172924][ T2677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.172940][ T2677] Call Trace: [ 317.172972][ T2677] [ 317.172981][ T2677] dump_stack_lvl+0xf2/0x150 [ 317.173071][ T2677] dump_stack+0x15/0x1a [ 317.173099][ T2677] should_fail_ex+0x24a/0x260 [ 317.173138][ T2677] should_failslab+0x8f/0xb0 [ 317.173176][ T2677] kmem_cache_alloc_noprof+0x52/0x320 [ 317.173271][ T2677] ? __inet_bhash2_update_saddr+0x16c/0xd50 [ 317.173317][ T2677] __inet_bhash2_update_saddr+0x16c/0xd50 [ 317.173361][ T2677] ? xfrm_lookup_route+0xcf/0x110 [ 317.173393][ T2677] ? ip_route_output_flow+0xea/0x120 [ 317.173456][ T2677] inet_bhash2_update_saddr+0x26/0x30 [ 317.173558][ T2677] tcp_v4_connect+0x5e5/0xad0 [ 317.173592][ T2677] mptcp_connect+0x4d0/0x800 [ 317.173712][ T2677] __inet_stream_connect+0x162/0x790 [ 317.173787][ T2677] ? _raw_spin_unlock_bh+0x36/0x40 [ 317.173816][ T2677] ? release_sock+0x117/0x150 [ 317.173841][ T2677] ? _raw_spin_unlock_bh+0x36/0x40 [ 317.173868][ T2677] ? lock_sock_nested+0x10f/0x140 [ 317.173950][ T2677] ? selinux_netlbl_socket_connect+0x113/0x130 [ 317.173989][ T2677] inet_stream_connect+0x48/0x70 [ 317.174027][ T2677] ? __pfx_inet_stream_connect+0x10/0x10 [ 317.174104][ T2677] __sys_connect+0x18f/0x1b0 [ 317.174138][ T2677] __x64_sys_connect+0x41/0x50 [ 317.174164][ T2677] x64_sys_call+0x22a7/0x2dc0 [ 317.174303][ T2677] do_syscall_64+0xc9/0x1c0 [ 317.174425][ T2677] ? clear_bhb_loop+0x55/0xb0 [ 317.174490][ T2677] ? clear_bhb_loop+0x55/0xb0 [ 317.174601][ T2677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.174636][ T2677] RIP: 0033:0x7f12093ed169 [ 317.174656][ T2677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.174679][ T2677] RSP: 002b:00007f1207a51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 317.174702][ T2677] RAX: ffffffffffffffda RBX: 00007f1209605fa0 RCX: 00007f12093ed169 [ 317.174718][ T2677] RDX: 0000000000000010 RSI: 0000400000000480 RDI: 0000000000000004 [ 317.174734][ T2677] RBP: 00007f1207a51090 R08: 0000000000000000 R09: 0000000000000000 [ 317.174824][ T2677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.174839][ T2677] R13: 0000000000000000 R14: 00007f1209605fa0 R15: 00007ffe558e0d08 [ 317.174860][ T2677] [ 317.434357][ T2056] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.446671][ T2056] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.578723][ T2700] xt_connbytes: Forcing CT accounting to be enabled [ 317.585654][ T2700] --map-set only usable from mangle table [ 317.636796][ T2705] batman_adv: batadv0: Adding interface: dummy0 [ 317.643114][ T2705] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.677018][ T2705] batman_adv: batadv0: Interface activated: dummy0 [ 317.732477][ T2713] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.752417][ T2668] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.770003][ T2668] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.781761][ T2668] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.807111][ T2713] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.834374][ T2668] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.856631][ T2713] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.868898][ T2720] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 317.868898][ T2720] program syz.5.6064 not setting count and/or reply_len properly [ 317.938116][ T2713] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.155437][ T30] kauditd_printk_skb: 358 callbacks suppressed [ 318.155456][ T30] audit: type=1326 audit(1741605990.196:36734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2719 comm="syz.5.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4ab34fa25 code=0x7ffc0000 [ 318.188614][ T30] audit: type=1326 audit(1741605990.226:36735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2719 comm="syz.5.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4ab34fa25 code=0x7ffc0000 [ 318.234679][ T30] audit: type=1326 audit(1741605990.256:36736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2719 comm="syz.5.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4ab34fa25 code=0x7ffc0000 [ 318.259145][ T30] audit: type=1326 audit(1741605990.256:36737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2719 comm="syz.5.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4ab34fa25 code=0x7ffc0000 [ 318.282780][ T30] audit: type=1326 audit(1741605990.256:36738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2719 comm="syz.5.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4ab34fa25 code=0x7ffc0000 [ 318.307073][ T30] audit: type=1326 audit(1741605990.256:36739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2719 comm="syz.5.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4ab34fa25 code=0x7ffc0000 [ 318.330612][ T30] audit: type=1326 audit(1741605990.256:36740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2719 comm="syz.5.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4ab34fa25 code=0x7ffc0000 [ 318.354848][ T30] audit: type=1326 audit(1741605990.266:36741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2719 comm="syz.5.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4ab34fa25 code=0x7ffc0000 [ 318.379072][ T30] audit: type=1326 audit(1741605990.266:36742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2719 comm="syz.5.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4ab34fa25 code=0x7ffc0000 [ 318.402595][ T30] audit: type=1326 audit(1741605990.266:36743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2719 comm="syz.5.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4ab34fa25 code=0x7ffc0000 [ 318.522871][ T2734] FAULT_INJECTION: forcing a failure. [ 318.522871][ T2734] name failslab, interval 1, probability 0, space 0, times 0 [ 318.535715][ T2734] CPU: 0 UID: 0 PID: 2734 Comm: syz.6.6067 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 318.535791][ T2734] Tainted: [W]=WARN [ 318.535847][ T2734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.535958][ T2734] Call Trace: [ 318.535965][ T2734] [ 318.535974][ T2734] dump_stack_lvl+0xf2/0x150 [ 318.536009][ T2734] dump_stack+0x15/0x1a [ 318.536050][ T2734] should_fail_ex+0x24a/0x260 [ 318.536081][ T2734] should_failslab+0x8f/0xb0 [ 318.536111][ T2734] kmem_cache_alloc_node_noprof+0x59/0x320 [ 318.536180][ T2734] ? __alloc_skb+0x10b/0x310 [ 318.536209][ T2734] __alloc_skb+0x10b/0x310 [ 318.536237][ T2734] tipc_msg_build+0xc2/0x830 [ 318.536265][ T2734] ? __rcu_read_unlock+0x4e/0x70 [ 318.536340][ T2734] __tipc_sendmsg+0x14f7/0x1c40 [ 318.536367][ T2734] ? selinux_socket_sendmsg+0x185/0x1c0 [ 318.536396][ T2734] ? __pfx_woken_wake_function+0x10/0x10 [ 318.536436][ T2734] ? lock_sock_nested+0x10f/0x140 [ 318.536469][ T2734] ? __pfx_tipc_sendmsg+0x10/0x10 [ 318.536489][ T2734] tipc_sendmsg+0x3e/0x60 [ 318.536511][ T2734] __sock_sendmsg+0x140/0x180 [ 318.536605][ T2734] ____sys_sendmsg+0x326/0x4b0 [ 318.536640][ T2734] __sys_sendmsg+0x19d/0x230 [ 318.536736][ T2734] __x64_sys_sendmsg+0x46/0x50 [ 318.536774][ T2734] x64_sys_call+0x2734/0x2dc0 [ 318.536802][ T2734] do_syscall_64+0xc9/0x1c0 [ 318.536842][ T2734] ? clear_bhb_loop+0x55/0xb0 [ 318.536919][ T2734] ? clear_bhb_loop+0x55/0xb0 [ 318.536952][ T2734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.536979][ T2734] RIP: 0033:0x7fe19976d169 [ 318.536994][ T2734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.537047][ T2734] RSP: 002b:00007fe197dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.537070][ T2734] RAX: ffffffffffffffda RBX: 00007fe199985fa0 RCX: 00007fe19976d169 [ 318.537086][ T2734] RDX: 000000000404c001 RSI: 00004000000002c0 RDI: 0000000000000008 [ 318.537100][ T2734] RBP: 00007fe197dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 318.537112][ T2734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.537124][ T2734] R13: 0000000000000000 R14: 00007fe199985fa0 R15: 00007ffdb07fbc68 [ 318.537142][ T2734] [ 318.596972][ T2739] lo speed is unknown, defaulting to 1000 [ 318.752196][ T2746] FAULT_INJECTION: forcing a failure. [ 318.752196][ T2746] name failslab, interval 1, probability 0, space 0, times 0 [ 318.789880][ T2746] CPU: 0 UID: 0 PID: 2746 Comm: syz.7.6070 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 318.789915][ T2746] Tainted: [W]=WARN [ 318.789923][ T2746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.789938][ T2746] Call Trace: [ 318.789947][ T2746] [ 318.789955][ T2746] dump_stack_lvl+0xf2/0x150 [ 318.789983][ T2746] dump_stack+0x15/0x1a [ 318.790039][ T2746] should_fail_ex+0x24a/0x260 [ 318.790073][ T2746] should_failslab+0x8f/0xb0 [ 318.790104][ T2746] __kmalloc_noprof+0xab/0x3f0 [ 318.790204][ T2746] ? sock_kmalloc+0x83/0xc0 [ 318.790295][ T2746] sock_kmalloc+0x83/0xc0 [ 318.790321][ T2746] ____sys_sendmsg+0x127/0x4b0 [ 318.790352][ T2746] __sys_sendmmsg+0x227/0x4b0 [ 318.790451][ T2746] __x64_sys_sendmmsg+0x57/0x70 [ 318.790478][ T2746] x64_sys_call+0x29aa/0x2dc0 [ 318.790509][ T2746] do_syscall_64+0xc9/0x1c0 [ 318.790587][ T2746] ? clear_bhb_loop+0x55/0xb0 [ 318.790624][ T2746] ? clear_bhb_loop+0x55/0xb0 [ 318.790755][ T2746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.790786][ T2746] RIP: 0033:0x7fe36bbed169 [ 318.790804][ T2746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.790825][ T2746] RSP: 002b:00007fe36a257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 318.790847][ T2746] RAX: ffffffffffffffda RBX: 00007fe36be05fa0 RCX: 00007fe36bbed169 [ 318.790923][ T2746] RDX: 0000000000000001 RSI: 0000400000000780 RDI: 0000000000000003 [ 318.791027][ T2746] RBP: 00007fe36a257090 R08: 0000000000000000 R09: 0000000000000000 [ 318.791040][ T2746] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 318.791054][ T2746] R13: 0000000000000000 R14: 00007fe36be05fa0 R15: 00007ffffe014e18 [ 318.791075][ T2746] [ 319.003416][ T2750] __nla_validate_parse: 3 callbacks suppressed [ 319.003434][ T2750] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6072'. [ 319.077552][ T2758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6075'. [ 319.091230][ T2758] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.108981][ T2763] loop5: detected capacity change from 0 to 1024 [ 319.125938][ T2763] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.134839][ T2763] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.146506][ T2763] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 319.158309][ T2758] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.159704][ T2763] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 2: comm syz.5.6076: lblock 2 mapped to illegal pblock 2 (length 1) [ 319.182349][ T2763] EXT4-fs (loop5): Remounting filesystem read-only [ 319.189776][ T2763] EXT4-fs (loop5): 1 orphan inode deleted [ 319.196428][ T2763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.209053][ T2763] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 319.216595][ T2763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.225748][ T2773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6080'. [ 319.238012][ T2758] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.287123][ T2758] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.320844][ T2779] loop5: detected capacity change from 0 to 512 [ 319.328928][ T2779] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 319.342902][ T2779] EXT4-fs (loop5): 1 truncate cleaned up [ 319.349280][ T2779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.358297][ T2758] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.372283][ T2779] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 319.389414][ T2758] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.402163][ T2779] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6081'. [ 319.415082][ T2758] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.430139][ T2758] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.483160][ T2713] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.496175][ T2713] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.507961][ T2713] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.522017][ T2713] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.532940][ T2795] loop7: detected capacity change from 0 to 512 [ 319.542383][ T2795] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 319.566543][ T2795] EXT4-fs (loop7): 1 truncate cleaned up [ 319.576312][ T2795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.846190][ T2829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6095'. [ 319.858679][ T2829] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.907197][ T2829] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.929587][ T2834] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 319.956980][ T2829] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.994794][ T2836] netlink: 'syz.4.6098': attribute type 7 has an invalid length. [ 320.017175][ T2829] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.051645][ T2838] loop4: detected capacity change from 0 to 512 [ 320.076578][ T2838] EXT4-fs (loop4): too many log groups per flexible block group [ 320.084313][ T2838] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 320.093290][ T2838] EXT4-fs (loop4): mount failed [ 320.160623][T12601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.186678][ T2843] loop4: detected capacity change from 0 to 512 [ 320.207286][ T2847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6102'. [ 320.215963][ T2843] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 320.248306][ T2843] EXT4-fs (loop4): 1 truncate cleaned up [ 320.254298][ T2843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.340833][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.397577][ T2855] loop5: detected capacity change from 0 to 2048 [ 320.418864][ T2855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.444190][ T2864] loop7: detected capacity change from 0 to 512 [ 320.452041][ T2864] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 320.464380][ T2864] EXT4-fs (loop7): 1 truncate cleaned up [ 320.471029][ T2864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.533565][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.701739][ T2878] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6113'. [ 320.780163][ T2888] netlink: 264 bytes leftover after parsing attributes in process `syz.0.6117'. [ 320.793146][ T2889] loop7: detected capacity change from 0 to 512 [ 320.800615][ T2889] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 320.826763][ T2889] EXT4-fs (loop7): 1 truncate cleaned up [ 320.833185][ T2889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.855390][ T2896] netlink: 264 bytes leftover after parsing attributes in process `syz.0.6120'. [ 321.027722][T29663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.137002][ T2908] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6125'. [ 321.286526][T12601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.372674][ T2920] loop5: detected capacity change from 0 to 128 [ 321.400971][ T2920] FAT-fs (loop5): bogus number of reserved sectors [ 321.407585][ T2920] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 321.416956][ T2920] FAT-fs (loop5): Can't find a valid FAT filesystem [ 321.435033][ T2920] loop5: detected capacity change from 0 to 256 [ 321.479659][ T2901] net_ratelimit: 40 callbacks suppressed [ 321.479684][ T2901] Set syz1 is full, maxelem 65536 reached [ 321.551865][ T2925] loop4: detected capacity change from 0 to 512 [ 321.567536][ T2925] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 321.577229][ T2925] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 321.605544][ T2925] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 321.616184][ T2925] EXT4-fs (loop4): 1 truncate cleaned up [ 321.622494][ T2925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.723786][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.776488][ T2946] random: crng reseeded on system resumption [ 321.801656][ T2949] loop7: detected capacity change from 0 to 2048 [ 321.822311][ T2829] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.836019][ T2829] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.850373][ T2949] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.862691][ T2939] loop5: detected capacity change from 0 to 512 [ 321.866720][ T2829] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.869529][ T2939] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.884480][ T2939] EXT4-fs (loop5): filesystem is read-only [ 321.887369][ T2829] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.891694][ T2939] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 321.911551][ T2939] EXT4-fs (loop5): filesystem is read-only [ 321.918306][ T2939] EXT4-fs (loop5): orphan cleanup on readonly fs [ 321.925488][ T2939] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6135: bg 0: block 64: padding at end of block bitmap is not set [ 321.940848][ T2939] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 321.950849][ T2939] EXT4-fs (loop5): 1 orphan inode deleted [ 321.957129][ T2939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 322.015189][ T2939] lo speed is unknown, defaulting to 1000 [ 322.424208][T29663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.532624][T12601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.591491][ T2993] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.685543][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.760521][ T2993] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.839657][ T2993] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.898312][ T2993] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.002748][ T2993] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.022458][ T2993] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.037458][ T2993] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.067600][ T2993] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.076179][ T3377] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.107434][ T3008] loop7: detected capacity change from 0 to 512 [ 323.129739][ T3008] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 323.142586][ T3008] EXT4-fs (loop7): 1 truncate cleaned up [ 323.152542][ T3008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.376203][ T3025] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 323.395315][ T3023] loop6: detected capacity change from 0 to 512 [ 323.404279][ T30] kauditd_printk_skb: 346 callbacks suppressed [ 323.404297][ T30] audit: type=1326 audit(1741605995.426:37088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3021 comm="syz.6.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 323.434964][ T30] audit: type=1326 audit(1741605995.426:37089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3021 comm="syz.6.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 323.459978][ T30] audit: type=1326 audit(1741605995.426:37090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3021 comm="syz.6.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 323.484570][ T30] audit: type=1326 audit(1741605995.426:37091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3021 comm="syz.6.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 323.496673][ T3023] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 323.508353][ T30] audit: type=1326 audit(1741605995.426:37092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3021 comm="syz.6.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 323.542444][ T30] audit: type=1326 audit(1741605995.426:37093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3021 comm="syz.6.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 323.566568][ T30] audit: type=1326 audit(1741605995.426:37094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3021 comm="syz.6.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 323.591016][ T30] audit: type=1326 audit(1741605995.426:37095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3021 comm="syz.6.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 323.614725][ T30] audit: type=1326 audit(1741605995.426:37096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3021 comm="syz.6.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 323.638320][ T30] audit: type=1326 audit(1741605995.426:37097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3021 comm="syz.6.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe19976d169 code=0x7ffc0000 [ 323.679833][ T3023] EXT4-fs (loop6): 1 truncate cleaned up [ 323.690160][ T3023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.777699][T13911] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.830003][ T3065] IPVS: Error joining to the multicast group [ 323.837812][ T3065] sg_write: data in/out 122/14 bytes for SCSI command 0x1-- guessing data in; [ 323.837812][ T3065] program syz.4.6165 not setting count and/or reply_len properly [ 323.924557][ T3072] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.934078][ T3074] loop6: detected capacity change from 0 to 512 [ 323.948102][ T3074] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 323.962424][ T3074] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 323.978800][ T3074] EXT4-fs (loop6): 1 truncate cleaned up [ 323.986133][ T3074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.019464][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.029517][ T3072] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.084429][ T3082] random: crng reseeded on system resumption [ 324.151329][ T3072] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.173960][T13911] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.200144][ T3072] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.226692][ T3089] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 324.238762][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.247019][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.254560][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.262200][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.269691][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277247][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277273][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277295][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277318][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277344][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277398][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277419][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277440][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277462][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277502][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277523][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.277548][ T1038] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 324.279719][ T1038] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 324.321032][ T3095] __nla_validate_parse: 10 callbacks suppressed [ 324.321122][ T3095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6175'. [ 324.338086][ T3096] loop5: detected capacity change from 0 to 512 [ 324.414831][ T3072] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.435956][ T3096] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 324.455625][ T3072] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.468629][ T3072] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.485303][ T3096] EXT4-fs (loop5): 1 truncate cleaned up [ 324.485483][ T3105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6179'. [ 324.491355][ T3096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.508166][ T3072] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.541057][ T3093] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 324.600767][T12601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.627809][ T3118] random: crng reseeded on system resumption [ 324.743896][ T3124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6187'. [ 324.789312][ T3133] loop4: detected capacity change from 0 to 128 [ 324.829968][ T3133] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.845739][ T3133] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 324.887269][ T3133] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 15 (only 1 groups) [ 324.895600][ T3136] lo speed is unknown, defaulting to 1000 [ 324.906511][ T3152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6193'. [ 324.928268][ T3133] FAULT_INJECTION: forcing a failure. [ 324.928268][ T3133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.934436][ T3157] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6194'. [ 324.941402][ T3133] CPU: 1 UID: 0 PID: 3133 Comm: syz.4.6189 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 324.941505][ T3133] Tainted: [W]=WARN [ 324.941514][ T3133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 324.941539][ T3133] Call Trace: [ 324.941547][ T3133] [ 324.941559][ T3133] dump_stack_lvl+0xf2/0x150 [ 324.941671][ T3133] dump_stack+0x15/0x1a [ 324.941698][ T3133] should_fail_ex+0x24a/0x260 [ 324.941748][ T3133] should_fail+0xb/0x10 [ 324.941808][ T3133] should_fail_usercopy+0x1a/0x20 [ 324.941981][ T3133] _copy_to_user+0x20/0xa0 [ 324.942013][ T3133] simple_read_from_buffer+0xa0/0x110 [ 324.942053][ T3133] proc_fail_nth_read+0xf9/0x140 [ 324.942116][ T3133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.942220][ T3133] vfs_read+0x19b/0x6f0 [ 324.942335][ T3133] ? __rcu_read_unlock+0x4e/0x70 [ 324.942366][ T3133] ? __fget_files+0x17c/0x1c0 [ 324.942412][ T3133] ksys_read+0xe8/0x1b0 [ 324.942450][ T3133] __x64_sys_read+0x42/0x50 [ 324.942533][ T3133] x64_sys_call+0x2874/0x2dc0 [ 324.942630][ T3133] do_syscall_64+0xc9/0x1c0 [ 324.942674][ T3133] ? clear_bhb_loop+0x55/0xb0 [ 324.942774][ T3133] ? clear_bhb_loop+0x55/0xb0 [ 324.942811][ T3133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.942848][ T3133] RIP: 0033:0x7f12093ebb7c [ 324.942870][ T3133] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 324.943051][ T3133] RSP: 002b:00007f1207a51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.943078][ T3133] RAX: ffffffffffffffda RBX: 00007f1209605fa0 RCX: 00007f12093ebb7c [ 324.943094][ T3133] RDX: 000000000000000f RSI: 00007f1207a510a0 RDI: 0000000000000013 [ 324.943127][ T3133] RBP: 00007f1207a51090 R08: 0000000000000000 R09: 0000000000000000 [ 324.943143][ T3133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.943198][ T3133] R13: 0000000000000000 R14: 00007f1209605fa0 R15: 00007ffe558e0d08 [ 324.943279][ T3133] [ 325.154813][T29663] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 325.166129][ T3152] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.199761][ T3166] loop4: detected capacity change from 0 to 512 [ 325.226763][ T3152] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.258746][ T3166] EXT4-fs (loop4): too many log groups per flexible block group [ 325.264177][ T3126] lo speed is unknown, defaulting to 1000 [ 325.266503][ T3166] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 325.294256][ T3166] EXT4-fs (loop4): mount failed [ 325.296717][ T3176] random: crng reseeded on system resumption [ 325.316843][ T3152] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.439411][ T3152] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.490942][ T3126] chnl_net:caif_netlink_parms(): no params data found [ 325.546433][ T3152] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.578617][ T3152] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.599179][ T3152] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.615158][ T3205] FAULT_INJECTION: forcing a failure. [ 325.615158][ T3205] name failslab, interval 1, probability 0, space 0, times 0 [ 325.628045][ T3205] CPU: 0 UID: 0 PID: 3205 Comm: syz.7.6209 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 325.628079][ T3205] Tainted: [W]=WARN [ 325.628087][ T3205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.628101][ T3205] Call Trace: [ 325.628109][ T3205] [ 325.628156][ T3205] dump_stack_lvl+0xf2/0x150 [ 325.628191][ T3205] dump_stack+0x15/0x1a [ 325.628259][ T3205] should_fail_ex+0x24a/0x260 [ 325.628295][ T3205] ? v9fs_mount+0x53/0x570 [ 325.628316][ T3205] should_failslab+0x8f/0xb0 [ 325.628350][ T3205] __kmalloc_cache_noprof+0x4e/0x320 [ 325.628432][ T3205] v9fs_mount+0x53/0x570 [ 325.628458][ T3205] ? __pfx_v9fs_mount+0x10/0x10 [ 325.628508][ T3205] legacy_get_tree+0x77/0xd0 [ 325.628542][ T3205] vfs_get_tree+0x56/0x1e0 [ 325.628639][ T3205] do_new_mount+0x227/0x690 [ 325.628675][ T3205] path_mount+0x49b/0xb30 [ 325.628711][ T3205] __se_sys_mount+0x27f/0x2d0 [ 325.628746][ T3205] ? fput+0x1c4/0x200 [ 325.628796][ T3205] __x64_sys_mount+0x67/0x80 [ 325.628851][ T3205] x64_sys_call+0x2c84/0x2dc0 [ 325.628884][ T3205] do_syscall_64+0xc9/0x1c0 [ 325.628921][ T3205] ? clear_bhb_loop+0x55/0xb0 [ 325.628948][ T3205] ? clear_bhb_loop+0x55/0xb0 [ 325.629042][ T3205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.629077][ T3205] RIP: 0033:0x7fe36bbed169 [ 325.629094][ T3205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.629118][ T3205] RSP: 002b:00007fe36a257038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 325.629138][ T3205] RAX: ffffffffffffffda RBX: 00007fe36be05fa0 RCX: 00007fe36bbed169 [ 325.629217][ T3205] RDX: 00004000000002c0 RSI: 0000400000000080 RDI: 0000000000000000 [ 325.629231][ T3205] RBP: 00007fe36a257090 R08: 0000400000000400 R09: 0000000000000000 [ 325.629246][ T3205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.629259][ T3205] R13: 0000000000000000 R14: 00007fe36be05fa0 R15: 00007ffffe014e18 [ 325.629280][ T3205] [ 325.640970][ T3126] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.686001][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.689432][ T3126] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.724183][ T3209] random: crng reseeded on system resumption [ 325.740314][ T3126] bridge_slave_0: entered allmulticast mode [ 325.844449][ T3210] loop7: detected capacity change from 0 to 512 [ 325.859177][ T3126] bridge_slave_0: entered promiscuous mode [ 325.891699][ T3152] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.910015][ T3126] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.917215][ T3126] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.924460][ T3126] bridge_slave_1: entered allmulticast mode [ 325.931606][ T3126] bridge_slave_1: entered promiscuous mode [ 325.938430][ T3210] EXT4-fs (loop7): too many log groups per flexible block group [ 325.946937][ T3210] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 325.965674][ T3126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.968276][ T3210] EXT4-fs (loop7): mount failed [ 325.991424][ T3126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.022892][ T3126] team0: Port device team_slave_0 added [ 326.043487][ T3126] team0: Port device team_slave_1 added [ 326.074908][ T3126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.081980][ T3126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.108591][ T3126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.127079][ T3238] loop4: detected capacity change from 0 to 512 [ 326.138429][ T3238] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 326.148894][ T3126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.155902][ T3126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.181933][ T3126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.199189][ T3238] EXT4-fs (loop4): 1 truncate cleaned up [ 326.206905][ T3238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.216227][ T3243] random: crng reseeded on system resumption [ 326.299306][ T3126] hsr_slave_0: entered promiscuous mode [ 326.314410][ T3126] hsr_slave_1: entered promiscuous mode [ 326.320366][ T3126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.329817][ T3126] Cannot create hsr debugfs directory [ 326.417594][ T3256] loop6: detected capacity change from 0 to 512 [ 326.451736][ T3126] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.459848][ T3261] loop7: detected capacity change from 0 to 512 [ 326.471185][ T3256] EXT4-fs (loop6): too many log groups per flexible block group [ 326.479659][ T3256] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 326.496737][ T3261] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -13 [ 326.505026][ T3256] EXT4-fs (loop6): mount failed [ 326.514180][ T3262] xt_CT: No such helper "syz1" [ 326.519236][ T3261] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 326.531188][ T3261] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 326.542388][ T3261] EXT4-fs (loop7): 1 truncate cleaned up [ 326.552469][ T3126] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.552530][ T3261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.641092][ T3126] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.658601][ T3272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6234'. [ 326.687310][ T3126] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.771501][ T3282] random: crng reseeded on system resumption [ 326.910964][T29663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.971830][ T3297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6244'. [ 326.972262][ T3126] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.992451][ T3126] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.003488][ T3126] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.014527][ T3126] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.074122][ T3126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.101146][ T3126] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.108813][ T29] bridge_slave_1: left allmulticast mode [ 327.114484][ T29] bridge_slave_1: left promiscuous mode [ 327.120324][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.129165][ T29] bridge_slave_0: left allmulticast mode [ 327.134845][ T29] bridge_slave_0: left promiscuous mode [ 327.140567][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.158830][ T3310] random: crng reseeded on system resumption [ 327.210767][ T29] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 327.238034][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.245572][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.253128][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.261023][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.269033][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.276835][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.284508][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.292648][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.301034][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.308760][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.316364][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.323916][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.331943][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.339383][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.346957][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.354389][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.362628][ T3156] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 327.373003][ T3156] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz0 [ 327.373760][ T3315] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 327.390859][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.403678][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.413871][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.427237][ T29] bond0 (unregistering): Released all slaves [ 327.447035][ T3320] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6252'. [ 327.512766][ T3126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.523363][ T3126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.550952][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.558128][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.626942][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.634118][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.660925][ T3334] loop6: detected capacity change from 0 to 128 [ 327.680423][ T3327] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6253'. [ 327.716568][ T29] hsr_slave_0: left promiscuous mode [ 327.731803][ T29] hsr_slave_1: left promiscuous mode [ 327.752489][ T29] batman_adv: batadv0: Interface deactivated: dummy0 [ 327.759341][ T29] batman_adv: batadv0: Removing interface: dummy0 [ 327.797718][ T3340] loop4: detected capacity change from 0 to 128 [ 327.797924][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.811469][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.831992][ T3340] FAULT_INJECTION: forcing a failure. [ 327.831992][ T3340] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.846415][ T3340] CPU: 0 UID: 0 PID: 3340 Comm: syz.4.6254 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 327.846523][ T3340] Tainted: [W]=WARN [ 327.846530][ T3340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.846545][ T3340] Call Trace: [ 327.846554][ T3340] [ 327.846564][ T3340] dump_stack_lvl+0xf2/0x150 [ 327.846621][ T3340] dump_stack+0x15/0x1a [ 327.846648][ T3340] should_fail_ex+0x24a/0x260 [ 327.846679][ T3340] should_fail_alloc_page+0xfd/0x110 [ 327.846760][ T3340] __alloc_frozen_pages_noprof+0x109/0x340 [ 327.846802][ T3340] alloc_pages_mpol+0xb4/0x260 [ 327.846827][ T3340] folio_alloc_noprof+0xee/0x140 [ 327.846923][ T3340] filemap_alloc_folio_noprof+0x69/0x220 [ 327.847021][ T3340] __filemap_get_folio+0x298/0x630 [ 327.847043][ T3340] cont_write_begin+0x512/0x860 [ 327.847127][ T3340] fat_write_begin+0x51/0xe0 [ 327.847153][ T3340] ? __pfx_fat_get_block+0x10/0x10 [ 327.847197][ T3340] generic_perform_write+0x1a8/0x4a0 [ 327.847234][ T3340] __generic_file_write_iter+0xa1/0x120 [ 327.847331][ T3340] generic_file_write_iter+0x8f/0x310 [ 327.847372][ T3340] ? _parse_integer_limit+0x167/0x180 [ 327.847436][ T3340] ? _parse_integer+0x27/0x30 [ 327.847466][ T3340] ? kstrtoull+0x110/0x140 [ 327.847490][ T3340] ? kstrtouint+0x77/0xc0 [ 327.847569][ T3340] ? kstrtouint_from_user+0xb0/0xe0 [ 327.847598][ T3340] ? avc_policy_seqno+0x15/0x20 [ 327.847618][ T3340] ? selinux_file_permission+0x22a/0x360 [ 327.847658][ T3340] vfs_write+0x77b/0x920 [ 327.847703][ T3340] ? __pfx_generic_file_write_iter+0x10/0x10 [ 327.847801][ T3340] ksys_write+0xe8/0x1b0 [ 327.847857][ T3340] __x64_sys_write+0x42/0x50 [ 327.847898][ T3340] x64_sys_call+0x287e/0x2dc0 [ 327.847932][ T3340] do_syscall_64+0xc9/0x1c0 [ 327.847966][ T3340] ? clear_bhb_loop+0x55/0xb0 [ 327.848006][ T3340] ? clear_bhb_loop+0x55/0xb0 [ 327.848038][ T3340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.848071][ T3340] RIP: 0033:0x7f12093ed169 [ 327.848090][ T3340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.848113][ T3340] RSP: 002b:00007f1207a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 327.848136][ T3340] RAX: ffffffffffffffda RBX: 00007f1209606160 RCX: 00007f12093ed169 [ 327.848226][ T3340] RDX: 000000000208e24b RSI: 0000400000000040 RDI: 0000000000000009 [ 327.848242][ T3340] RBP: 00007f1207a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 327.848257][ T3340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.848272][ T3340] R13: 0000000000000000 R14: 00007f1209606160 R15: 00007ffe558e0d08 [ 327.848295][ T3340] [ 328.116465][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.124017][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.162177][ T29] veth0_macvtap: left promiscuous mode [ 328.298328][ T29] team0 (unregistering): Port device team_slave_1 removed [ 328.320949][ T29] team0 (unregistering): Port device team_slave_0 removed [ 328.467635][ T3126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.684003][ T3126] veth0_vlan: entered promiscuous mode [ 328.703671][ T3126] veth1_vlan: entered promiscuous mode [ 328.710117][ T3373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6261'. [ 328.765896][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 328.765913][ T30] audit: type=1400 audit(1741606000.806:37280): avc: denied { bind } for pid=3381 comm="syz.4.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 328.767858][ T3126] veth0_macvtap: entered promiscuous mode [ 328.806680][ T3126] veth1_macvtap: entered promiscuous mode [ 328.828724][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.839442][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.849482][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.859954][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.870542][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.881071][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.891128][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.901926][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.912480][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.923116][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.938782][ T3126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.959205][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.970483][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.982080][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.992677][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.003452][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.013992][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.023935][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.034746][ T3387] loop4: detected capacity change from 0 to 512 [ 329.035010][ T3387] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 329.049836][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.059723][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.070914][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.082134][ T3126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.083776][ T5480] kworker/u8:10: attempt to access beyond end of device [ 329.083776][ T5480] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 329.093713][ T3126] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.112658][ T3126] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.121536][ T3126] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.130937][ T3126] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.171228][ T3398] loop4: detected capacity change from 0 to 1024 [ 329.194471][ T30] audit: type=1400 audit(1741606001.226:37281): avc: denied { relabelfrom } for pid=3399 comm="syz.0.6271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 329.214565][ T30] audit: type=1400 audit(1741606001.226:37282): avc: denied { relabelto } for pid=3399 comm="syz.0.6271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 329.241210][ T3398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.241278][ T3398] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.243016][ T30] audit: type=1400 audit(1741606001.276:37283): avc: denied { setopt } for pid=3405 comm="syz.6.6272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.243130][ T30] audit: type=1400 audit(1741606001.276:37284): avc: denied { write } for pid=3405 comm="syz.6.6272" path="socket:[77286]" dev="sockfs" ino=77286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.247067][ T30] audit: type=1400 audit(1741606001.286:37285): avc: denied { setattr } for pid=3396 comm="syz.4.6270" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 329.361425][ T3413] random: crng reseeded on system resumption [ 329.364257][ T30] audit: type=1326 audit(1741606001.396:37286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36bbed169 code=0x7ffc0000 [ 329.364291][ T30] audit: type=1326 audit(1741606001.396:37287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36bbed169 code=0x7ffc0000 [ 329.364340][ T30] audit: type=1326 audit(1741606001.396:37288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe36bbed169 code=0x7ffc0000 [ 329.364434][ T30] audit: type=1326 audit(1741606001.396:37289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.7.6269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36bbed169 code=0x7ffc0000 [ 329.381021][ T3394] loop7: detected capacity change from 0 to 512 [ 329.381761][ T3394] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 329.383048][ T3394] EXT4-fs (loop7): 1 truncate cleaned up [ 329.383308][ T3394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.423103][ T3394] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 329.557370][T29663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.599684][T23454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.610678][ T3431] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 329.759193][ T3451] netlink: 'syz.0.6282': attribute type 1 has an invalid length. [ 329.903845][ T3467] FAULT_INJECTION: forcing a failure. [ 329.903845][ T3467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.917156][ T3467] CPU: 1 UID: 0 PID: 3467 Comm: syz.7.6288 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 329.917217][ T3467] Tainted: [W]=WARN [ 329.917225][ T3467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 329.917237][ T3467] Call Trace: [ 329.917244][ T3467] [ 329.917251][ T3467] dump_stack_lvl+0xf2/0x150 [ 329.917284][ T3467] dump_stack+0x15/0x1a [ 329.917309][ T3467] should_fail_ex+0x24a/0x260 [ 329.917401][ T3467] should_fail+0xb/0x10 [ 329.917428][ T3467] should_fail_usercopy+0x1a/0x20 [ 329.917466][ T3467] _copy_from_user+0x1c/0xa0 [ 329.917490][ T3467] perf_copy_attr+0x146/0x5c0 [ 329.917592][ T3467] ? selinux_file_permission+0x22a/0x360 [ 329.917634][ T3467] ? __rcu_read_unlock+0x4e/0x70 [ 329.917698][ T3467] __se_sys_perf_event_open+0x6d/0x2230 [ 329.917723][ T3467] ? proc_fail_nth_write+0x12a/0x150 [ 329.917787][ T3467] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 329.917852][ T3467] ? vfs_write+0x644/0x920 [ 329.917892][ T3467] __x64_sys_perf_event_open+0x67/0x80 [ 329.917942][ T3467] x64_sys_call+0x1deb/0x2dc0 [ 329.917974][ T3467] do_syscall_64+0xc9/0x1c0 [ 329.918049][ T3467] ? clear_bhb_loop+0x55/0xb0 [ 329.918081][ T3467] ? clear_bhb_loop+0x55/0xb0 [ 329.918113][ T3467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.918148][ T3467] RIP: 0033:0x7fe36bbed169 [ 329.918163][ T3467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.918181][ T3467] RSP: 002b:00007fe36a236038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 329.918201][ T3467] RAX: ffffffffffffffda RBX: 00007fe36be06080 RCX: 00007fe36bbed169 [ 329.918217][ T3467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000000 [ 329.918303][ T3467] RBP: 00007fe36a236090 R08: 0000000000000000 R09: 0000000000000000 [ 329.918315][ T3467] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 329.918347][ T3467] R13: 0000000000000000 R14: 00007fe36be06080 R15: 00007ffffe014e18 [ 329.918367][ T3467] [ 330.212962][ T3474] loop6: detected capacity change from 0 to 1024 [ 330.237173][ T3474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.287590][T13911] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.318214][ T3480] loop6: detected capacity change from 0 to 512 [ 330.325478][ T3480] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 330.337313][ T3480] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 330.352962][ T3480] EXT4-fs (loop6): 1 truncate cleaned up [ 330.359741][ T3480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.391932][T13911] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.652959][ T3488] lo speed is unknown, defaulting to 1000 [ 330.668997][ T12] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.741899][ T12] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.776980][ T3505] FAULT_INJECTION: forcing a failure. [ 330.776980][ T3505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.790931][ T3505] CPU: 0 UID: 0 PID: 3505 Comm: syz.5.6298 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 330.790966][ T3505] Tainted: [W]=WARN [ 330.790974][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.790989][ T3505] Call Trace: [ 330.791023][ T3505] [ 330.791030][ T3505] dump_stack_lvl+0xf2/0x150 [ 330.791058][ T3505] dump_stack+0x15/0x1a [ 330.791080][ T3505] should_fail_ex+0x24a/0x260 [ 330.791116][ T3505] should_fail+0xb/0x10 [ 330.791189][ T3505] should_fail_usercopy+0x1a/0x20 [ 330.791314][ T3505] _copy_from_iter+0xd5/0xd00 [ 330.791350][ T3505] ? kmalloc_reserve+0x16e/0x190 [ 330.791377][ T3505] ? __build_skb_around+0x196/0x1f0 [ 330.791472][ T3505] ? __alloc_skb+0x21f/0x310 [ 330.791496][ T3505] ? __virt_addr_valid+0x1ed/0x250 [ 330.791590][ T3505] ? __check_object_size+0x364/0x520 [ 330.791620][ T3505] netlink_sendmsg+0x460/0x6e0 [ 330.791657][ T3505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.791771][ T3505] __sock_sendmsg+0x140/0x180 [ 330.791808][ T3505] ____sys_sendmsg+0x326/0x4b0 [ 330.791842][ T3505] __sys_sendmsg+0x19d/0x230 [ 330.791963][ T3505] __x64_sys_sendmsg+0x46/0x50 [ 330.791995][ T3505] x64_sys_call+0x2734/0x2dc0 [ 330.792038][ T3505] do_syscall_64+0xc9/0x1c0 [ 330.792096][ T3505] ? clear_bhb_loop+0x55/0xb0 [ 330.792153][ T3505] ? clear_bhb_loop+0x55/0xb0 [ 330.792185][ T3505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.792275][ T3505] RIP: 0033:0x7f352db4d169 [ 330.792300][ T3505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.792322][ T3505] RSP: 002b:00007f352c1b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.792344][ T3505] RAX: ffffffffffffffda RBX: 00007f352dd65fa0 RCX: 00007f352db4d169 [ 330.792358][ T3505] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003 [ 330.792373][ T3505] RBP: 00007f352c1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 330.792392][ T3505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.792407][ T3505] R13: 0000000000000000 R14: 00007f352dd65fa0 R15: 00007ffea3c432e8 [ 330.792425][ T3505] [ 331.053650][ T3488] chnl_net:caif_netlink_parms(): no params data found [ 331.076965][ T3517] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 331.088719][ T3523] loop7: detected capacity change from 0 to 512 [ 331.109838][ T3523] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 331.124963][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.132301][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.141303][ T3488] bridge_slave_0: entered allmulticast mode [ 331.148400][ T3488] bridge_slave_0: entered promiscuous mode [ 331.156145][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.163286][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.175362][ T3488] bridge_slave_1: entered allmulticast mode [ 331.176069][ T3488] bridge_slave_1: entered promiscuous mode [ 331.181605][ T3523] EXT4-fs (loop7): 1 truncate cleaned up [ 331.198888][ T3528] random: crng reseeded on system resumption [ 331.211214][ T12] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.230107][ T3530] loop4: detected capacity change from 0 to 512 [ 331.233908][ T3530] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 331.241764][ T3530] EXT4-fs (loop4): 1 truncate cleaned up [ 331.244937][ T3530] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 331.286547][ T12] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.331535][ T3488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.342506][ T3488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.375036][ T3539] loop4: detected capacity change from 0 to 128 [ 331.385446][ T3539] FAT-fs (loop4): bogus number of reserved sectors [ 331.392003][ T3539] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 331.392039][ T3488] team0: Port device team_slave_0 added [ 331.401550][ T3539] FAT-fs (loop4): Can't find a valid FAT filesystem [ 331.426254][ T12] dummy0: left allmulticast mode [ 331.431440][ T12] dummy0: left promiscuous mode [ 331.437221][ T12] bridge0: port 3(dummy0) entered disabled state [ 331.449116][ T3545] __nla_validate_parse: 2 callbacks suppressed [ 331.449168][ T3545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6309'. [ 331.456760][ T12] bridge_slave_1: left allmulticast mode [ 331.470091][ T12] bridge_slave_1: left promiscuous mode [ 331.475757][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.492093][ T3539] loop4: detected capacity change from 0 to 256 [ 331.507047][ T12] bridge_slave_0: left allmulticast mode [ 331.512775][ T12] bridge_slave_0: left promiscuous mode [ 331.518461][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.572768][ T3553] loop7: detected capacity change from 0 to 512 [ 331.592604][ T3554] loop5: detected capacity change from 0 to 512 [ 331.600071][ T3554] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 331.612414][ T3553] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.625592][ T3554] EXT4-fs (loop5): 1 truncate cleaned up [ 331.632264][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.665026][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.678095][ T12] bond0 (unregistering): Released all slaves [ 331.690409][ T12] bond1 (unregistering): Released all slaves [ 331.699485][ T3488] team0: Port device team_slave_1 added [ 331.731954][ T3488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.731971][ T3488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.732006][ T3488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.732788][ T3488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.732850][ T3488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.732891][ T3488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.764104][ T3564] loop7: detected capacity change from 0 to 512 [ 331.842450][ T3564] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 331.856994][ T3488] hsr_slave_0: entered promiscuous mode [ 331.857528][ T3488] hsr_slave_1: entered promiscuous mode [ 331.857795][ T3488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.857809][ T3488] Cannot create hsr debugfs directory [ 331.876421][ T3564] EXT4-fs (loop7): 1 truncate cleaned up [ 331.912843][ T12] hsr_slave_0: left promiscuous mode [ 331.913139][ T12] hsr_slave_1: left promiscuous mode [ 331.923520][ T12] veth1_macvtap: left promiscuous mode [ 331.923595][ T12] veth0_macvtap: left promiscuous mode [ 332.071219][ T3575] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 332.114407][ T12] team0 (unregistering): Port device team_slave_1 removed [ 332.142995][ T12] team0 (unregistering): Port device team_slave_0 removed [ 332.294693][ T3590] FAULT_INJECTION: forcing a failure. [ 332.294693][ T3590] name failslab, interval 1, probability 0, space 0, times 0 [ 332.308160][ T3590] CPU: 0 UID: 0 PID: 3590 Comm: syz.7.6321 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 332.308208][ T3590] Tainted: [W]=WARN [ 332.308216][ T3590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.308231][ T3590] Call Trace: [ 332.308239][ T3590] [ 332.308248][ T3590] dump_stack_lvl+0xf2/0x150 [ 332.308332][ T3590] dump_stack+0x15/0x1a [ 332.308530][ T3590] should_fail_ex+0x24a/0x260 [ 332.308569][ T3590] should_failslab+0x8f/0xb0 [ 332.308604][ T3590] kmem_cache_alloc_noprof+0x52/0x320 [ 332.308633][ T3590] ? security_inode_alloc+0x37/0x100 [ 332.308680][ T3590] security_inode_alloc+0x37/0x100 [ 332.308764][ T3590] inode_init_always_gfp+0x4a2/0x4f0 [ 332.308804][ T3590] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 332.308832][ T3590] alloc_inode+0x82/0x160 [ 332.308915][ T3590] new_inode+0x1e/0x100 [ 332.309019][ T3590] shmem_get_inode+0x24e/0x730 [ 332.309050][ T3590] __shmem_file_setup+0x127/0x1f0 [ 332.309119][ T3590] shmem_file_setup+0x3b/0x50 [ 332.309142][ T3590] __se_sys_memfd_create+0x2e1/0x5a0 [ 332.309177][ T3590] __x64_sys_memfd_create+0x31/0x40 [ 332.309240][ T3590] x64_sys_call+0x2d4c/0x2dc0 [ 332.309274][ T3590] do_syscall_64+0xc9/0x1c0 [ 332.309314][ T3590] ? clear_bhb_loop+0x55/0xb0 [ 332.309348][ T3590] ? clear_bhb_loop+0x55/0xb0 [ 332.309417][ T3590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.309495][ T3590] RIP: 0033:0x7fe36bbed169 [ 332.309513][ T3590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.309536][ T3590] RSP: 002b:00007fe36a256e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 332.309559][ T3590] RAX: ffffffffffffffda RBX: 00000000000004b6 RCX: 00007fe36bbed169 [ 332.309575][ T3590] RDX: 00007fe36a256ef0 RSI: 0000000000000000 RDI: 00007fe36bc6ec3c [ 332.309608][ T3590] RBP: 0000400000000540 R08: 00007fe36a256bb7 R09: 00007fe36a256e40 [ 332.309623][ T3590] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000500 [ 332.309638][ T3590] R13: 00007fe36a256ef0 R14: 00007fe36a256eb0 R15: 0000400000000000 [ 332.309731][ T3590] [ 332.664222][ T3610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6324'. [ 332.690111][ T3618] loop7: detected capacity change from 0 to 512 [ 332.699612][ T3618] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 332.709923][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.717504][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.731485][ T3610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.739032][ T3610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.752667][ T3618] EXT4-fs (loop7): 1 truncate cleaned up [ 332.793923][ T12] IPVS: stop unused estimator thread 0... [ 332.855583][ T3488] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 332.903397][ T3488] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 332.911034][ T3637] sg_write: data in/out 122/14 bytes for SCSI command 0x1-- guessing data in; [ 332.911034][ T3637] program syz.4.6330 not setting count and/or reply_len properly [ 332.931114][ T3488] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 332.941594][ T3488] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 333.020037][ T3488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.067627][ T3488] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.080105][ T3657] loop7: detected capacity change from 0 to 512 [ 333.098692][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.105816][ T5480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.128370][ T3657] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 333.152556][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.159726][ T5480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.171037][ T3657] EXT4-fs (loop7): 1 truncate cleaned up [ 333.200793][ T3488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.317380][ T3488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.572808][ T3488] veth0_vlan: entered promiscuous mode [ 333.598520][ T3488] veth1_vlan: entered promiscuous mode [ 333.642855][ T3488] veth0_macvtap: entered promiscuous mode [ 333.665528][ T3488] veth1_macvtap: entered promiscuous mode [ 333.696514][ T3488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.707030][ T3488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.716923][ T3488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.727415][ T3488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.737349][ T3488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.747941][ T3488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.757982][ T3488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.768900][ T3488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.778864][ T3488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.789390][ T3488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.896006][ T3488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.914393][ T3488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.924944][ T3488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.934916][ T3488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.945429][ T3488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.955490][ T3488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.966224][ T3488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.976125][ T3488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.986582][ T3488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.991295][ T3945] loop5: detected capacity change from 0 to 512 [ 333.996489][ T3488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.013127][ T3488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.014029][ T3945] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 334.049103][ T3488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.063951][ T3948] ./file0: Can't open blockdev [ 334.081281][ T3945] EXT4-fs (loop5): 1 truncate cleaned up [ 334.088905][ T3488] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.097704][ T3488] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.106552][ T3488] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.115435][ T3488] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.203528][ T30] kauditd_printk_skb: 575 callbacks suppressed [ 334.203576][ T30] audit: type=1326 audit(1741606006.236:37865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 334.251702][ T30] audit: type=1326 audit(1741606006.236:37866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 334.275321][ T30] audit: type=1326 audit(1741606006.236:37867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 334.299467][ T30] audit: type=1326 audit(1741606006.236:37868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 334.323123][ T30] audit: type=1326 audit(1741606006.236:37869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 334.323160][ T30] audit: type=1326 audit(1741606006.236:37870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 334.323197][ T30] audit: type=1326 audit(1741606006.236:37871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 334.393981][ T30] audit: type=1326 audit(1741606006.236:37872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 334.394017][ T30] audit: type=1326 audit(1741606006.236:37873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 334.394056][ T30] audit: type=1326 audit(1741606006.236:37874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.0.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa99cad169 code=0x7ffc0000 [ 334.701676][ T3981] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 334.828796][ T3998] loop5: detected capacity change from 0 to 512 [ 334.862946][ T3998] EXT4-fs (loop5): too many log groups per flexible block group [ 334.870753][ T3998] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 334.893364][ T3998] EXT4-fs (loop5): mount failed [ 334.987871][ T4050] FAULT_INJECTION: forcing a failure. [ 334.987871][ T4050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.001208][ T4050] CPU: 1 UID: 0 PID: 4050 Comm: syz.7.6354 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 335.001262][ T4050] Tainted: [W]=WARN [ 335.001271][ T4050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.001317][ T4050] Call Trace: [ 335.001324][ T4050] [ 335.001334][ T4050] dump_stack_lvl+0xf2/0x150 [ 335.001370][ T4050] dump_stack+0x15/0x1a [ 335.001460][ T4050] should_fail_ex+0x24a/0x260 [ 335.001539][ T4050] should_fail+0xb/0x10 [ 335.001567][ T4050] should_fail_usercopy+0x1a/0x20 [ 335.001675][ T4050] _copy_to_user+0x20/0xa0 [ 335.001700][ T4050] simple_read_from_buffer+0xa0/0x110 [ 335.001737][ T4050] proc_fail_nth_read+0xf9/0x140 [ 335.001783][ T4050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.001845][ T4050] vfs_read+0x19b/0x6f0 [ 335.001876][ T4050] ? __rcu_read_unlock+0x4e/0x70 [ 335.001905][ T4050] ? __fget_files+0x17c/0x1c0 [ 335.001965][ T4050] ksys_read+0xe8/0x1b0 [ 335.001996][ T4050] __x64_sys_read+0x42/0x50 [ 335.002035][ T4050] x64_sys_call+0x2874/0x2dc0 [ 335.002067][ T4050] do_syscall_64+0xc9/0x1c0 [ 335.002185][ T4050] ? clear_bhb_loop+0x55/0xb0 [ 335.002221][ T4050] ? clear_bhb_loop+0x55/0xb0 [ 335.002254][ T4050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.002288][ T4050] RIP: 0033:0x7fe36bbebb7c [ 335.002384][ T4050] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 335.002466][ T4050] RSP: 002b:00007fe36a257030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.002488][ T4050] RAX: ffffffffffffffda RBX: 00007fe36be05fa0 RCX: 00007fe36bbebb7c [ 335.002501][ T4050] RDX: 000000000000000f RSI: 00007fe36a2570a0 RDI: 0000000000000006 [ 335.002517][ T4050] RBP: 00007fe36a257090 R08: 0000000000000000 R09: 0000000000000000 [ 335.002529][ T4050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.002544][ T4050] R13: 0000000000000000 R14: 00007fe36be05fa0 R15: 00007ffffe014e18 [ 335.002567][ T4050] [ 335.223563][ T4043] loop6: detected capacity change from 0 to 8192 [ 335.329937][ T4318] loop5: detected capacity change from 0 to 512 [ 335.345079][ T4318] EXT4-fs: Ignoring removed nobh option [ 335.371018][ T4318] EXT4-fs: inline encryption not supported [ 335.406355][ T4318] ext4 filesystem being mounted at /18/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.438148][ T3377] kernel write not supported for file /vcsu (pid: 3377 comm: kworker/0:5) [ 335.518128][ T4362] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6363'. [ 335.546205][ T4358] loop6: detected capacity change from 0 to 2048 [ 335.559389][ T4368] FAULT_INJECTION: forcing a failure. [ 335.559389][ T4368] name failslab, interval 1, probability 0, space 0, times 0 [ 335.572974][ T4368] CPU: 0 UID: 0 PID: 4368 Comm: syz.4.6367 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 335.573009][ T4368] Tainted: [W]=WARN [ 335.573017][ T4368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.573112][ T4368] Call Trace: [ 335.573120][ T4368] [ 335.573128][ T4368] dump_stack_lvl+0xf2/0x150 [ 335.573168][ T4368] dump_stack+0x15/0x1a [ 335.573194][ T4368] should_fail_ex+0x24a/0x260 [ 335.573226][ T4368] should_failslab+0x8f/0xb0 [ 335.573303][ T4368] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 335.573333][ T4368] ? sidtab_sid2str_get+0xb8/0x140 [ 335.573365][ T4368] kmemdup_noprof+0x2b/0x70 [ 335.573391][ T4368] sidtab_sid2str_get+0xb8/0x140 [ 335.573448][ T4368] security_sid_to_context_core+0x1eb/0x2f0 [ 335.573486][ T4368] security_sid_to_context+0x27/0x30 [ 335.573514][ T4368] selinux_lsmprop_to_secctx+0x68/0xf0 [ 335.573651][ T4368] security_lsmprop_to_secctx+0x40/0x80 [ 335.573674][ T4368] audit_log_task_context+0x76/0x180 [ 335.573749][ T4368] audit_log_task+0xf9/0x250 [ 335.573785][ T4368] audit_seccomp+0x68/0x130 [ 335.573821][ T4368] __seccomp_filter+0x6fa/0x1180 [ 335.573960][ T4368] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 335.573991][ T4368] ? vfs_write+0x644/0x920 [ 335.574053][ T4368] __secure_computing+0x9f/0x1c0 [ 335.574078][ T4368] syscall_trace_enter+0xd1/0x1f0 [ 335.574105][ T4368] do_syscall_64+0xaa/0x1c0 [ 335.574154][ T4368] ? clear_bhb_loop+0x55/0xb0 [ 335.574206][ T4368] ? clear_bhb_loop+0x55/0xb0 [ 335.574233][ T4368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.574265][ T4368] RIP: 0033:0x7f12093ed169 [ 335.574319][ T4368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.574341][ T4368] RSP: 002b:00007f1207a51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 335.574362][ T4368] RAX: ffffffffffffffda RBX: 00007f1209605fa0 RCX: 00007f12093ed169 [ 335.574374][ T4368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000140 [ 335.574386][ T4368] RBP: 00007f1207a51090 R08: 0000000000000000 R09: 0000000000000000 [ 335.574400][ T4368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.574424][ T4368] R13: 0000000000000000 R14: 00007f1209605fa0 R15: 00007ffe558e0d08 [ 335.574445][ T4368] [ 335.819525][ T4371] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6368'. [ 335.927218][ T4390] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6362'. [ 335.988293][ T4395] loop4: detected capacity change from 0 to 1024 [ 336.087977][ T4409] loop5: detected capacity change from 0 to 2048 [ 336.143454][ T4415] loop4: detected capacity change from 0 to 512 [ 336.151946][ T4415] EXT4-fs: Ignoring removed oldalloc option [ 336.174391][ T4430] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6380'. [ 336.186060][ T4415] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.203748][ T4415] tipc: Started in network mode [ 336.209543][ T4415] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 336.220033][ T4415] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 336.228372][ T4415] tipc: Enabled bearer , priority 10 [ 336.270583][ T4464] sg_write: data in/out 122/14 bytes for SCSI command 0x1-- guessing data in; [ 336.270583][ T4464] program syz.4.6383 not setting count and/or reply_len properly [ 336.590552][ T4653] loop4: detected capacity change from 0 to 1024 [ 336.661768][ T4745] loop4: detected capacity change from 0 to 128 [ 336.670051][ T4745] FAULT_INJECTION: forcing a failure. [ 336.670051][ T4745] name failslab, interval 1, probability 0, space 0, times 0 [ 336.682918][ T4745] CPU: 1 UID: 0 PID: 4745 Comm: syz.4.6392 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 336.682952][ T4745] Tainted: [W]=WARN [ 336.682960][ T4745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 336.682972][ T4745] Call Trace: [ 336.682978][ T4745] [ 336.683062][ T4745] dump_stack_lvl+0xf2/0x150 [ 336.683172][ T4745] dump_stack+0x15/0x1a [ 336.683193][ T4745] should_fail_ex+0x24a/0x260 [ 336.683227][ T4745] should_failslab+0x8f/0xb0 [ 336.683342][ T4745] kmem_cache_alloc_noprof+0x52/0x320 [ 336.683364][ T4745] ? alloc_empty_file+0xd0/0x200 [ 336.683389][ T4745] alloc_empty_file+0xd0/0x200 [ 336.683414][ T4745] path_openat+0x6a/0x1fc0 [ 336.683448][ T4745] ? exc_page_fault+0x32e/0x650 [ 336.683520][ T4745] do_filp_open+0x107/0x230 [ 336.683562][ T4745] do_sys_openat2+0xab/0x120 [ 336.683583][ T4745] __x64_sys_openat+0xf3/0x120 [ 336.683604][ T4745] x64_sys_call+0x2b30/0x2dc0 [ 336.683669][ T4745] do_syscall_64+0xc9/0x1c0 [ 336.683740][ T4745] ? clear_bhb_loop+0x55/0xb0 [ 336.683771][ T4745] ? clear_bhb_loop+0x55/0xb0 [ 336.683828][ T4745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.683946][ T4745] RIP: 0033:0x7f12093ed169 [ 336.683961][ T4745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.683979][ T4745] RSP: 002b:00007f1207a51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 336.683999][ T4745] RAX: ffffffffffffffda RBX: 00007f1209605fa0 RCX: 00007f12093ed169 [ 336.684014][ T4745] RDX: 000000000000275a RSI: 0000400000000000 RDI: ffffffffffffff9c [ 336.684029][ T4745] RBP: 00007f1207a51090 R08: 0000000000000000 R09: 0000000000000000 [ 336.684043][ T4745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.684058][ T4745] R13: 0000000000000000 R14: 00007f1209605fa0 R15: 00007ffe558e0d08 [ 336.684085][ T4745] [ 336.905446][ T4767] loop4: detected capacity change from 0 to 128 [ 336.918431][ T4767] FAT-fs (loop4): bogus number of reserved sectors [ 336.925022][ T4767] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 336.934533][ T4767] FAT-fs (loop4): Can't find a valid FAT filesystem [ 336.966927][ T4767] loop4: detected capacity change from 0 to 256 [ 337.019824][ T4775] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 337.032423][ T4779] loop4: detected capacity change from 0 to 128 [ 337.041028][ T4779] FAT-fs (loop4): bogus number of reserved sectors [ 337.047720][ T4779] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 337.057099][ T4779] FAT-fs (loop4): Can't find a valid FAT filesystem [ 337.077218][ T4784] SELinux: syz.0.6402 (4784) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 337.114778][ T4779] loop4: detected capacity change from 0 to 256 [ 337.142892][ T4788] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 337.201832][ T4794] FAULT_INJECTION: forcing a failure. [ 337.201832][ T4794] name failslab, interval 1, probability 0, space 0, times 0 [ 337.214761][ T4794] CPU: 0 UID: 0 PID: 4794 Comm: syz.0.6407 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 337.214801][ T4794] Tainted: [W]=WARN [ 337.214808][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 337.214821][ T4794] Call Trace: [ 337.214827][ T4794] [ 337.214894][ T4794] dump_stack_lvl+0xf2/0x150 [ 337.214923][ T4794] dump_stack+0x15/0x1a [ 337.214995][ T4794] should_fail_ex+0x24a/0x260 [ 337.215027][ T4794] should_failslab+0x8f/0xb0 [ 337.215060][ T4794] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 337.215084][ T4794] ? __d_alloc+0x3d/0x350 [ 337.215118][ T4794] __d_alloc+0x3d/0x350 [ 337.215147][ T4794] ? __rcu_read_unlock+0x34/0x70 [ 337.215172][ T4794] d_alloc_parallel+0x54/0xc80 [ 337.215198][ T4794] ? selinux_inode_permission+0x341/0x410 [ 337.215259][ T4794] ? lockref_get_not_dead+0x117/0x1b0 [ 337.215282][ T4794] ? down_read+0x171/0x4b0 [ 337.215313][ T4794] __lookup_slow+0x8d/0x250 [ 337.215389][ T4794] lookup_slow+0x3c/0x60 [ 337.215411][ T4794] walk_component+0x1f5/0x230 [ 337.215429][ T4794] ? path_lookupat+0xfd/0x2b0 [ 337.215449][ T4794] path_lookupat+0x10a/0x2b0 [ 337.215545][ T4794] filename_lookup+0x150/0x340 [ 337.215577][ T4794] kern_path+0x39/0x120 [ 337.215598][ T4794] lookup_bdev+0x62/0x140 [ 337.215629][ T4794] __se_sys_quotactl+0x1b3/0x660 [ 337.215656][ T4794] __x64_sys_quotactl+0x55/0x70 [ 337.215759][ T4794] x64_sys_call+0x826/0x2dc0 [ 337.215836][ T4794] do_syscall_64+0xc9/0x1c0 [ 337.215869][ T4794] ? clear_bhb_loop+0x55/0xb0 [ 337.215934][ T4794] ? clear_bhb_loop+0x55/0xb0 [ 337.215962][ T4794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.215989][ T4794] RIP: 0033:0x7faa99cad169 [ 337.216004][ T4794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.216023][ T4794] RSP: 002b:00007faa98317038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 337.216102][ T4794] RAX: ffffffffffffffda RBX: 00007faa99ec5fa0 RCX: 00007faa99cad169 [ 337.216114][ T4794] RDX: 0000000000000000 RSI: 0000400000000000 RDI: ffffffff80000301 [ 337.216126][ T4794] RBP: 00007faa98317090 R08: 0000000000000000 R09: 0000000000000000 [ 337.216138][ T4794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.216150][ T4794] R13: 0000000000000000 R14: 00007faa99ec5fa0 R15: 00007fff63747098 [ 337.216202][ T4794] [ 337.450936][ T3437] tipc: Node number set to 1 [ 337.572927][ T4813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6415'. [ 337.587259][ T4811] loop5: detected capacity change from 0 to 512 [ 337.595855][ T4811] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 337.615014][ T4815] SELinux: syz.0.6416 (4815) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 337.648212][ T4811] EXT4-fs (loop5): 1 truncate cleaned up [ 337.689648][ T4822] loop6: detected capacity change from 0 to 1024 [ 337.704442][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6419'. [ 337.713421][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6419'. [ 337.723346][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6419'. [ 337.844469][ T4834] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 337.930483][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6427'. [ 338.036495][ T4849] team0 (unregistering): Port device team_slave_0 removed [ 338.064284][ T4849] team0 (unregistering): Port device team_slave_1 removed [ 338.106174][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6430'. [ 338.189585][ T4860] loop6: detected capacity change from 0 to 512 [ 338.205925][ T4860] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 338.254784][ T4860] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 338.286081][ T4860] EXT4-fs (loop6): 1 truncate cleaned up [ 338.366557][ T4890] netlink: 'syz.6.6435': attribute type 1 has an invalid length. [ 338.380196][ T4890] loop6: detected capacity change from 0 to 512 [ 338.398885][ T4890] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.416730][ T4890] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.6435: Failed to acquire dquot type 0 [ 338.543222][ T4938] loop6: detected capacity change from 0 to 512 [ 338.566166][ T4961] loop5: detected capacity change from 0 to 128 [ 338.587614][ T4961] FAT-fs (loop5): bogus number of reserved sectors [ 338.594199][ T4961] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 338.603621][ T4961] FAT-fs (loop5): Can't find a valid FAT filesystem [ 338.611026][ T4938] EXT4-fs (loop6): too many log groups per flexible block group [ 338.618873][ T4938] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 338.630380][ T4961] loop5: detected capacity change from 0 to 256 [ 338.646844][ T4938] EXT4-fs (loop6): mount failed [ 338.752651][ T4846] ================================================================== [ 338.760811][ T4846] BUG: KCSAN: data-race in io_req_defer_failed / io_wq_free_work [ 338.768588][ T4846] [ 338.770924][ T4846] write to 0xffff888127b41048 of 8 bytes by task 4841 on cpu 1: [ 338.778572][ T4846] io_req_defer_failed+0x6f/0x420 [ 338.783643][ T4846] io_req_task_cancel+0x21/0x30 [ 338.788525][ T4846] io_handle_tw_list+0x1b9/0x200 [ 338.793486][ T4846] tctx_task_work_run+0x6e/0x1c0 [ 338.798443][ T4846] tctx_task_work+0x40/0x80 [ 338.802965][ T4846] task_work_run+0x13a/0x1a0 [ 338.807577][ T4846] get_signal+0xe78/0x1000 [ 338.812001][ T4846] arch_do_signal_or_restart+0x95/0x4b0 [ 338.817558][ T4846] syscall_exit_to_user_mode+0x62/0x120 [ 338.824076][ T4846] do_syscall_64+0xd6/0x1c0 [ 338.828596][ T4846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.834626][ T4846] [ 338.836950][ T4846] read to 0xffff888127b41048 of 8 bytes by task 4846 on cpu 0: [ 338.844605][ T4846] io_wq_free_work+0x24/0x1b0 [ 338.849302][ T4846] io_worker_handle_work+0x4cb/0x9d0 [ 338.854713][ T4846] io_wq_worker+0x286/0x820 [ 338.859233][ T4846] ret_from_fork+0x4b/0x60 [ 338.863686][ T4846] ret_from_fork_asm+0x1a/0x30 [ 338.868466][ T4846] [ 338.870789][ T4846] value changed: 0x0000000000580071 -> 0x0000000000d80131 [ 338.877896][ T4846] [ 338.880219][ T4846] Reported by Kernel Concurrency Sanitizer on: [ 338.886372][ T4846] CPU: 0 UID: 0 PID: 4846 Comm: iou-wrk-4841 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 338.896967][ T4846] Tainted: [W]=WARN [ 338.900772][ T4846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 338.910872][ T4846] ================================================================== [ 338.938158][ T5061] loop5: detected capacity change from 0 to 512 [ 338.957921][ T5061] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 338.969499][ T5061] EXT4-fs (loop5): 1 truncate cleaned up [ 346.115379][ C0] EXT4-fs (loop1): error count since last fsck: 3 [ 346.121902][ C0] EXT4-fs (loop1): initial error at time 1741605714: ext4_ext_check_inode:524: inode 11 [ 346.131788][ C0] EXT4-fs (loop1): last error at time 1741605714: ext4_validate_block_bitmap:441