last executing test programs: 6m9.854184146s ago: executing program 32 (id=474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x240088c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000080)="95e55340c36bf9fd59c4f4d9a134e237e6f14edd338a7ae5a801ad63041a8811848b575cf5e1fe07bf5b131ec87cdaf8a2c8983dc3eb97", 0x37}, {&(0x7f0000000380)="521b654a0ec8be11c2f8731bda58db4b43e146553ed28bab721953e1fd1deadc76b984d07ea278e7a0bfa6081b26841dd7d48102c38ee9805277e8f7c5b6435b17f813938f1389203b4148b27c2c9a798b56a8414bc11fc26597da03f2f68ecb42ccfbc205526c0cfdf41a8c552f6a0f8f", 0x71}, {&(0x7f0000000540)="f970a28ee359c88de6d4f506878324a0f3305f9c7ae67e0c1606e355a75a3cf60ebd2be40363d510515052e41792bf85d57ea8a3040e463aaf7507124501285171b5f2015565816b33500aead4cbc99ce9af386fb819bb1d213d8331611adbb6f3a2fb81d5547f408716cb8cb836f5e9323c28edc8b15aea9d6e39dafd1ae37404c2afbade75eb6ad8e851babf58f104776823d82060ecaabb8c", 0x9a}, {&(0x7f0000000200)="1dd4c9543464ca16a300a0cc6a1b9e781f4a5602a08ef47d", 0x18}, {&(0x7f00000006c0)="0f914d15ac89e2c83abf5205ca385132d1efdbb3b087bb68acd468982c7143f41c49dba9b102d58e38a1ca96c1e0ac116ecf34bb79902b64920d0954ef6f8fd0c65fd3b89327556e7849e7c3194ab43a3fb22a330adddeeb73159084404a661717d0d35386b2a27f1adbef213e1bb203d9e9a5d243e3261050ca4e7cf3354c66a5c8a67437cf9e4986c807bda51f6124585a684812f607c2e8b3f898707e9d5ceea1a5c0683dd22f088c129a90948217848aa335426893a29d789bfadc4f58775d692d", 0xc3}, {&(0x7f00000007c0)="ccf8e7018f058141949d37e698bdf741bc04b7761ede740dac53c1e5b43e3a287edac51f5dfec2e2c5bae9e59170d3b0dd2a01e919b70ad90efa9e252f107819542d8de991ddd2b0ebc2a8b893fa79b1a36bd9bf4aaa61bf1a4f39904befd2790495604f9c01d6ef5dda57beba2dc4164de456f6b28d8f34fc8769491b789dc0e56a361eb97c6d42518dedb13c4a7217f8d410f1318782bf53d061c4d001078ce0a27a5c95e2fb28422cce5a2cea4c9a453293a4fc2a6287cd2e3074633029eb2471d1708cb413ce383f5c3494e8403392a49bf3d504b2bfabb753c26af864fd9100328b41dcf1390c8330e3", 0xec}, {&(0x7f0000000400)="8cdec56068288c800ea1981d67df4a8f7e5fa15fc95c9f5db15fa9c8b04d45dc2472a2768fa49413c77c44133ef9ddbe1f932eb9a9787443f578e0a3ccd0890a04c46889", 0x44}, {&(0x7f0000000280)="187dffe7f86c17f28aae67d0ccfc6aef0c8a1a9510", 0x15}, {&(0x7f00000008c0)="466d028669b6d65a8e2c9a8830e19390155c26a82e887a291f4d2af2388a4b0b47c37d7bfe8427bc61c39a18672ce8d34b99e0a118bac1c83090d5c8f185e89397e716e80ac51236dcb606611e3bc6e9d354e0339363f6fbc0d4f124c03d778089c3f48c76e3f5c1543f1c5e75a904deed21287ed35e3abd0b0e983bfe6530dcc1544fb67edbc47c24a29eff9e30ec271096a20bed83b7ee4e67faeb697ef574d543e80415c31082265851235403362fdee60cf9a14f8967a732127b82c339232eb68eaf6cad4550d4aa1705726f2485157a6df86b7e4d4ab375ecd49e7c870cd4c6e27ce2b141", 0xe7}], 0x9, &(0x7f0000000ac0)=[{0xe0, 0x10c, 0x9, "f59c9820aa9a9483729ba2595b1d50054868f6473e640277fe3eb417d41365ea87f9bb579c23cad16fc89f8bd2d260dd1e4c67ee37cca0ecd8edc98533c69e429b5b82ea9f277d84fef89cbb8428c3e18b3272cba23e8b73ee209560aceb14a4d19ca2e4e6c879ae1ab2363f9a77c0b9f2de0d58bbdb242ab50b2c49f98d5955dc12e4cbb1b21a741d30d7c8f53a067f7585ebcaf20795018519decd9da6bf86d5385832bf75308cb0da7a5e3f096ab3fc1f0b39ada2375baf3a7ffd00b6e56361aba60baa68841f7e81ee82c9"}, {0x100, 0xff, 0x80000000, "e5f4620e5227601ff962591f0de97439065765b9a71f09ec4082ff095f2d3f960874eb0a65c61507248d3322ff64824a2b75d0c5a6a294361d28182e4b32b2eb51e631d7babeafcea50754f89e0ecb274c83903b46b5dc792c8dcf1f1867dd1069a65eaa65001a8797c1abe3b0ac44b8a976d389f72e27402b719a689f0f75f015eb2669ebf990ddf6217e56bcd49bdea008dccdaf727e5aa8f631118050a990ad424b9cc11fee426d082ca6e6cd5cb50016740d760957d903cf468e4bca81a005032262d5dc1e39364e1b5ac8cf87866dac76b5b48eca4be86e35e9c5d74fc777c34db31f3cfe16f31acc0d9ec6f8"}, {0x68, 0x117, 0x6, "6dfb4bc7c7f9c98260dba4f2a3ecfdd85c85fb87b15fa920c1b5b75e09a63be47586fcbd0c87a4262d68fb5bb20d8da32fd166034a97be8c7c4a2ff36adcd817a6b48b7323b986815a54b7d1a044e3c085d04b41c6b476"}, {0x20, 0x88, 0x9f7, "a3803a4cd2980ba83f205ac77641450b"}, {0xc8, 0x102, 0x1e00, "8c35172f8d45e13db0bec523c3d84b1c35fd238111936e4643b9f141f8d43d60e35833d3da92b7dcef3299fa7716009254db52bf722f38151dfd9f3e3aa95c3ff847d2a6497e86493aabb9a4b35cee6e6e0ccfc97a3cc0884b25b76751ac02f05ae53cbea71cce5961c9585f66eecd55fd6274f101fdb75ec473d92fdc234cd6a731c97c04c471b496194a1e6e2a231ead663be42aa04b5516aa711872e9a34f8c9189367887ed5f5b77e4dede941735fb2c4abd"}, {0xa8, 0x114, 0x5, "dddc739e5efad13d897d001556cc877f23511c1093a13a74032378d0713de25dac7445ac85b69a6a8783670fc68924c06d14e9e884dd8692b18c402bb22b61dcc680a0724b830dce8380e0eba2e90659fca3b3f1b7615a0215a7e45352fb41ecf17a6867b00ed3f8c446000269bfe6002836fef1235b205e23f223a40e132705e61fabbbb96228198de37b1e1726d5fb553ff0a48b8b4fbf"}], 0x3d8}, 0x30044000) (async) sendmsg$kcm(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000080)="95e55340c36bf9fd59c4f4d9a134e237e6f14edd338a7ae5a801ad63041a8811848b575cf5e1fe07bf5b131ec87cdaf8a2c8983dc3eb97", 0x37}, {&(0x7f0000000380)="521b654a0ec8be11c2f8731bda58db4b43e146553ed28bab721953e1fd1deadc76b984d07ea278e7a0bfa6081b26841dd7d48102c38ee9805277e8f7c5b6435b17f813938f1389203b4148b27c2c9a798b56a8414bc11fc26597da03f2f68ecb42ccfbc205526c0cfdf41a8c552f6a0f8f", 0x71}, {&(0x7f0000000540)="f970a28ee359c88de6d4f506878324a0f3305f9c7ae67e0c1606e355a75a3cf60ebd2be40363d510515052e41792bf85d57ea8a3040e463aaf7507124501285171b5f2015565816b33500aead4cbc99ce9af386fb819bb1d213d8331611adbb6f3a2fb81d5547f408716cb8cb836f5e9323c28edc8b15aea9d6e39dafd1ae37404c2afbade75eb6ad8e851babf58f104776823d82060ecaabb8c", 0x9a}, {&(0x7f0000000200)="1dd4c9543464ca16a300a0cc6a1b9e781f4a5602a08ef47d", 0x18}, {&(0x7f00000006c0)="0f914d15ac89e2c83abf5205ca385132d1efdbb3b087bb68acd468982c7143f41c49dba9b102d58e38a1ca96c1e0ac116ecf34bb79902b64920d0954ef6f8fd0c65fd3b89327556e7849e7c3194ab43a3fb22a330adddeeb73159084404a661717d0d35386b2a27f1adbef213e1bb203d9e9a5d243e3261050ca4e7cf3354c66a5c8a67437cf9e4986c807bda51f6124585a684812f607c2e8b3f898707e9d5ceea1a5c0683dd22f088c129a90948217848aa335426893a29d789bfadc4f58775d692d", 0xc3}, {&(0x7f00000007c0)="ccf8e7018f058141949d37e698bdf741bc04b7761ede740dac53c1e5b43e3a287edac51f5dfec2e2c5bae9e59170d3b0dd2a01e919b70ad90efa9e252f107819542d8de991ddd2b0ebc2a8b893fa79b1a36bd9bf4aaa61bf1a4f39904befd2790495604f9c01d6ef5dda57beba2dc4164de456f6b28d8f34fc8769491b789dc0e56a361eb97c6d42518dedb13c4a7217f8d410f1318782bf53d061c4d001078ce0a27a5c95e2fb28422cce5a2cea4c9a453293a4fc2a6287cd2e3074633029eb2471d1708cb413ce383f5c3494e8403392a49bf3d504b2bfabb753c26af864fd9100328b41dcf1390c8330e3", 0xec}, {&(0x7f0000000400)="8cdec56068288c800ea1981d67df4a8f7e5fa15fc95c9f5db15fa9c8b04d45dc2472a2768fa49413c77c44133ef9ddbe1f932eb9a9787443f578e0a3ccd0890a04c46889", 0x44}, {&(0x7f0000000280)="187dffe7f86c17f28aae67d0ccfc6aef0c8a1a9510", 0x15}, {&(0x7f00000008c0)="466d028669b6d65a8e2c9a8830e19390155c26a82e887a291f4d2af2388a4b0b47c37d7bfe8427bc61c39a18672ce8d34b99e0a118bac1c83090d5c8f185e89397e716e80ac51236dcb606611e3bc6e9d354e0339363f6fbc0d4f124c03d778089c3f48c76e3f5c1543f1c5e75a904deed21287ed35e3abd0b0e983bfe6530dcc1544fb67edbc47c24a29eff9e30ec271096a20bed83b7ee4e67faeb697ef574d543e80415c31082265851235403362fdee60cf9a14f8967a732127b82c339232eb68eaf6cad4550d4aa1705726f2485157a6df86b7e4d4ab375ecd49e7c870cd4c6e27ce2b141", 0xe7}], 0x9, &(0x7f0000000ac0)=[{0xe0, 0x10c, 0x9, "f59c9820aa9a9483729ba2595b1d50054868f6473e640277fe3eb417d41365ea87f9bb579c23cad16fc89f8bd2d260dd1e4c67ee37cca0ecd8edc98533c69e429b5b82ea9f277d84fef89cbb8428c3e18b3272cba23e8b73ee209560aceb14a4d19ca2e4e6c879ae1ab2363f9a77c0b9f2de0d58bbdb242ab50b2c49f98d5955dc12e4cbb1b21a741d30d7c8f53a067f7585ebcaf20795018519decd9da6bf86d5385832bf75308cb0da7a5e3f096ab3fc1f0b39ada2375baf3a7ffd00b6e56361aba60baa68841f7e81ee82c9"}, {0x100, 0xff, 0x80000000, "e5f4620e5227601ff962591f0de97439065765b9a71f09ec4082ff095f2d3f960874eb0a65c61507248d3322ff64824a2b75d0c5a6a294361d28182e4b32b2eb51e631d7babeafcea50754f89e0ecb274c83903b46b5dc792c8dcf1f1867dd1069a65eaa65001a8797c1abe3b0ac44b8a976d389f72e27402b719a689f0f75f015eb2669ebf990ddf6217e56bcd49bdea008dccdaf727e5aa8f631118050a990ad424b9cc11fee426d082ca6e6cd5cb50016740d760957d903cf468e4bca81a005032262d5dc1e39364e1b5ac8cf87866dac76b5b48eca4be86e35e9c5d74fc777c34db31f3cfe16f31acc0d9ec6f8"}, {0x68, 0x117, 0x6, "6dfb4bc7c7f9c98260dba4f2a3ecfdd85c85fb87b15fa920c1b5b75e09a63be47586fcbd0c87a4262d68fb5bb20d8da32fd166034a97be8c7c4a2ff36adcd817a6b48b7323b986815a54b7d1a044e3c085d04b41c6b476"}, {0x20, 0x88, 0x9f7, "a3803a4cd2980ba83f205ac77641450b"}, {0xc8, 0x102, 0x1e00, "8c35172f8d45e13db0bec523c3d84b1c35fd238111936e4643b9f141f8d43d60e35833d3da92b7dcef3299fa7716009254db52bf722f38151dfd9f3e3aa95c3ff847d2a6497e86493aabb9a4b35cee6e6e0ccfc97a3cc0884b25b76751ac02f05ae53cbea71cce5961c9585f66eecd55fd6274f101fdb75ec473d92fdc234cd6a731c97c04c471b496194a1e6e2a231ead663be42aa04b5516aa711872e9a34f8c9189367887ed5f5b77e4dede941735fb2c4abd"}, {0xa8, 0x114, 0x5, "dddc739e5efad13d897d001556cc877f23511c1093a13a74032378d0713de25dac7445ac85b69a6a8783670fc68924c06d14e9e884dd8692b18c402bb22b61dcc680a0724b830dce8380e0eba2e90659fca3b3f1b7615a0215a7e45352fb41ecf17a6867b00ed3f8c446000269bfe6002836fef1235b205e23f223a40e132705e61fabbbb96228198de37b1e1726d5fb553ff0a48b8b4fbf"}], 0x3d8}, 0x30044000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f00000017c0)={r11, "0e7b325e69132379da3a5fc95f955a35"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000f00)={r11, 0x2, 0x0, [0x0, 0x3, 0x9, 0x3b, 0x8000000000000000], [0x2, 0x7, 0x9, 0x2, 0x0, 0x3, 0x7, 0x5, 0xa, 0x10000, 0x9, 0x0, 0x5, 0x5, 0x0, 0xb786, 0x66, 0x4, 0xc, 0x7fffffff, 0x4, 0x8, 0x8, 0x6, 0x8, 0x0, 0x6882, 0x101, 0x8, 0x9, 0x80000000, 0x81, 0x5, 0x8001, 0x2, 0x400, 0x9423, 0x3, 0x6, 0x0, 0x2, 0x7, 0x1ff, 0x7, 0x2, 0x6, 0x0, 0x4, 0x100, 0x3, 0x7, 0x8, 0x6a, 0x4, 0x4, 0x80, 0x2, 0x0, 0x6, 0x800000000000, 0x80000001, 0x7fffffffffffffff, 0x7ff, 0xcb, 0x6e, 0x95c, 0x7, 0xd1, 0x8, 0x4, 0x8, 0x61, 0xfffffffffffffff2, 0x4, 0x7, 0x8000000000000000, 0x8, 0x4, 0x5, 0x7a41, 0x5, 0x1, 0x1, 0x3, 0xf, 0x0, 0xc, 0xcea8, 0xd, 0x3, 0x7f, 0x2, 0x2, 0x6, 0x400009, 0x7, 0x6, 0x4, 0xc, 0x3d45142a, 0x9, 0x4, 0x4, 0x9, 0x101, 0x1, 0xd, 0x6, 0x7, 0x8, 0x3, 0xd4, 0x40, 0x5, 0x7f, 0x8, 0x1, 0x200, 0x85, 0xbe3, 0xf7ad]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001340)={r12, 0x8, 0x0, [0x10001, 0x10bd, 0x4, 0x5], [0x2, 0x80, 0x8, 0x25, 0xfffffffffffffff9, 0xa, 0xc0000000000000, 0x0, 0x3, 0x56, 0x9, 0x1, 0xd, 0xb, 0x1, 0x1, 0x0, 0x3, 0x9, 0x2, 0xdee, 0x9, 0x3, 0xe518, 0x401, 0x8, 0x800, 0x1, 0x8001, 0x1, 0xffffffffffffffff, 0x6, 0x401, 0xc40, 0x2, 0x4, 0x80000000, 0x8, 0x7, 0x5, 0x1, 0xffffffffffffffff, 0x1ff, 0x200, 0x10000, 0x4, 0x101, 0x3, 0x0, 0xfffffffffffffffe, 0x9, 0x9, 0x9, 0x5, 0x2, 0x1, 0x5, 0x9, 0x5, 0x9, 0x0, 0x7fff, 0x9, 0xb0, 0x80, 0x6, 0x10001, 0xf2, 0x2, 0x2, 0x5, 0x4bb4d937, 0x6aae, 0x3, 0x3, 0x6, 0xffffffffffffff81, 0x4, 0x2, 0x0, 0x5, 0x7f, 0x9, 0x4884, 0x8, 0x4473, 0x0, 0xb, 0x4, 0x4, 0x2, 0x1080000000000000, 0x6, 0x7, 0x2, 0x20, 0x9, 0xffffffffffffa80f, 0x507, 0x6, 0x1, 0x1000, 0x6, 0x2, 0x3, 0x1, 0x5, 0xffffffffffffffff, 0xfffffffffffffffb, 0x7, 0x9, 0x9, 0x4, 0x1, 0xbc3, 0x1000, 0x40, 0x5, 0x1c3, 0x8, 0xdd]}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r14}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r14}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m52.469892099s ago: executing program 33 (id=3949): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m52.271995962s ago: executing program 2 (id=3951): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = fsmount(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xab, &(0x7f0000000080)=""/171, 0x40f00, 0x20, '\x00', r0, 0x25, r1, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x3, 0x4000000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, r2, r3, r4, r5, r6, 0x1, r7], &(0x7f0000000540)=[{0x3, 0x1, 0xd, 0x4}], 0x10, 0x3}, 0x94) close(0xffffffffffffffff) syz_clone(0x6c0c7300, 0x0, 0x0, 0x0, 0x0, 0x0) 3m52.213150323s ago: executing program 2 (id=3952): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000", @ANYRES32], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_DUMPABLE(0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 3m52.108638285s ago: executing program 2 (id=3955): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff", 0x43}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(0xffffffffffffffff, 0x7277, 0x0, 0x28, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3m51.275708418s ago: executing program 2 (id=3963): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000380)={[{@quota}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@block_validity}, {@noquota}]}, 0x1, 0x45d, &(0x7f0000000540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) semget$private(0x0, 0x4000000009, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0, 0x60}) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESOCT, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r4, &(0x7f00000009c0), 0xd4ba0ff) removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="000b000000000093f5", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000003544b7b4d37af78c00000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r5}, 0x38) eventfd2(0x7, 0x800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r7, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) 3m51.133135821s ago: executing program 2 (id=3965): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000", @ANYRES32], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_DUMPABLE(0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 3m47.107735996s ago: executing program 2 (id=4032): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet(0x2, 0x3, 0x6) r4 = dup3(r2, r3, 0x0) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 3m47.073439067s ago: executing program 34 (id=4032): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet(0x2, 0x3, 0x6) r4 = dup3(r2, r3, 0x0) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 1m43.839201877s ago: executing program 3 (id=6051): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0xd80f, 0x10100}, &(0x7f0000000100), &(0x7f0000006100)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xac}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000000114", @ANYRES32], 0x10}, 0x1, 0x0, 0x0, 0x4040485}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="186d0000080000000000000004000400"], &(0x7f0000000440)='GPL\x00', 0x3ff, 0x5e, &(0x7f0000000480)=""/94, 0x40f00, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x5, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x4, 0x3, 0x4}], 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x31f}, 0x94) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f00000007c0), &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, r11, 0x680822d7e3b5f37d, 0xffffffff, 0x25dfdbfd}, 0x14}}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711223000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m43.567533922s ago: executing program 3 (id=6055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x48000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='page_pool_state_hold\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7e034e0db729f954, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008", @ANYBLOB="1800000000008000000000000000000018110000"], 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x11d, 0xf, 0x0, &(0x7f0000000240)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x20004000) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x84) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1m43.324927036s ago: executing program 3 (id=6060): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x65, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 1m42.335071473s ago: executing program 3 (id=6076): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x200a, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m42.312259743s ago: executing program 3 (id=6077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0xc, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 1m42.202129974s ago: executing program 7 (id=6082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="000000000000e1ffffffffffffff000000000000df69fc555692217385620f6ca89e45b2f57e6a960357d01ab75653deedc551f69c206aeebd3a0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000300), &(0x7f0000000880)='%pB \x00'}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="7119746b71a4740cd7959e2ddc4248d8a656730e68716c8d1e31d30f0ed25d3a907f9372777df98c6787ed302fb0a6ee1e", @ANYRES16, @ANYRES64=0x0, @ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 1m41.594661874s ago: executing program 3 (id=6091): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) 1m41.594296854s ago: executing program 35 (id=6091): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) 1m41.462386077s ago: executing program 7 (id=6093): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1, 0x100010, 0xffffffffffffffff, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_write\x00', r3}, 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r4, 0x1) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8) dup2(r6, r7) fcntl$setown(r6, 0x8, r5) tkill(r5, 0x13) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000006000000000000030000005800018044000400200001000a00000000000000000000000000000000007e8fdf03000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 1m41.342931519s ago: executing program 0 (id=6094): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='ext4_shutdown\x00', r1}, 0x18) r3 = syz_io_uring_setup(0x378a, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x8000000, 0x8000021e}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = epoll_create1(0x80000) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x20000000}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r7, &(0x7f0000000340), 0x0}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000040)={0x40000006}) syz_genetlink_get_family_id$ethtool(0x0, r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80041, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000480)='kfree\x00', r0}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000003c0)=0x7, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYRES8=r8], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101101) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x1}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x2, 0x0, 0x4, 0x10001}, {0x6, 0xee, 0x0, 0x10000a1}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x71}) 1m41.166207591s ago: executing program 0 (id=6095): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) io_setup(0x541e, &(0x7f0000001240)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 1m40.711590409s ago: executing program 0 (id=6096): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001a040000e5a63de48d387c1a00060000000001000b3b215ca546e100ae0000000000000000000000000015f3befcd2156afe8811f393f9c66f00"/70], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kvm_dirty_ring_reset\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) sync() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x10, 0x40, 0x4, 0x3ff, {{0x9, 0x4, 0x1, 0x8, 0x24, 0x66, 0x0, 0x6, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0xc, 0xcf, 0x0, 0x7, [0x5, 0x6]}, @ra={0x94, 0x4}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x2962, &(0x7f0000000380)={0x0, 0xa99f, 0x2, 0x0, 0x3d7}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x9001}, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', r2, 0x2f, 0x40, 0x0, 0x2, 0x1, @local, @private2, 0x10, 0x1, 0x8, 0x4}}) unlink(&(0x7f00000000c0)='./file0\x00') 1m40.519995112s ago: executing program 0 (id=6100): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0, 0x200a, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m40.436068653s ago: executing program 0 (id=6101): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000", @ANYRES32], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_DUMPABLE(0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1m39.974387701s ago: executing program 0 (id=6105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) (fail_nth: 10) 1m39.917404812s ago: executing program 36 (id=6105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) (fail_nth: 10) 1m39.887408712s ago: executing program 7 (id=6109): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = syz_io_uring_setup(0x9, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x200001, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m39.680466676s ago: executing program 7 (id=6110): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0, 0x200a, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m39.674778896s ago: executing program 7 (id=6112): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=@newtaction={0x14, 0x31, 0x829, 0x70bd2c, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 1m39.386700801s ago: executing program 7 (id=6117): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x65, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 1m39.386452191s ago: executing program 37 (id=6117): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x65, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 1m36.193667553s ago: executing program 5 (id=6139): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000700)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049dc) 1m35.967233426s ago: executing program 5 (id=6141): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x47, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x5ee0bd2b58286d3a) creat(&(0x7f0000000580)='./bus\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800400028008000180000000000900010073797a30"], 0xc8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) fsopen(&(0x7f0000000440)='nfs4\x00', 0x0) 1m35.905131138s ago: executing program 5 (id=6143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf7, 0x9, 0xe, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x8, 0x83, 0x3}}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newtclass={0x470, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x7, 0x2}, {0xd, 0x7}, {0xf}}, [@tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x1, 0x0, 0x8000, 0x0, 0xb, 0x3, 0x3, 0xa, 0x1b90, 0x14, 0x1, 0x7, 0xa, 0x65ae, 0x2, 0x80000001, 0xc, 0xfffffffd, 0x7, 0x26f, 0x80000000, 0x35, 0x6, 0x4, 0x3, 0x10001, 0x400, 0x24cf150f, 0x7, 0xe73, 0xffffd11f, 0x7, 0x9, 0xde, 0x7fffffff, 0x9, 0xfffffffa, 0x7, 0x4, 0x7, 0x8, 0x6, 0x9, 0x3, 0x1, 0x3, 0x401, 0xc, 0x9, 0x8001, 0x9, 0x3, 0x1, 0xe, 0x8, 0x4, 0x8e, 0x7ff, 0xfffffffd, 0x0, 0x1, 0xb, 0x2, 0x6, 0x2, 0x7f, 0x2, 0x7fffffff, 0x1ff, 0x81, 0x1, 0x9, 0x3, 0x3ff, 0x9, 0xfffffff8, 0x6, 0x1, 0x7fff, 0x1, 0xd, 0x8, 0x7, 0xf3, 0x4171, 0x7, 0x400, 0x231, 0x8, 0x2, 0xffff, 0x80000000, 0x7, 0x81, 0x2, 0x80, 0x9, 0x3, 0x9, 0xc, 0x0, 0x1, 0xd, 0x5e7, 0xffffffff, 0x1, 0x1ff, 0x8, 0x7fff, 0x1, 0xffff, 0x9, 0x7, 0x5, 0x4, 0x4, 0x6, 0x8, 0x80, 0x8, 0x8, 0x1, 0x48595ab8, 0xc346, 0x39, 0x1000, 0x6, 0x9, 0x9e, 0x3a, 0x7, 0x10, 0x45c, 0x2, 0x8, 0x7, 0x2fb, 0x1, 0x6, 0x9, 0x40, 0x4, 0x7ff, 0x3, 0x793f, 0x4, 0x1, 0x1, 0x3, 0x3, 0xaa, 0x5, 0xd, 0x800, 0x8, 0x1, 0x17b, 0xa6b, 0x3, 0x64b, 0x8, 0x4, 0x3, 0x2, 0x9, 0x9, 0x1, 0x8, 0x401, 0x0, 0x6, 0x4, 0x3, 0x9, 0x6, 0xd1, 0x7, 0x7, 0xddf, 0x5, 0x7, 0x20, 0x0, 0x8, 0x3, 0x1909, 0x4, 0x8, 0xc, 0xfffffff7, 0xff, 0xff, 0x10001, 0x2170, 0x1000000, 0x1, 0x1, 0x3, 0x6, 0x1, 0xa124, 0x7, 0x9, 0x18000, 0x3, 0xe0, 0xbf, 0x8000, 0xa17, 0xfc, 0x9, 0x8001, 0x0, 0xae, 0x55d, 0x80, 0x4, 0x935, 0x1, 0x2, 0xd6, 0x6, 0x5, 0x3, 0x5, 0x5, 0x4, 0x6db0, 0x2, 0x1, 0x9, 0x6, 0x5, 0x7, 0x6, 0xa, 0x8, 0x5a, 0xfffffffa, 0x7, 0x2, 0x7, 0x6, 0x2, 0xa, 0x200, 0x401, 0x1, 0x6, 0xfff, 0x0, 0x7328, 0x7, 0xfffffffa, 0x2]}]}}, @TCA_RATE={0x6, 0x5, {0xa, 0xb}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_ingress={0xc}]}, 0x470}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000000)=@hci={0x1f, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="3a53faf9a189e60418beaaf26f8f8221be085f85aab736f70c25293fa52594ef0a9d9d9ef153e51095645d20043eedb2d3e50f3cd0a8c990e24dcecf780741e0e0eb65ad76d236035728ae4df1ca13217228dcc59199947792b4474af4c326c6f0cc9665de463148ec56fd29d6281f7b1a0d68dbdbf469475d2afd762a258ba21366f4f5a0cd6226be326c9fb42a252dc8e99d46d2e17a", 0x97}], 0x1}, 0x20000000) clock_settime(0x3, 0x0) 1m35.826740329s ago: executing program 5 (id=6144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0, 0x200a, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m35.825090329s ago: executing program 5 (id=6145): add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x20000201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2, 0x0, 0x700}}], 0x2, 0x0) 1m35.72241203s ago: executing program 5 (id=6146): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r0, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffff8}, 0x18) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r4, 0x0, 0xfffffeea) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m35.72200823s ago: executing program 38 (id=6146): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r0, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffff8}, 0x18) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r4, 0x0, 0xfffffeea) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.985480967s ago: executing program 4 (id=7846): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000", @ANYBLOB="07e38f818d3ec08f66bb300b442ca04d3fffdc020ddacc981f22a569d5df3e2dfa3e0dc079c76bcb011325d2a71a725bb8ff9adb82c5101ae0499e118d275eb9d35cfb969a0c2f6d12e75894100ca9269519d1445b608849ba82f39f4301f9a34b781b295587ca298c322099e51469a73597b678581eb22a8be1aeca453fe64b77dc4920967451decb1d24d58d1976a0eb39071033a47df9d99ec3082266", @ANYBLOB="72b005a5817f6f9711cfe1071bdc4897276e0b1ed103a86a64f1f67aa87d3fb956a0279d525584aaf70a7df65c25095e73a37cea815f1520b68d22400529b86e5c009e8d6e8f4dc6018d981799f448d2545948e20e7d881800f3b471e032e2c1977e4e540f15a1ce5209432d45c607ec5801ad66ebfdf4fbcc0e4773e6650da37dd0b083e6c8f7179bce408576c6f5788cc36819d0e7707c7faa9359b6d9bdd67a49b398577b8cbb33b9123d0732007551f4ab29e9561e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='subflow_check_data_avail\x00'}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) syz_usb_connect(0x2, 0x64, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 1.780100471s ago: executing program 1 (id=7858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000254c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @generic={0x22, 0x2}]}}}}}}}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x2640, 0x7f, 0x8, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x5}, 0x50) 1.714628422s ago: executing program 1 (id=7860): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) gettid() 1.621247693s ago: executing program 1 (id=7862): r0 = socket(0x1d, 0x2, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20000c4, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000b80)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 1.556344865s ago: executing program 1 (id=7865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000050000000004000009000000010000", @ANYRES32, @ANYBLOB="000000000000e1ffffffffffffff000000000000df69fc555692217385620f6ca89e45b2f57e6a960357d01ab75653deedc551f69c206aeebd3a00"/72, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000300), &(0x7f0000000880)='%pB \x00'}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 1.375084827s ago: executing program 4 (id=7866): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) get_robust_list(0x0, &(0x7f0000000500)=&(0x7f00000004c0)={&(0x7f0000000300)={&(0x7f0000000080)}, 0x0, &(0x7f0000000400)}, &(0x7f0000000540)=0x18) 1.374679437s ago: executing program 4 (id=7867): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) unshare(0x22020600) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000"], 0x48) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r6}) signalfd(r0, &(0x7f0000000300)={[0x5]}, 0x8) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$kcm(0x2, 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) 1.027362533s ago: executing program 4 (id=7870): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x7}, &(0x7f00000001c0)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 795.363157ms ago: executing program 6 (id=7873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x20000000) 692.167139ms ago: executing program 1 (id=7874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f00000000c0), 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="d9", 0x1}], 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) brk(0x200000ffa000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x4d43390}], 0x1, 0x0) 674.823129ms ago: executing program 6 (id=7875): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) get_robust_list(0x0, &(0x7f0000000500)=&(0x7f00000004c0)={&(0x7f0000000300)={&(0x7f0000000080)}, 0x0, &(0x7f0000000400)}, &(0x7f0000000540)=0x18) 618.39816ms ago: executing program 4 (id=7876): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000", @ANYBLOB="07e38f818d3ec08f66bb300b442ca04d3fffdc020ddacc981f22a569d5df3e2dfa3e0dc079c76bcb011325d2a71a725bb8ff9adb82c5101ae0499e118d275eb9d35cfb969a0c2f6d12e75894100ca9269519d1445b608849ba82f39f4301f9a34b781b295587ca298c322099e51469a73597b678581eb22a8be1aeca453fe64b77dc4920967451decb1d24d58d1976a0eb39071033a47df9d99ec3082266", @ANYBLOB="72b005a5817f6f9711cfe1071bdc4897276e0b1ed103a86a64f1f67aa87d3fb956a0279d525584aaf70a7df65c25095e73a37cea815f1520b68d22400529b86e5c009e8d6e8f4dc6018d981799f448d2545948e20e7d881800f3b471e032e2c1977e4e540f15a1ce5209432d45c607ec5801ad66ebfdf4fbcc0e4773e6650da37dd0b083e6c8f7179bce408576c6f5788cc36819d0e7707c7faa9359b6d9bdd67a49b398577b8cbb33b9123d0732007551f4ab29e9561e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='subflow_check_data_avail\x00'}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) syz_usb_connect(0x2, 0x64, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 617.72202ms ago: executing program 6 (id=7877): add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x20000201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2, 0x0, 0x700}}], 0x2, 0x0) 576.415721ms ago: executing program 6 (id=7880): add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x20000201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x200, 0x8, 0x6, 0x8, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c841}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2, 0x0, 0x700}}], 0x2, 0x0) 537.708911ms ago: executing program 6 (id=7882): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x1}}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) 525.233571ms ago: executing program 1 (id=7883): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x212e, 0x100, 0x3, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000200)=[r4], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c0a201"], 0x24}}, 0x0) recvmmsg$unix(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000003ac0)=""/4123, 0x101b}, {&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f0000000800)=""/187, 0xbb}], 0x4}}], 0x1, 0x0, 0x0) write(r8, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmsg$unix(r8, &(0x7f0000000300)={&(0x7f0000000380), 0x6e, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000001680)=""/73, 0x49}], 0x4, &(0x7f0000001700)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x10000) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x80010, r1, 0x8000000) syz_io_uring_submit(r10, r7, &(0x7f0000000400)=@IORING_OP_WRITE_FIXED={0x5, 0x21, 0x0, @fd_index, 0x8, 0x3c, 0x2b9, 0x16, 0x1, {0x3}}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) io_uring_enter(r9, 0x47f6, 0x0, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x1e, 0x4, 0x0) r12 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) sendmsg$TIPC_CMD_SHOW_STATS(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000010) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r12, 0x3516, 0x0, 0x0, 0x0, 0x0) 458.413662ms ago: executing program 6 (id=7885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000050000000004000009000000010000", @ANYRES32, @ANYBLOB="000000000000e1ffffffffffffff000000000000df69fc555692217385620f6ca89e45b2f57e6a960357d01ab75653deedc551f69c206aeebd3a00"/72, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000300), &(0x7f0000000880)='%pB \x00'}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 306.553205ms ago: executing program 9 (id=7888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 278.982876ms ago: executing program 8 (id=7889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000) 256.947866ms ago: executing program 8 (id=7890): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x1135f77ed66a277c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a003f4006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}]}, 0x20000880) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000c80)=[@ip_retopts={{0x10}}], 0x10}, 0x0) statx(0xffffffffffffffff, 0x0, 0x801, 0x4, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) ioprio_set$uid(0x3, 0x0, 0x6000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r4, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb, 0x7}}, 0x36f0516f) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000480)={r3, r3}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@arp={@private=0xa010102, @multicast2, 0xffffff00, 0x0, 0xa, 0xd, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x7, 0x0, 0x0, 0x2, 0x1, 0xe99a, 'dvmrp0\x00', 'xfrm0\x00', {}, {}, 0x0, 0x74}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast1, @broadcast, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fe4, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) 197.062377ms ago: executing program 8 (id=7891): add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x20000201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2, 0x0, 0x700}}], 0x2, 0x0) 195.920007ms ago: executing program 8 (id=7892): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) get_robust_list(0x0, &(0x7f0000000500)=&(0x7f00000004c0)={&(0x7f0000000300)={&(0x7f0000000080)}, 0x0, &(0x7f0000000400)}, &(0x7f0000000540)=0x18) 158.304287ms ago: executing program 8 (id=7893): add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x20000201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x200, 0x8, 0x6, 0x8, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c841}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2, 0x0, 0x700}}], 0x2, 0x0) 157.886858ms ago: executing program 9 (id=7894): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) chroot(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 151.451677ms ago: executing program 8 (id=7895): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 146.691858ms ago: executing program 9 (id=7896): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x0) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18040000000000d9000000000000000018010000696c6c2500000000002020207b55fb652f9730ce0b8127facc67d871c79af8ff00000000bfa100000086c8b2dba8bea7d3aab5f2cbeaf1458f0000003c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@abs={0x1}, 0x4f) r6 = socket$netlink(0x10, 0x3, 0x4) listen(r5, 0x5) write(r6, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x8, 0xfe, 0x8}, {0x6, 0x0, 0x4, 0x8eb6}]}) write$ppp(r3, &(0x7f0000000940)="138f695ba5905137", 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 86.459708ms ago: executing program 9 (id=7897): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071004c000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = getpid() unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x20, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) 67.238719ms ago: executing program 4 (id=7898): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x1fffffffffffd]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xf7ffffffffff7ffc]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff13) timer_create(0x0, 0x0, &(0x7f0000000100)) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114e3, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r3, 0x3518, 0xaddf, 0x2, 0x0, 0x0) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0, {[0xfffffffffffffffe]}}, 0x0, 0x8, &(0x7f0000000200)) rmdir(&(0x7f0000000100)='./control\x00') syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x184862) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0x0) 40.746819ms ago: executing program 9 (id=7899): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r3 = dup3(r2, r2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8000, 0x8, 0x7ff, 0xaafc, {{0x31, 0x4, 0x3, 0x7, 0xc4, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x25}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x90, [@empty, @broadcast]}, @cipso={0x86, 0x54, 0x0, [{0x7, 0xa, "3baa659cbf1e076a"}, {0x2, 0x3, 'j'}, {0x0, 0x4, "8d0d"}, {0x7, 0xf, "dbccd80e33accd536049ac5945"}, {0x1, 0xa, "16389597196c697d"}, {0x9d12696e8ad504d6, 0x8, '_!d{D5'}, {0x6, 0x7, "a3023f987d"}, {0x5, 0xe, "59f0153c57b68ac89fedb11d"}, {0x5, 0x7, "59f74ecb06"}]}, @noop, @timestamp_prespec={0x44, 0xc, 0xb5, 0x3, 0xe, [{@broadcast, 0x65a2}]}, @timestamp={0x44, 0x14, 0xf0, 0x0, 0x5, [0x6, 0xffffff31, 0x2, 0x1]}, @noop, @ssrr={0x89, 0x2b, 0xce, [@private=0xa010102, @private=0xa010101, @empty, @local, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @private=0xa010100, @remote]}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x12c, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4004011}, 0x24000000) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x60044004) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r10, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f14889c2ad234ad6f0a71da72859c7c1e176134eff431253493482c723f8633d838bf127ad", 0x25}], 0x1}, 0x20000044) connect$packet(r0, &(0x7f00000004c0)={0x11, 0x7, r4, 0x1, 0x3, 0x6, @remote}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@mcast1, 0x12, r4}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 0s ago: executing program 9 (id=7900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) linkat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xd0) mmap(&(0x7f0000782000/0x4000)=nil, 0x4000, 0x2, 0x10, r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) kernel console output (not intermixed with test programs): 5 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.740586][T23127] RSP: 002b:00007f3680beefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 406.740610][T23127] RAX: ffffffffffffffda RBX: 00007f36827b5fa0 RCX: 00007f368258e9a9 [ 406.740631][T23127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040200400 [ 406.740691][T23127] RBP: 00007f3680bef090 R08: 0000000000000000 R09: 0000000000000000 [ 406.740707][T23127] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 406.740723][T23127] R13: 0000000000000000 R14: 00007f36827b5fa0 R15: 00007ffdb52110a8 [ 406.740746][T23127] [ 407.330145][T23133] loop9: detected capacity change from 0 to 128 [ 407.331042][T23133] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 407.357743][T23133] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 407.396529][ T9384] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 407.484073][T23147] loop9: detected capacity change from 0 to 512 [ 407.501742][T23147] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 407.505527][ T29] audit: type=1326 audit(407.887:20970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23148 comm="syz.4.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 407.518660][T23147] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 407.535262][ T29] audit: type=1326 audit(407.887:20971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23148 comm="syz.4.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 407.572747][ T29] audit: type=1326 audit(407.937:20972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23148 comm="syz.4.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 407.595878][ T29] audit: type=1326 audit(407.937:20973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23148 comm="syz.4.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 407.618701][T23147] EXT4-fs (loop9): mount failed [ 407.619394][ T29] audit: type=1326 audit(407.937:20974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23148 comm="syz.4.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 407.647348][ T29] audit: type=1326 audit(407.937:20975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23148 comm="syz.4.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 407.670637][ T29] audit: type=1326 audit(407.937:20976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23148 comm="syz.4.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 407.676634][T23158] loop8: detected capacity change from 0 to 128 [ 407.758479][T23158] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 407.776488][T23158] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 408.054574][T23175] loop1: detected capacity change from 0 to 2048 [ 408.078936][T23175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.118743][T20693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.534096][T23186] netlink: 'syz.6.7044': attribute type 27 has an invalid length. [ 408.570346][T23186] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.577684][T23186] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.635087][T23186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.646729][T23186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.700266][T23186] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.710136][T23186] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.719097][T23186] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.728096][T23186] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.757136][T23193] loop9: detected capacity change from 0 to 512 [ 408.790334][T23193] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 408.854338][T23193] EXT4-fs (loop9): mount failed [ 408.881263][T23187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.913857][T23187] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.968399][T23201] loop9: detected capacity change from 0 to 128 [ 408.974959][T23187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.998251][T23201] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 409.019064][T23204] loop1: detected capacity change from 0 to 512 [ 409.043616][T23204] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 409.059102][T23201] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 409.091409][T23204] EXT4-fs (loop1): 1 truncate cleaned up [ 409.121765][T23204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.365984][T20693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.477380][T23231] loop1: detected capacity change from 0 to 512 [ 409.491165][T23231] ext4: Unknown parameter 'noacl' [ 409.566484][T23237] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=23237 comm=syz.1.7065 [ 409.580260][T23237] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23237 comm=syz.1.7065 [ 409.954759][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 409.962514][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 409.990511][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 409.998118][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.005587][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.013017][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.020474][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.027928][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.035352][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.042924][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.050477][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.057956][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.065392][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.072828][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.080346][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.087896][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.309570][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.317049][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.324585][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.332028][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.339475][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.346880][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.354334][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.361758][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.369217][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.376675][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.384244][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.391715][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.399252][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.406751][ T3491] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 410.422822][ T3491] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 410.870077][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 410.870093][ T29] audit: type=1326 audit(411.257:21188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.6.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 410.906773][ T29] audit: type=1326 audit(411.287:21189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.6.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 410.930601][ T29] audit: type=1326 audit(411.287:21190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.6.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 410.953716][ T29] audit: type=1326 audit(411.287:21191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.6.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 410.977484][ T29] audit: type=1326 audit(411.287:21192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.6.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 411.001173][ T29] audit: type=1326 audit(411.287:21193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.6.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 411.024275][ T29] audit: type=1326 audit(411.287:21194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.6.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 411.048041][ T29] audit: type=1326 audit(411.287:21195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.6.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 411.071083][ T29] audit: type=1326 audit(411.287:21196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.6.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 411.094921][ T29] audit: type=1326 audit(411.287:21197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23287 comm="syz.6.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 411.168555][T23292] vhci_hcd: invalid port number 236 [ 411.261891][T23294] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 411.882382][T23339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=23339 comm=syz.4.7109 [ 411.895527][T23339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23339 comm=syz.4.7109 [ 412.062493][T23347] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7112'. [ 412.072518][T23347] netlink: 'syz.8.7112': attribute type 1 has an invalid length. [ 412.087014][T23347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.097124][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7112'. [ 412.114669][T23347] bond1 (unregistering): Released all slaves [ 412.190742][T23359] FAULT_INJECTION: forcing a failure. [ 412.190742][T23359] name failslab, interval 1, probability 0, space 0, times 0 [ 412.204179][T23359] CPU: 1 UID: 0 PID: 23359 Comm: syz.8.7117 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 412.204277][T23359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.204303][T23359] Call Trace: [ 412.204311][T23359] [ 412.204321][T23359] __dump_stack+0x1d/0x30 [ 412.204349][T23359] dump_stack_lvl+0xe8/0x140 [ 412.204371][T23359] dump_stack+0x15/0x1b [ 412.204389][T23359] should_fail_ex+0x265/0x280 [ 412.204423][T23359] should_failslab+0x8c/0xb0 [ 412.204445][T23359] __kvmalloc_node_noprof+0x123/0x4e0 [ 412.204484][T23359] ? xt_alloc_entry_offsets+0x48/0x50 [ 412.204599][T23359] ? refill_obj_stock+0x254/0x2e0 [ 412.204705][T23359] xt_alloc_entry_offsets+0x48/0x50 [ 412.204822][T23359] translate_table+0xa9/0xf90 [ 412.204861][T23359] ? __rcu_read_unlock+0x4f/0x70 [ 412.204888][T23359] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 412.204927][T23359] ? should_fail_ex+0xdb/0x280 [ 412.205084][T23359] ? _copy_from_user+0x89/0xb0 [ 412.205154][T23359] do_ipt_set_ctl+0x66f/0x820 [ 412.205192][T23359] ? _raw_spin_unlock_bh+0x36/0x40 [ 412.205220][T23359] ? tcp_release_cb+0xf1/0x370 [ 412.205271][T23359] nf_setsockopt+0x196/0x1b0 [ 412.205311][T23359] ip_setsockopt+0x102/0x110 [ 412.205347][T23359] ipv6_setsockopt+0xfb/0x130 [ 412.205380][T23359] tcp_setsockopt+0x95/0xb0 [ 412.205480][T23359] sock_common_setsockopt+0x69/0x80 [ 412.205525][T23359] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 412.205552][T23359] __sys_setsockopt+0x184/0x200 [ 412.205612][T23359] __x64_sys_setsockopt+0x64/0x80 [ 412.205723][T23359] x64_sys_call+0x2bd5/0x2fb0 [ 412.205748][T23359] do_syscall_64+0xd2/0x200 [ 412.205772][T23359] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 412.205808][T23359] ? clear_bhb_loop+0x40/0x90 [ 412.205833][T23359] ? clear_bhb_loop+0x40/0x90 [ 412.205882][T23359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.205908][T23359] RIP: 0033:0x7f64ee18e9a9 [ 412.205991][T23359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.206013][T23359] RSP: 002b:00007f64ec7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 412.206039][T23359] RAX: ffffffffffffffda RBX: 00007f64ee3b5fa0 RCX: 00007f64ee18e9a9 [ 412.206056][T23359] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 412.206123][T23359] RBP: 00007f64ec7f7090 R08: 0000000000000478 R09: 0000000000000000 [ 412.206135][T23359] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 412.206149][T23359] R13: 0000000000000000 R14: 00007f64ee3b5fa0 R15: 00007ffd31c2ae78 [ 412.206204][T23359] [ 412.480775][T23361] loop8: detected capacity change from 0 to 128 [ 412.487760][T23361] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 412.500013][T23361] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 412.530313][ T9382] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 412.575005][T23367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=23367 comm=syz.8.7120 [ 412.588751][T23367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23367 comm=syz.8.7120 [ 412.755397][T23386] FAULT_INJECTION: forcing a failure. [ 412.755397][T23386] name failslab, interval 1, probability 0, space 0, times 0 [ 412.755453][T23389] loop8: detected capacity change from 0 to 512 [ 412.768258][T23386] CPU: 0 UID: 0 PID: 23386 Comm: syz.6.7129 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 412.768349][T23386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.768367][T23386] Call Trace: [ 412.768379][T23386] [ 412.768390][T23386] __dump_stack+0x1d/0x30 [ 412.768478][T23386] dump_stack_lvl+0xe8/0x140 [ 412.768521][T23386] dump_stack+0x15/0x1b [ 412.768543][T23386] should_fail_ex+0x265/0x280 [ 412.768587][T23386] should_failslab+0x8c/0xb0 [ 412.768618][T23386] __kmalloc_noprof+0xa5/0x3e0 [ 412.768691][T23386] ? iter_file_splice_write+0xfe/0x970 [ 412.768780][T23386] iter_file_splice_write+0xfe/0x970 [ 412.768819][T23386] ? atime_needs_update+0x3be/0x3e0 [ 412.768858][T23386] ? shmem_file_splice_read+0x5c2/0x600 [ 412.768949][T23386] ? __pfx_iter_file_splice_write+0x10/0x10 [ 412.769006][T23386] direct_splice_actor+0x156/0x2a0 [ 412.769113][T23386] ? shmem_file_open+0x1/0x40 [ 412.769140][T23386] splice_direct_to_actor+0x312/0x680 [ 412.769182][T23386] ? __pfx_direct_splice_actor+0x10/0x10 [ 412.769228][T23386] do_splice_direct+0xda/0x150 [ 412.769276][T23386] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 412.769370][T23386] do_sendfile+0x380/0x650 [ 412.769412][T23386] __x64_sys_sendfile64+0x105/0x150 [ 412.769444][T23386] x64_sys_call+0xb39/0x2fb0 [ 412.769475][T23386] do_syscall_64+0xd2/0x200 [ 412.769511][T23386] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 412.769554][T23386] ? clear_bhb_loop+0x40/0x90 [ 412.769636][T23386] ? clear_bhb_loop+0x40/0x90 [ 412.769669][T23386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.769781][T23386] RIP: 0033:0x7f131b67e9a9 [ 412.769802][T23386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.769828][T23386] RSP: 002b:00007f1319ce7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 412.769855][T23386] RAX: ffffffffffffffda RBX: 00007f131b8a5fa0 RCX: 00007f131b67e9a9 [ 412.769924][T23386] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 412.769942][T23386] RBP: 00007f1319ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 412.769959][T23386] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 412.769977][T23386] R13: 0000000000000000 R14: 00007f131b8a5fa0 R15: 00007ffcf7568078 [ 412.770005][T23386] [ 413.014247][T23389] ext4: Unknown parameter 'noacl' [ 413.154623][T23417] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7141'. [ 413.435047][T23421] loop8: detected capacity change from 0 to 512 [ 413.452142][T23421] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 413.452370][T23421] EXT4-fs (loop8): mount failed [ 413.659447][T23438] vhci_hcd: invalid port number 236 [ 413.753938][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.761608][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.769258][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.776664][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.784287][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.791780][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.799202][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.806691][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.814188][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.821637][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.829063][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.836514][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.843933][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.851411][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.858835][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.866306][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.874183][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.881640][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.889110][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.896675][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.904084][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.911522][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.918959][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.926360][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.933974][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.941413][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.948905][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.956461][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.963977][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.971481][ T3491] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 413.980023][ T3491] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 414.011399][T23454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=23454 comm=syz.4.7156 [ 414.024444][T23454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23454 comm=syz.4.7156 [ 414.601397][T23478] loop9: detected capacity change from 0 to 512 [ 414.608479][T23478] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 414.620615][T23478] EXT4-fs (loop9): 1 truncate cleaned up [ 414.626793][T23478] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.653083][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.788462][T23487] loop9: detected capacity change from 0 to 512 [ 414.799306][T23487] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 414.814703][T23487] EXT4-fs (loop9): mount failed [ 414.841005][T23491] loop9: detected capacity change from 0 to 512 [ 414.848352][T23491] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 414.860717][T23491] EXT4-fs (loop9): 1 truncate cleaned up [ 414.867088][T23491] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.965176][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.036042][T23511] FAULT_INJECTION: forcing a failure. [ 415.036042][T23511] name failslab, interval 1, probability 0, space 0, times 0 [ 415.048838][T23511] CPU: 0 UID: 0 PID: 23511 Comm: syz.1.7178 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 415.048866][T23511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.048881][T23511] Call Trace: [ 415.048889][T23511] [ 415.048899][T23511] __dump_stack+0x1d/0x30 [ 415.048968][T23511] dump_stack_lvl+0xe8/0x140 [ 415.048986][T23511] dump_stack+0x15/0x1b [ 415.049002][T23511] should_fail_ex+0x265/0x280 [ 415.049120][T23511] should_failslab+0x8c/0xb0 [ 415.049144][T23511] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 415.049172][T23511] ? cond_bools_copy+0x30/0x80 [ 415.049203][T23511] ? __pfx_cond_bools_destroy+0x10/0x10 [ 415.049288][T23511] kmemdup_noprof+0x2b/0x70 [ 415.049314][T23511] ? __pfx_cond_bools_destroy+0x10/0x10 [ 415.049412][T23511] cond_bools_copy+0x30/0x80 [ 415.049473][T23511] ? __pfx_cond_bools_destroy+0x10/0x10 [ 415.049522][T23511] hashtab_duplicate+0x11b/0x360 [ 415.049548][T23511] ? __pfx_cond_bools_copy+0x10/0x10 [ 415.049660][T23511] cond_policydb_dup+0xd2/0x4e0 [ 415.049702][T23511] security_set_bools+0xa0/0x340 [ 415.049799][T23511] sel_commit_bools_write+0x1ea/0x270 [ 415.049833][T23511] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 415.049871][T23511] vfs_write+0x269/0x8e0 [ 415.049963][T23511] ? __rcu_read_unlock+0x4f/0x70 [ 415.049985][T23511] ? __fget_files+0x184/0x1c0 [ 415.050006][T23511] __x64_sys_pwrite64+0xfd/0x150 [ 415.050126][T23511] x64_sys_call+0xe45/0x2fb0 [ 415.050147][T23511] do_syscall_64+0xd2/0x200 [ 415.050187][T23511] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 415.050215][T23511] ? clear_bhb_loop+0x40/0x90 [ 415.050236][T23511] ? clear_bhb_loop+0x40/0x90 [ 415.050268][T23511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.050291][T23511] RIP: 0033:0x7ff95540e9a9 [ 415.050310][T23511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.050340][T23511] RSP: 002b:00007ff953a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 415.050364][T23511] RAX: ffffffffffffffda RBX: 00007ff955635fa0 RCX: 00007ff95540e9a9 [ 415.050425][T23511] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 415.050439][T23511] RBP: 00007ff953a77090 R08: 0000000000000000 R09: 0000000000000000 [ 415.050453][T23511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.050465][T23511] R13: 0000000000000000 R14: 00007ff955635fa0 R15: 00007ffc23b04718 [ 415.050485][T23511] [ 415.422732][T23524] loop8: detected capacity change from 0 to 4096 [ 415.443110][T23524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.899138][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.926395][T23547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=23547 comm=syz.8.7190 [ 415.939993][T23547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23547 comm=syz.8.7190 [ 416.174837][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 416.174856][ T29] audit: type=1326 audit(416.557:21557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.1.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95540e9a9 code=0x7ffc0000 [ 416.216937][ T29] audit: type=1326 audit(416.557:21558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.1.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95540e9a9 code=0x7ffc0000 [ 416.304907][ T29] audit: type=1400 audit(416.687:21559): avc: denied { ioctl } for pid=23558 comm="syz.4.7197" path="socket:[81553]" dev="sockfs" ino=81553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 416.345806][T23561] loop1: detected capacity change from 0 to 1024 [ 416.371206][T23561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.480187][T20693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.550709][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.558432][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.565938][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.574065][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.581640][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.589062][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.596517][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.604730][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.612196][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.619919][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.627389][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.635826][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.643447][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.650978][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.659061][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.666466][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.674034][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.681477][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.689649][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.697055][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.704496][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.711952][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.720005][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.727499][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.734944][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.742418][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.750482][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.757912][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.765514][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.772942][ T3409] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 416.781595][ T3409] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz1 [ 416.816822][ T29] audit: type=1326 audit(417.197:21560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.1.7204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95540e9a9 code=0x7ffc0000 [ 416.840758][ T29] audit: type=1326 audit(417.197:21561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.1.7204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff95540e9a9 code=0x7ffc0000 [ 416.863911][ T29] audit: type=1326 audit(417.197:21562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.1.7204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95540e9a9 code=0x7ffc0000 [ 416.922091][ T29] audit: type=1326 audit(417.197:21563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.1.7204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff95540e9a9 code=0x7ffc0000 [ 416.945537][ T29] audit: type=1326 audit(417.197:21564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.1.7204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95540e9a9 code=0x7ffc0000 [ 416.969033][ T29] audit: type=1326 audit(417.197:21565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.1.7204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff95540e9a9 code=0x7ffc0000 [ 416.992198][ T29] audit: type=1326 audit(417.197:21566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.1.7204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95540e9a9 code=0x7ffc0000 [ 417.032530][T23586] xt_TPROXY: Can be used only with -p tcp or -p udp [ 417.048837][T23586] loop8: detected capacity change from 0 to 512 [ 417.055563][T23586] EXT4-fs: dax option not supported [ 417.062457][T23586] netlink: 'syz.8.7207': attribute type 1 has an invalid length. [ 417.070351][T23586] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7207'. [ 417.098714][T23583] Falling back ldisc for ttyS3. [ 417.153434][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7209'. [ 417.166955][T23592] IPVS: Error joining to the multicast group [ 417.192321][T23596] loop1: detected capacity change from 0 to 2048 [ 417.199078][T23592] !: renamed from dummy0 (while UP) [ 417.212788][T23596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.234810][T23602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7213'. [ 417.245791][T20693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.296784][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.304450][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.313483][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.321149][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.328797][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.336281][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.344659][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.352164][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.355786][T23612] netlink: 'syz.4.7218': attribute type 1 has an invalid length. [ 417.359681][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.374938][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.383186][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.390655][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.398149][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.405606][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.413598][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.421109][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.429111][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.436571][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.444591][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.452067][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.459772][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.467299][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.475290][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.482825][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.490450][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.498492][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.505906][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.513349][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.520811][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.528895][ T3409] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 417.536820][ T3409] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz1 [ 417.754192][T23630] loop9: detected capacity change from 0 to 2048 [ 417.781591][T23630] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.812843][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.820640][T23638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7229'. [ 417.853199][T23642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=23642 comm=syz.4.7230 [ 417.866246][T23642] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23642 comm=syz.4.7230 [ 417.944436][T23651] loop9: detected capacity change from 0 to 1024 [ 417.960876][T23651] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.075088][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.179500][T23672] loop8: detected capacity change from 0 to 1024 [ 418.203403][T23672] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.237994][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.264431][T23682] loop8: detected capacity change from 0 to 164 [ 418.279839][T23682] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 418.435531][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.443085][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.451510][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.459390][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.466823][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.474286][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.481759][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.489371][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.496986][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.504477][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.511998][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.519456][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.526982][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.534441][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.542378][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.550133][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.560039][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.567728][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.575201][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.582794][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.590311][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.597763][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.605176][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.612666][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.620273][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.627711][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.635116][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.642546][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.649979][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.657452][T20651] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 418.665352][T20651] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz1 [ 418.943808][T23718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7262'. [ 418.971310][T23720] loop9: detected capacity change from 0 to 1024 [ 418.992230][T23720] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.104854][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.168150][T23741] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 419.202747][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7274'. [ 419.249938][T23751] loop9: detected capacity change from 0 to 1024 [ 419.263625][T23751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.294770][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.313523][T23756] loop8: detected capacity change from 0 to 1024 [ 419.331158][T23756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.375224][T23763] FAULT_INJECTION: forcing a failure. [ 419.375224][T23763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.389188][T23763] CPU: 1 UID: 0 PID: 23763 Comm: syz.9.7278 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 419.389221][T23763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.389234][T23763] Call Trace: [ 419.389241][T23763] [ 419.389249][T23763] __dump_stack+0x1d/0x30 [ 419.389270][T23763] dump_stack_lvl+0xe8/0x140 [ 419.389332][T23763] dump_stack+0x15/0x1b [ 419.389353][T23763] should_fail_ex+0x265/0x280 [ 419.389414][T23763] should_fail+0xb/0x20 [ 419.389447][T23763] should_fail_usercopy+0x1a/0x20 [ 419.389487][T23763] _copy_from_user+0x1c/0xb0 [ 419.389512][T23763] ___sys_sendmsg+0xc1/0x1d0 [ 419.389692][T23763] __sys_sendmmsg+0x178/0x300 [ 419.389731][T23763] __x64_sys_sendmmsg+0x57/0x70 [ 419.389756][T23763] x64_sys_call+0x2f2f/0x2fb0 [ 419.389800][T23763] do_syscall_64+0xd2/0x200 [ 419.389823][T23763] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 419.389887][T23763] ? clear_bhb_loop+0x40/0x90 [ 419.389914][T23763] ? clear_bhb_loop+0x40/0x90 [ 419.389940][T23763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.389979][T23763] RIP: 0033:0x7f368258e9a9 [ 419.389994][T23763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.390011][T23763] RSP: 002b:00007f3680bce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 419.390030][T23763] RAX: ffffffffffffffda RBX: 00007f36827b6080 RCX: 00007f368258e9a9 [ 419.390045][T23763] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000007 [ 419.390070][T23763] RBP: 00007f3680bce090 R08: 0000000000000000 R09: 0000000000000000 [ 419.390087][T23763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.390162][T23763] R13: 0000000000000000 R14: 00007f36827b6080 R15: 00007ffdb52110a8 [ 419.390208][T23763] [ 419.655657][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.663932][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.671648][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.679137][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.686557][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.694970][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.702513][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.710081][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.718315][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.725845][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.733352][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.740858][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.749027][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.756491][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.763950][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.771418][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.779763][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.781532][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.787285][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.787325][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.787352][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.787378][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.826393][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7290'. [ 419.827363][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.844626][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.852080][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.859641][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.867109][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.875153][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.882642][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.890129][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.898270][ T3409] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 419.906654][ T3409] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz1 [ 419.921956][T23784] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7287'. [ 419.988015][T23791] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7292'. [ 420.208070][T23803] loop8: detected capacity change from 0 to 512 [ 420.232045][T23803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.304754][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.380910][T23813] loop8: detected capacity change from 0 to 128 [ 420.391317][T23813] FAT-fs (loop8): Directory bread(block 32) failed [ 420.398333][T23813] FAT-fs (loop8): Directory bread(block 33) failed [ 420.404920][T23813] FAT-fs (loop8): Directory bread(block 34) failed [ 420.412246][T23813] FAT-fs (loop8): Directory bread(block 35) failed [ 420.418853][T23813] FAT-fs (loop8): Directory bread(block 36) failed [ 420.425600][T23813] FAT-fs (loop8): Directory bread(block 37) failed [ 420.432225][T23813] FAT-fs (loop8): Directory bread(block 38) failed [ 420.439605][T23813] FAT-fs (loop8): Directory bread(block 39) failed [ 420.446224][T23813] FAT-fs (loop8): Directory bread(block 40) failed [ 420.452920][T23813] FAT-fs (loop8): Directory bread(block 41) failed [ 420.507966][T23817] Falling back ldisc for ttyS3. [ 420.818985][T23835] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 421.073026][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7318'. [ 421.105300][T23851] loop9: detected capacity change from 0 to 2048 [ 421.127167][T23851] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.194707][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.542406][T23890] loop9: detected capacity change from 0 to 512 [ 421.549675][T23890] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 421.564015][T23890] EXT4-fs (loop9): 1 truncate cleaned up [ 421.573564][T23890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.663137][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.749707][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 421.749727][ T29] audit: type=1326 audit(422.137:21815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.9.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 421.779919][ T29] audit: type=1326 audit(422.137:21816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.9.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 421.804558][ T29] audit: type=1326 audit(422.137:21817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.9.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 421.827747][ T29] audit: type=1326 audit(422.137:21818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.9.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 421.836589][T23897] loop8: detected capacity change from 0 to 1024 [ 421.850815][ T29] audit: type=1326 audit(422.137:21819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.9.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 421.850928][ T29] audit: type=1326 audit(422.137:21820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.9.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 421.850961][ T29] audit: type=1326 audit(422.137:21821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.9.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 421.851074][ T29] audit: type=1326 audit(422.137:21822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.9.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 421.851108][ T29] audit: type=1326 audit(422.137:21823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.9.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 421.851167][ T29] audit: type=1326 audit(422.137:21824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.9.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 422.011343][T23897] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.133915][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.411672][T23933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23933 comm=syz.4.7344 [ 422.463878][T23941] netlink: 'syz.1.7349': attribute type 3 has an invalid length. [ 422.760013][T23955] loop9: detected capacity change from 0 to 512 [ 422.766777][T23955] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.781936][T23955] journal_path: Non-blockdev passed as './bus' [ 422.788290][T23955] EXT4-fs: error: could not find journal device path [ 422.803311][T23955] __nla_validate_parse: 2 callbacks suppressed [ 422.803332][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7353'. [ 422.818606][T23955] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7353'. [ 422.827610][T23955] netlink: 'syz.9.7353': attribute type 5 has an invalid length. [ 422.827777][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7353'. [ 422.838563][T23955] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.845094][T23956] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7353'. [ 422.853125][T23955] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.862016][T23956] netlink: 'syz.9.7353': attribute type 5 has an invalid length. [ 422.870757][T23955] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.870794][T23955] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.995510][T23966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7356'. [ 423.166206][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.174346][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.192463][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.200916][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.208471][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.215900][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.223407][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.231631][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.239084][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.246817][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.254251][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.262421][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.270048][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.277571][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.285012][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.293242][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.301514][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.309004][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.316494][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.324717][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.332197][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.339714][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.347205][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.355396][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.362976][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.370556][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.378729][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.386304][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.393855][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.401369][ T3409] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 423.415708][ T3409] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz0] on syz1 [ 423.426889][T23984] loop8: detected capacity change from 0 to 2048 [ 423.464735][T23984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.489843][T23992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7367'. [ 423.531677][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.586530][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.594188][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.609121][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.616605][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.624100][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.631554][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.639052][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.646491][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.654008][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.662044][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.669761][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.677449][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.685269][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.693063][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.698990][T24012] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7373'. [ 423.700573][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.716817][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.735508][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.743302][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.750901][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.758409][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.766033][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.773656][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.781148][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.788602][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.796058][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.803769][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.811269][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.818851][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.826270][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.833805][ T3491] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 423.845189][ T3491] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz1 [ 424.168072][T24037] Falling back ldisc for ttyS3. [ 424.257989][T24043] Falling back ldisc for ttyS3. [ 424.894171][T24075] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 424.909133][T24073] Falling back ldisc for ttyS3. [ 425.065268][T24091] SELinux: failed to load policy [ 425.455446][T24135] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7424'. [ 425.470255][T24135] netlink: 10 bytes leftover after parsing attributes in process `syz.6.7424'. [ 425.587180][T24149] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7431'. [ 425.778118][T24160] Falling back ldisc for ttyS3. [ 426.831947][T24203] netlink: 'syz.1.7453': attribute type 9 has an invalid length. [ 426.843045][T24203] macvlan2: entered promiscuous mode [ 426.848615][T24203] team0: entered promiscuous mode [ 426.854513][T24203] macvlan2: entered allmulticast mode [ 426.860128][T24203] team0: entered allmulticast mode [ 426.867051][T24203] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 426.927935][T24207] Falling back ldisc for ttyS3. [ 427.245509][T24216] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 427.254100][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 427.254125][ T29] audit: type=1326 audit(427.637:22107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24215 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 427.294701][ T29] audit: type=1326 audit(427.637:22108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24215 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 427.318001][ T29] audit: type=1326 audit(427.637:22109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24215 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 427.341128][ T29] audit: type=1326 audit(427.637:22110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24215 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 427.364216][ T29] audit: type=1326 audit(427.637:22111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24215 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 427.387318][ T29] audit: type=1326 audit(427.637:22112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24215 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 427.410428][ T29] audit: type=1326 audit(427.637:22113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24215 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 427.433573][ T29] audit: type=1326 audit(427.647:22114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24215 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 427.456630][ T29] audit: type=1326 audit(427.647:22115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24215 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 427.479863][ T29] audit: type=1326 audit(427.647:22116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24215 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755cfe9a9 code=0x7ffc0000 [ 427.515981][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.523676][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.532488][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.540666][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.548151][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.555577][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.563127][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.571290][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.575023][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.578758][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.578808][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.578833][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.578859][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.578886][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.578913][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.578976][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.579005][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.584738][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.586889][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.594145][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.609042][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.609457][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.616854][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.624226][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.624263][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.631668][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.631698][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.631858][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.631885][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.631912][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.631936][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.631961][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.631985][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.632072][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.632112][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.632140][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.632180][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.636972][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.639681][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.639707][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.639728][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.639749][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.639792][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.647188][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.654578][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.654610][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.662042][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.662072][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.662111][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.662232][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.662259][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.662285][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.662312][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.662339][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.662382][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.662408][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.662433][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.662458][T20651] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 427.717124][T24231] loop9: detected capacity change from 0 to 1024 [ 427.723781][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.797862][T20651] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz0] on syz1 [ 427.798722][ T3394] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 427.991753][ T3394] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz1 [ 427.991952][T24231] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.127368][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.790827][T24265] __nla_validate_parse: 4 callbacks suppressed [ 428.790842][T24265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7476'. [ 428.814638][T24265] hsr_slave_0 (unregistering): left promiscuous mode [ 428.846339][T24273] FAULT_INJECTION: forcing a failure. [ 428.846339][T24273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.859848][T24273] CPU: 1 UID: 0 PID: 24273 Comm: syz.1.7479 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 428.859875][T24273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.859887][T24273] Call Trace: [ 428.859893][T24273] [ 428.859959][T24273] __dump_stack+0x1d/0x30 [ 428.859986][T24273] dump_stack_lvl+0xe8/0x140 [ 428.860095][T24273] dump_stack+0x15/0x1b [ 428.860116][T24273] should_fail_ex+0x265/0x280 [ 428.860151][T24273] should_fail+0xb/0x20 [ 428.860228][T24273] should_fail_usercopy+0x1a/0x20 [ 428.860274][T24273] _copy_to_user+0x20/0xa0 [ 428.860295][T24273] simple_read_from_buffer+0xb5/0x130 [ 428.860384][T24273] proc_fail_nth_read+0x100/0x140 [ 428.860532][T24273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.860572][T24273] vfs_read+0x19d/0x6f0 [ 428.860606][T24273] ? __rcu_read_unlock+0x4f/0x70 [ 428.860631][T24273] ? __rcu_read_unlock+0x4f/0x70 [ 428.860665][T24273] ? __fget_files+0x184/0x1c0 [ 428.860702][T24273] ksys_read+0xda/0x1a0 [ 428.860741][T24273] __x64_sys_read+0x40/0x50 [ 428.860771][T24273] x64_sys_call+0x2d77/0x2fb0 [ 428.860892][T24273] do_syscall_64+0xd2/0x200 [ 428.860914][T24273] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 428.860944][T24273] ? clear_bhb_loop+0x40/0x90 [ 428.861058][T24273] ? clear_bhb_loop+0x40/0x90 [ 428.861117][T24273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.861144][T24273] RIP: 0033:0x7ff95540d3bc [ 428.861163][T24273] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 428.861181][T24273] RSP: 002b:00007ff953a77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.861248][T24273] RAX: ffffffffffffffda RBX: 00007ff955635fa0 RCX: 00007ff95540d3bc [ 428.861261][T24273] RDX: 000000000000000f RSI: 00007ff953a770a0 RDI: 0000000000000006 [ 428.861273][T24273] RBP: 00007ff953a77090 R08: 0000000000000000 R09: 0000000000000000 [ 428.861284][T24273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 428.861297][T24273] R13: 0000000000000000 R14: 00007ff955635fa0 R15: 00007ffc23b04718 [ 428.861335][T24273] [ 429.615881][T24318] FAULT_INJECTION: forcing a failure. [ 429.615881][T24318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.630034][T24318] CPU: 1 UID: 0 PID: 24318 Comm: syz.9.7497 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 429.630068][T24318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.630082][T24318] Call Trace: [ 429.630088][T24318] [ 429.630095][T24318] __dump_stack+0x1d/0x30 [ 429.630120][T24318] dump_stack_lvl+0xe8/0x140 [ 429.630145][T24318] dump_stack+0x15/0x1b [ 429.630169][T24318] should_fail_ex+0x265/0x280 [ 429.630201][T24318] should_fail+0xb/0x20 [ 429.630227][T24318] should_fail_usercopy+0x1a/0x20 [ 429.630262][T24318] _copy_from_iter+0xcf/0xe40 [ 429.630313][T24318] ? __build_skb_around+0x1a0/0x200 [ 429.630351][T24318] ? __alloc_skb+0x223/0x320 [ 429.630379][T24318] pfkey_sendmsg+0x126/0x900 [ 429.630474][T24318] ? avc_has_perm+0xd3/0x150 [ 429.630502][T24318] ? selinux_socket_sendmsg+0x175/0x1b0 [ 429.630597][T24318] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 429.630703][T24318] __sock_sendmsg+0x145/0x180 [ 429.630730][T24318] ____sys_sendmsg+0x31e/0x4e0 [ 429.630776][T24318] ___sys_sendmsg+0x17b/0x1d0 [ 429.630908][T24318] __x64_sys_sendmsg+0xd4/0x160 [ 429.630967][T24318] x64_sys_call+0x2999/0x2fb0 [ 429.630993][T24318] do_syscall_64+0xd2/0x200 [ 429.631011][T24318] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 429.631088][T24318] ? clear_bhb_loop+0x40/0x90 [ 429.631109][T24318] ? clear_bhb_loop+0x40/0x90 [ 429.631136][T24318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.631229][T24318] RIP: 0033:0x7f368258e9a9 [ 429.631244][T24318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.631337][T24318] RSP: 002b:00007f3680bef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.631361][T24318] RAX: ffffffffffffffda RBX: 00007f36827b5fa0 RCX: 00007f368258e9a9 [ 429.631377][T24318] RDX: 0000000000040080 RSI: 00002000000007c0 RDI: 0000000000000006 [ 429.631471][T24318] RBP: 00007f3680bef090 R08: 0000000000000000 R09: 0000000000000000 [ 429.631508][T24318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.631524][T24318] R13: 0000000000000000 R14: 00007f36827b5fa0 R15: 00007ffdb52110a8 [ 429.631545][T24318] [ 429.926948][T24322] loop8: detected capacity change from 0 to 512 [ 429.958909][T24322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c118, mo2=0006] [ 429.964201][T24327] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=24327 comm=syz.4.7500 [ 429.969759][T24322] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.7499: Invalid inode bitmap blk 4 in block_group 0 [ 429.994586][T24322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.011179][T24329] loop9: detected capacity change from 0 to 1024 [ 430.026430][T24322] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 430.050076][T24333] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 430.050854][T24329] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.124010][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.182944][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.244919][T24350] vlan2: entered allmulticast mode [ 430.250267][T24350] syz_tun: entered allmulticast mode [ 430.260543][T24353] loop9: detected capacity change from 0 to 1024 [ 430.271305][T24357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24357 comm=syz.8.7510 [ 430.313269][T24353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.413037][T24367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=24367 comm=syz.4.7515 [ 430.437753][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.453738][T24372] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 430.469490][T24372] loop8: detected capacity change from 0 to 512 [ 430.476540][T24372] ext4: Unknown parameter 'noacl' [ 430.493969][T24376] loop9: detected capacity change from 0 to 1024 [ 430.517150][T24376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.549566][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.579320][T24388] loop9: detected capacity change from 0 to 512 [ 430.586463][T24388] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 430.598315][T24388] EXT4-fs (loop9): 1 truncate cleaned up [ 430.604392][T24388] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.677263][T24397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.686038][T24397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.695993][T24397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7529'. [ 430.725482][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.773759][T24402] loop9: detected capacity change from 0 to 1024 [ 430.807923][T24402] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.932856][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.955674][T24408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=24408 comm=syz.9.7532 [ 431.002277][T24412] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 431.017493][T24412] loop9: detected capacity change from 0 to 512 [ 431.024611][T24412] ext4: Unknown parameter 'noacl' [ 431.340004][T24444] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=24444 comm=syz.4.7543 [ 431.358224][T24438] Falling back ldisc for ttyS3. [ 431.394697][T24450] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 431.451254][T24448] FAULT_INJECTION: forcing a failure. [ 431.451254][T24448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.465033][T24448] CPU: 1 UID: 0 PID: 24448 Comm: syz.4.7545 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 431.465140][T24448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.465156][T24448] Call Trace: [ 431.465164][T24448] [ 431.465172][T24448] __dump_stack+0x1d/0x30 [ 431.465193][T24448] dump_stack_lvl+0xe8/0x140 [ 431.465212][T24448] dump_stack+0x15/0x1b [ 431.465230][T24448] should_fail_ex+0x265/0x280 [ 431.465282][T24448] should_fail+0xb/0x20 [ 431.465311][T24448] should_fail_usercopy+0x1a/0x20 [ 431.465349][T24448] _copy_from_user+0x1c/0xb0 [ 431.465421][T24448] __ia32_sys_rt_sigreturn+0x128/0x350 [ 431.465506][T24448] x64_sys_call+0x2e8a/0x2fb0 [ 431.465614][T24448] do_syscall_64+0xd2/0x200 [ 431.465638][T24448] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 431.465670][T24448] ? clear_bhb_loop+0x40/0x90 [ 431.465702][T24448] ? clear_bhb_loop+0x40/0x90 [ 431.465725][T24448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.465747][T24448] RIP: 0033:0x7f9755c9ab89 [ 431.465766][T24448] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 431.465790][T24448] RSP: 002b:00007f975435ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 431.465853][T24448] RAX: ffffffffffffffda RBX: 00007f9755f25fa0 RCX: 00007f9755c9ab89 [ 431.465866][T24448] RDX: 00007f975435ea80 RSI: 00007f975435ebb0 RDI: 0000000000000021 [ 431.465889][T24448] RBP: 00007f975435f090 R08: 0000000000000000 R09: 0000000000000000 [ 431.465955][T24448] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 431.465967][T24448] R13: 0000000000000000 R14: 00007f9755f25fa0 R15: 00007ffcc833d2c8 [ 431.465987][T24448] [ 432.032425][T24475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=24475 comm=syz.1.7556 [ 432.059387][T24477] loop9: detected capacity change from 0 to 512 [ 432.066395][T24477] EXT4-fs: Ignoring removed oldalloc option [ 432.083829][T24479] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 432.092722][T24477] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.287070][T24477] FAULT_INJECTION: forcing a failure. [ 432.287070][T24477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.300280][T24477] CPU: 0 UID: 0 PID: 24477 Comm: syz.9.7558 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 432.300368][T24477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.300380][T24477] Call Trace: [ 432.300388][T24477] [ 432.300396][T24477] __dump_stack+0x1d/0x30 [ 432.300417][T24477] dump_stack_lvl+0xe8/0x140 [ 432.300493][T24477] dump_stack+0x15/0x1b [ 432.300515][T24477] should_fail_ex+0x265/0x280 [ 432.300557][T24477] should_fail+0xb/0x20 [ 432.300591][T24477] should_fail_usercopy+0x1a/0x20 [ 432.300631][T24477] fpu__restore_sig+0x12d/0xaa0 [ 432.300734][T24477] ? should_fail_ex+0xdb/0x280 [ 432.300857][T24477] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 432.300896][T24477] x64_sys_call+0x2e8a/0x2fb0 [ 432.300957][T24477] do_syscall_64+0xd2/0x200 [ 432.300975][T24477] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 432.301005][T24477] ? clear_bhb_loop+0x40/0x90 [ 432.301031][T24477] ? clear_bhb_loop+0x40/0x90 [ 432.301072][T24477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.301100][T24477] RIP: 0033:0x7f368258e9a9 [ 432.301120][T24477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.301162][T24477] RSP: 002b:00007f3680bef038 EFLAGS: 00000246 [ 432.301182][T24477] RAX: 0000000000000000 RBX: 00007f36827b5fa0 RCX: 00007f368258e9a9 [ 432.301198][T24477] RDX: 0000000000000000 RSI: 00000000000002b4 RDI: 0000000000000002 [ 432.301213][T24477] RBP: 00007f3680bef090 R08: 0000000000000000 R09: 0000000000000000 [ 432.301268][T24477] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 432.301360][T24477] R13: 0000000000000000 R14: 00007f36827b5fa0 R15: 00007ffdb52110a8 [ 432.301380][T24477] [ 432.514294][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.570375][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 432.570390][ T29] audit: type=1400 audit(1200.958:22661): avc: denied { bind } for pid=24493 comm="syz.9.7563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 432.620763][ T29] audit: type=1400 audit(1201.008:22662): avc: denied { connect } for pid=24493 comm="syz.9.7563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 432.738445][T24509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58808 sclass=netlink_audit_socket pid=24509 comm=syz.4.7569 [ 432.742270][T24511] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 432.762975][T24511] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 432.814909][ T29] audit: type=1400 audit(1201.197:22663): avc: denied { write } for pid=24515 comm="syz.4.7572" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 432.997478][ T29] audit: type=1326 audit(1201.377:22664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.8.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 433.021560][ T29] audit: type=1326 audit(1201.377:22665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.8.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 433.044918][ T29] audit: type=1326 audit(1201.377:22666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.8.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 433.068695][ T29] audit: type=1326 audit(1201.377:22667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.8.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 433.091831][ T29] audit: type=1326 audit(1201.377:22668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.8.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 433.115625][ T29] audit: type=1326 audit(1201.377:22669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.8.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 433.139403][ T29] audit: type=1326 audit(1201.377:22670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.8.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 433.243810][T24529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7576'. [ 433.527282][T24537] FAULT_INJECTION: forcing a failure. [ 433.527282][T24537] name failslab, interval 1, probability 0, space 0, times 0 [ 433.540328][T24537] CPU: 0 UID: 0 PID: 24537 Comm: syz.6.7580 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 433.540421][T24537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.540434][T24537] Call Trace: [ 433.540439][T24537] [ 433.540448][T24537] __dump_stack+0x1d/0x30 [ 433.540474][T24537] dump_stack_lvl+0xe8/0x140 [ 433.540539][T24537] dump_stack+0x15/0x1b [ 433.540558][T24537] should_fail_ex+0x265/0x280 [ 433.540588][T24537] should_failslab+0x8c/0xb0 [ 433.540647][T24537] kmem_cache_alloc_noprof+0x50/0x310 [ 433.540678][T24537] ? security_file_alloc+0x32/0x100 [ 433.540705][T24537] security_file_alloc+0x32/0x100 [ 433.540779][T24537] init_file+0x5c/0x1d0 [ 433.540802][T24537] alloc_empty_file+0x8b/0x200 [ 433.540883][T24537] alloc_file_pseudo+0xc6/0x160 [ 433.540917][T24537] __shmem_file_setup+0x1de/0x210 [ 433.540999][T24537] shmem_file_setup+0x3b/0x50 [ 433.541027][T24537] __se_sys_memfd_create+0x2c3/0x590 [ 433.541067][T24537] __x64_sys_memfd_create+0x31/0x40 [ 433.541171][T24537] x64_sys_call+0x122f/0x2fb0 [ 433.541252][T24537] do_syscall_64+0xd2/0x200 [ 433.541271][T24537] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 433.541297][T24537] ? clear_bhb_loop+0x40/0x90 [ 433.541318][T24537] ? clear_bhb_loop+0x40/0x90 [ 433.541346][T24537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.541373][T24537] RIP: 0033:0x7f131b67e9a9 [ 433.541391][T24537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.541409][T24537] RSP: 002b:00007f1319ce6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 433.541427][T24537] RAX: ffffffffffffffda RBX: 0000000000000470 RCX: 00007f131b67e9a9 [ 433.541496][T24537] RDX: 00007f1319ce6ef0 RSI: 0000000000000000 RDI: 00007f131b7016fc [ 433.541529][T24537] RBP: 00002000000008c0 R08: 00007f1319ce6bb7 R09: 00007f1319ce6e40 [ 433.541607][T24537] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 433.541622][T24537] R13: 00007f1319ce6ef0 R14: 00007f1319ce6eb0 R15: 00002000000000c0 [ 433.541647][T24537] [ 433.809128][T24543] netlink: 'syz.4.7583': attribute type 10 has an invalid length. [ 433.818504][T24543] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7583'. [ 433.858987][T24550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7583'. [ 433.864614][T24549] loop8: detected capacity change from 0 to 512 [ 433.892754][T24549] EXT4-fs: Ignoring removed oldalloc option [ 433.898913][T24549] ext4: Unknown parameter 'uid<00000000000000000000' [ 433.932346][T24545] loop9: detected capacity change from 0 to 512 [ 433.944082][T24549] loop8: detected capacity change from 0 to 736 [ 433.963617][T24545] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.983093][T24549] rock: directory entry would overflow storage [ 433.989361][T24549] rock: sig=0x3b10, size=4, remaining=3 [ 433.996789][T24549] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7586'. [ 434.055119][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.145344][T24566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7591'. [ 434.170051][T24568] netlink: 'syz.1.7592': attribute type 10 has an invalid length. [ 434.177958][T24568] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7592'. [ 434.202175][T24568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7592'. [ 434.757328][T24600] loop8: detected capacity change from 0 to 8192 [ 434.784601][T24600] FAULT_INJECTION: forcing a failure. [ 434.784601][T24600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.797848][T24600] CPU: 0 UID: 0 PID: 24600 Comm: syz.8.7604 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 434.797881][T24600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.797897][T24600] Call Trace: [ 434.797906][T24600] [ 434.797916][T24600] __dump_stack+0x1d/0x30 [ 434.797943][T24600] dump_stack_lvl+0xe8/0x140 [ 434.797968][T24600] dump_stack+0x15/0x1b [ 434.797989][T24600] should_fail_ex+0x265/0x280 [ 434.798087][T24600] should_fail+0xb/0x20 [ 434.798175][T24600] should_fail_usercopy+0x1a/0x20 [ 434.798207][T24600] _copy_from_iter+0xcf/0xe40 [ 434.798282][T24600] ? __build_skb_around+0x1a0/0x200 [ 434.798336][T24600] ? __alloc_skb+0x223/0x320 [ 434.798402][T24600] netlink_sendmsg+0x471/0x6b0 [ 434.798426][T24600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.798446][T24600] __sock_sendmsg+0x145/0x180 [ 434.798470][T24600] ____sys_sendmsg+0x31e/0x4e0 [ 434.798530][T24600] ___sys_sendmsg+0x17b/0x1d0 [ 434.798646][T24600] __x64_sys_sendmsg+0xd4/0x160 [ 434.798694][T24600] x64_sys_call+0x2999/0x2fb0 [ 434.798798][T24600] do_syscall_64+0xd2/0x200 [ 434.798822][T24600] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 434.798856][T24600] ? clear_bhb_loop+0x40/0x90 [ 434.798883][T24600] ? clear_bhb_loop+0x40/0x90 [ 434.798936][T24600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.798956][T24600] RIP: 0033:0x7f64ee18e9a9 [ 434.798972][T24600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.799035][T24600] RSP: 002b:00007f64ec7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.799059][T24600] RAX: ffffffffffffffda RBX: 00007f64ee3b5fa0 RCX: 00007f64ee18e9a9 [ 434.799075][T24600] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 434.799091][T24600] RBP: 00007f64ec7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 434.799107][T24600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.799118][T24600] R13: 0000000000000000 R14: 00007f64ee3b5fa0 R15: 00007ffd31c2ae78 [ 434.799139][T24600] [ 435.500211][T24636] Falling back ldisc for ttyS3. [ 436.245483][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7630'. [ 436.265071][T24663] loop8: detected capacity change from 0 to 512 [ 436.272233][T24663] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 436.287404][T24663] EXT4-fs (loop8): 1 truncate cleaned up [ 436.293618][T24663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.305978][T24668] FAULT_INJECTION: forcing a failure. [ 436.305978][T24668] name failslab, interval 1, probability 0, space 0, times 0 [ 436.318758][T24668] CPU: 1 UID: 0 PID: 24668 Comm: syz.1.7633 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 436.318786][T24668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.318799][T24668] Call Trace: [ 436.318808][T24668] [ 436.318818][T24668] __dump_stack+0x1d/0x30 [ 436.318971][T24668] dump_stack_lvl+0xe8/0x140 [ 436.319049][T24668] dump_stack+0x15/0x1b [ 436.319066][T24668] should_fail_ex+0x265/0x280 [ 436.319096][T24668] should_failslab+0x8c/0xb0 [ 436.319125][T24668] __kvmalloc_node_noprof+0x123/0x4e0 [ 436.319174][T24668] ? bpf_test_run_xdp_live+0xed/0xfe0 [ 436.319212][T24668] bpf_test_run_xdp_live+0xed/0xfe0 [ 436.319337][T24668] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 436.319419][T24668] ? __pfx_autoremove_wake_function+0x10/0x10 [ 436.319518][T24668] ? 0xffffffffa0205540 [ 436.319538][T24668] ? synchronize_rcu+0x45/0x320 [ 436.319575][T24668] ? 0xffffffffa0205540 [ 436.319593][T24668] ? 0xffffffffa0205540 [ 436.319610][T24668] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 436.319730][T24668] ? 0xffffffffa0206854 [ 436.319826][T24668] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 436.319913][T24668] bpf_prog_test_run_xdp+0x4f5/0x910 [ 436.319948][T24668] ? __rcu_read_unlock+0x4f/0x70 [ 436.319973][T24668] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 436.320014][T24668] bpf_prog_test_run+0x22a/0x390 [ 436.320078][T24668] __sys_bpf+0x3dc/0x790 [ 436.320128][T24668] __x64_sys_bpf+0x41/0x50 [ 436.320216][T24668] x64_sys_call+0x2478/0x2fb0 [ 436.320245][T24668] do_syscall_64+0xd2/0x200 [ 436.320301][T24668] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 436.320331][T24668] ? clear_bhb_loop+0x40/0x90 [ 436.320381][T24668] ? clear_bhb_loop+0x40/0x90 [ 436.320409][T24668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.320470][T24668] RIP: 0033:0x7ff95540e9a9 [ 436.320486][T24668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.320507][T24668] RSP: 002b:00007ff953a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 436.320532][T24668] RAX: ffffffffffffffda RBX: 00007ff955635fa0 RCX: 00007ff95540e9a9 [ 436.320545][T24668] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 436.320557][T24668] RBP: 00007ff953a77090 R08: 0000000000000000 R09: 0000000000000000 [ 436.320576][T24668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.320593][T24668] R13: 0000000000000000 R14: 00007ff955635fa0 R15: 00007ffc23b04718 [ 436.320618][T24668] [ 436.568984][T24665] Falling back ldisc for ttyS3. [ 436.572006][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.143682][T24691] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 437.187973][T24695] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 437.256548][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.264257][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.280780][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.288257][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.295795][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.303229][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.310745][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.318155][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.325779][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.333234][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.340723][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.348225][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.360099][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.367645][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.375334][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.382945][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.390506][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.398002][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.405454][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.412912][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.420341][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.427962][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.435479][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.442974][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.450450][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.457978][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.465768][ T3491] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 437.536415][ T3491] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz0] on syz1 [ 437.600648][T24715] warn_alloc: 1 callbacks suppressed [ 437.600668][T24715] syz.8.7651: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 437.621570][T24715] CPU: 1 UID: 0 PID: 24715 Comm: syz.8.7651 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 437.621679][T24715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.621692][T24715] Call Trace: [ 437.621698][T24715] [ 437.621706][T24715] __dump_stack+0x1d/0x30 [ 437.621727][T24715] dump_stack_lvl+0xe8/0x140 [ 437.621754][T24715] dump_stack+0x15/0x1b [ 437.621775][T24715] warn_alloc+0x12b/0x1a0 [ 437.621825][T24715] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 437.621935][T24715] ? enqueue_task_fair+0x35e/0x980 [ 437.621964][T24715] __vmalloc_node_range_noprof+0x9c/0xe00 [ 437.622004][T24715] ? probe_sched_wakeup+0x85/0xa0 [ 437.622080][T24715] ? ttwu_do_activate+0x1d0/0x210 [ 437.622215][T24715] ? __rcu_read_unlock+0x4f/0x70 [ 437.622242][T24715] ? avc_has_perm_noaudit+0x1b1/0x200 [ 437.622297][T24715] ? should_fail_ex+0x30/0x280 [ 437.622400][T24715] ? xskq_create+0x36/0xe0 [ 437.622435][T24715] vmalloc_user_noprof+0x7d/0xb0 [ 437.622482][T24715] ? xskq_create+0x80/0xe0 [ 437.622524][T24715] xskq_create+0x80/0xe0 [ 437.622612][T24715] xsk_init_queue+0x95/0xf0 [ 437.622639][T24715] xsk_setsockopt+0x35c/0x510 [ 437.622660][T24715] ? __pfx_xsk_setsockopt+0x10/0x10 [ 437.622681][T24715] __sys_setsockopt+0x184/0x200 [ 437.622755][T24715] __x64_sys_setsockopt+0x64/0x80 [ 437.622794][T24715] x64_sys_call+0x2bd5/0x2fb0 [ 437.622821][T24715] do_syscall_64+0xd2/0x200 [ 437.622851][T24715] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 437.622882][T24715] ? clear_bhb_loop+0x40/0x90 [ 437.622957][T24715] ? clear_bhb_loop+0x40/0x90 [ 437.622979][T24715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.623006][T24715] RIP: 0033:0x7f64ee18e9a9 [ 437.623024][T24715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.623083][T24715] RSP: 002b:00007f64ec7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 437.623105][T24715] RAX: ffffffffffffffda RBX: 00007f64ee3b5fa0 RCX: 00007f64ee18e9a9 [ 437.623120][T24715] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 437.623131][T24715] RBP: 00007f64ee210d69 R08: 0000000000000004 R09: 0000000000000000 [ 437.623147][T24715] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.623210][T24715] R13: 0000000000000000 R14: 00007f64ee3b5fa0 R15: 00007ffd31c2ae78 [ 437.623229][T24715] [ 437.623316][T24715] Mem-Info: [ 437.648669][T24724] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 437.650503][T24715] active_anon:4449 inactive_anon:0 isolated_anon:0 [ 437.650503][T24715] active_file:20589 inactive_file:2736 isolated_file:0 [ 437.650503][T24715] unevictable:20 dirty:299 writeback:0 [ 437.650503][T24715] slab_reclaimable:3913 slab_unreclaimable:187733 [ 437.650503][T24715] mapped:35031 shmem:437 pagetables:1391 [ 437.650503][T24715] sec_pagetables:0 bounce:0 [ 437.650503][T24715] kernel_misc_reclaimable:0 [ 437.650503][T24715] free:1692656 free_pcp:4021 free_cma:0 [ 437.685560][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 437.685667][ T29] audit: type=1400 audit(1206.004:22889): avc: denied { ioctl } for pid=24721 comm="syz.4.7654" path="socket:[86479]" dev="sockfs" ino=86479 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 437.685707][ T29] audit: type=1326 audit(1206.034:22890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24723 comm="syz.6.7655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 437.685743][ T29] audit: type=1326 audit(1206.034:22891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24723 comm="syz.6.7655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 437.685806][ T29] audit: type=1326 audit(1206.034:22892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24723 comm="syz.6.7655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 437.685917][ T29] audit: type=1326 audit(1206.034:22893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24723 comm="syz.6.7655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 437.685969][ T29] audit: type=1326 audit(1206.034:22894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24723 comm="syz.6.7655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 437.686015][ T29] audit: type=1326 audit(1206.034:22895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24723 comm="syz.6.7655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 437.686051][ T29] audit: type=1326 audit(1206.034:22896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24723 comm="syz.6.7655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 437.686102][ T29] audit: type=1326 audit(1206.034:22897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24723 comm="syz.6.7655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 437.686193][ T29] audit: type=1326 audit(1206.034:22898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24723 comm="syz.6.7655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131b67e9a9 code=0x7ffc0000 [ 437.821686][T24728] loop8: detected capacity change from 0 to 512 [ 437.829241][T24715] Node 0 active_anon:18028kB inactive_anon:0kB active_file:82356kB inactive_file:10944kB unevictable:80kB isolated(anon):0kB isolated(file):0kB mapped:140320kB dirty:1196kB writeback:0kB shmem:1980kB writeback_tmp:0kB kernel_stack:6400kB pagetables:5564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.902388][T24733] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7656'. [ 437.921671][T24715] Node 0 [ 437.954794][T24728] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.975210][T24715] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.975287][T24715] lowmem_reserve[]: 0 2882 7860 7860 [ 438.258856][T24715] Node 0 DMA32 free:2947820kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951348kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 438.289462][T24715] lowmem_reserve[]: 0 0 4978 4978 [ 438.294552][T24715] Node 0 Normal free:3811896kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18184kB inactive_anon:0kB active_file:82356kB inactive_file:10952kB unevictable:80kB writepending:1260kB present:5242880kB managed:5098240kB mlocked:80kB bounce:0kB free_pcp:5820kB local_pcp:5208kB free_cma:0kB [ 438.327279][T24715] lowmem_reserve[]: 0 0 0 0 [ 438.331853][T24715] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 438.344725][T24715] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 2*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947820kB [ 438.361693][T24715] Node 0 Normal: 2458*4kB (ME) 1890*8kB (UME) 1331*16kB (UME) 907*32kB (UME) 469*64kB (UME) 214*128kB (UME) 125*256kB (UME) 135*512kB (UME) 72*1024kB (UME) 51*2048kB (UM) 830*4096kB (UM) = 3811656kB [ 438.382346][T24715] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 438.392765][T24715] 23858 total pagecache pages [ 438.397574][T24715] 1 pages in swap cache [ 438.401894][T24715] Free swap = 124628kB [ 438.406119][T24715] Total swap = 124996kB [ 438.410303][T24715] 2097051 pages RAM [ 438.414236][T24715] 0 pages HighMem/MovableOnly [ 438.418941][T24715] 80814 pages reserved [ 438.494212][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.548821][T24749] loop9: detected capacity change from 0 to 7 [ 438.603884][T24754] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7670'. [ 438.622783][T24754] netem: change failed [ 438.723090][T24758] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7664'. [ 438.728171][T24763] loop8: detected capacity change from 0 to 1024 [ 438.760050][T24763] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.845913][T24770] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7667'. [ 438.855029][T24770] netlink: 'syz.9.7667': attribute type 30 has an invalid length. [ 438.880573][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.915325][T24772] loop8: detected capacity change from 0 to 512 [ 438.922735][T24772] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 438.933890][T24770] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7667'. [ 438.942878][T24770] netlink: 'syz.9.7667': attribute type 30 has an invalid length. [ 438.952787][T24772] EXT4-fs (loop8): 1 truncate cleaned up [ 438.958851][T24772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.040651][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.149581][T24781] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 439.165284][T24781] loop9: detected capacity change from 0 to 512 [ 439.172912][T24781] ext4: Unknown parameter 'noacl' [ 439.420746][T24795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7677'. [ 439.472981][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7679'. [ 439.482182][T24796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.490333][T24796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.617141][T24802] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7682'. [ 439.626674][T24802] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7682'. [ 439.637683][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7682'. [ 439.649309][T24802] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 439.658355][T24802] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 439.685263][T24804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7683'. [ 439.696024][T24805] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7682'. [ 439.697124][T24804] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 439.705095][T24805] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7682'. [ 439.721452][T24804] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 439.755351][T24807] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 440.138228][T24831] loop9: detected capacity change from 0 to 512 [ 440.145447][T24831] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 440.156943][T24831] EXT4-fs (loop9): 1 truncate cleaned up [ 440.163019][T24831] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.233399][T20485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.534116][T24839] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 441.083811][T24870] Falling back ldisc for ttyS3. [ 441.627238][T24895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=24895 comm=syz.9.7717 [ 441.656956][T24902] loop8: detected capacity change from 0 to 2048 [ 441.685461][T24902] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.771067][T20427] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 441.790076][T20427] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 441.805608][T20427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.863098][T24932] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 441.864063][T24919] Falling back ldisc for ttyS3. [ 441.944088][T24936] Falling back ldisc for ttyS3. [ 442.472056][T24966] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 442.494040][T24966] loop8: detected capacity change from 0 to 512 [ 442.501027][T24966] ext4: Unknown parameter 'noacl' [ 442.552463][T24972] loop8: detected capacity change from 0 to 128 [ 442.561102][T24972] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 442.643653][T24975] loop9: detected capacity change from 0 to 8192 [ 442.679527][T20427] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 442.844650][T24979] loop8: detected capacity change from 0 to 512 [ 442.869302][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 442.869322][ T29] audit: type=1326 audit(1211.241:23383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.9.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 442.903137][ T29] audit: type=1326 audit(1211.241:23384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.9.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 442.926538][ T29] audit: type=1326 audit(1211.241:23385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.9.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 442.949945][ T29] audit: type=1326 audit(1211.241:23386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.9.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 442.973272][ T29] audit: type=1326 audit(1211.241:23387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.9.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 442.996707][ T29] audit: type=1326 audit(1211.241:23388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.9.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 443.020210][ T29] audit: type=1326 audit(1211.241:23389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.9.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 443.043325][ T29] audit: type=1326 audit(1211.241:23390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.9.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 443.066534][ T29] audit: type=1326 audit(1211.241:23391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.9.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 443.089803][ T29] audit: type=1326 audit(1211.241:23392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.9.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368258e9a9 code=0x7ffc0000 [ 443.161664][T24998] loop8: detected capacity change from 0 to 512 [ 443.169342][T24998] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 443.172295][T25000] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 443.187578][T24998] EXT4-fs (loop8): 1 truncate cleaned up [ 443.280419][T25007] loop8: detected capacity change from 0 to 164 [ 443.290043][T25007] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 443.746392][T25052] loop9: detected capacity change from 0 to 164 [ 443.759952][T25054] loop8: detected capacity change from 0 to 512 [ 443.767653][T25052] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 443.785542][T25054] EXT4-fs (loop8): orphan cleanup on readonly fs [ 443.794605][T25054] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7772: Failed to acquire dquot type 1 [ 443.806701][T25054] EXT4-fs (loop8): 1 truncate cleaned up [ 443.898986][T25059] loop9: detected capacity change from 0 to 512 [ 444.139904][T25077] loop9: detected capacity change from 0 to 512 [ 444.165878][T25077] ext4: Unknown parameter 'noacl' [ 444.301114][T25076] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 444.359682][T25086] loop9: detected capacity change from 0 to 512 [ 444.367555][T25086] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 444.380805][T25086] EXT4-fs (loop9): 1 truncate cleaned up [ 444.662140][T25090] loop9: detected capacity change from 0 to 164 [ 444.694575][T25090] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 445.422576][T25112] Falling back ldisc for ttyS3. [ 445.800233][T25131] __nla_validate_parse: 7 callbacks suppressed [ 445.800253][T25131] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7800'. [ 445.838562][T25131] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7800'. [ 446.119894][T25160] FAULT_INJECTION: forcing a failure. [ 446.119894][T25160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.133158][T25160] CPU: 1 UID: 0 PID: 25160 Comm: syz.4.7810 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 446.133231][T25160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.133245][T25160] Call Trace: [ 446.133252][T25160] [ 446.133260][T25160] __dump_stack+0x1d/0x30 [ 446.133287][T25160] dump_stack_lvl+0xe8/0x140 [ 446.133313][T25160] dump_stack+0x15/0x1b [ 446.133391][T25160] should_fail_ex+0x265/0x280 [ 446.133497][T25160] should_fail+0xb/0x20 [ 446.133523][T25160] should_fail_usercopy+0x1a/0x20 [ 446.133616][T25160] _copy_from_user+0x1c/0xb0 [ 446.133642][T25160] copy_from_bpfptr+0x5c/0x90 [ 446.133678][T25160] bpf_prog_load+0x74a/0x1070 [ 446.133892][T25160] ? security_bpf+0x2b/0x90 [ 446.133911][T25160] __sys_bpf+0x51d/0x790 [ 446.133968][T25160] __x64_sys_bpf+0x41/0x50 [ 446.133996][T25160] x64_sys_call+0x2478/0x2fb0 [ 446.134016][T25160] do_syscall_64+0xd2/0x200 [ 446.134034][T25160] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 446.134119][T25160] ? clear_bhb_loop+0x40/0x90 [ 446.134188][T25160] ? clear_bhb_loop+0x40/0x90 [ 446.134208][T25160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.134228][T25160] RIP: 0033:0x7f9755cfe9a9 [ 446.134268][T25160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.134319][T25160] RSP: 002b:00007f975435f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.134339][T25160] RAX: ffffffffffffffda RBX: 00007f9755f25fa0 RCX: 00007f9755cfe9a9 [ 446.134355][T25160] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 446.134370][T25160] RBP: 00007f975435f090 R08: 0000000000000000 R09: 0000000000000000 [ 446.134386][T25160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.134401][T25160] R13: 0000000000000000 R14: 00007f9755f25fa0 R15: 00007ffcc833d2c8 [ 446.134426][T25160] [ 446.388560][T25168] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 446.603811][T25191] loop9: detected capacity change from 0 to 164 [ 446.615796][T25191] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 446.627057][T25194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7822'. [ 446.640042][T25194] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 446.685341][T25200] FAULT_INJECTION: forcing a failure. [ 446.685341][T25200] name failslab, interval 1, probability 0, space 0, times 0 [ 446.698038][T25200] CPU: 0 UID: 0 PID: 25200 Comm: syz.6.7825 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 446.698175][T25200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.698192][T25200] Call Trace: [ 446.698201][T25200] [ 446.698211][T25200] __dump_stack+0x1d/0x30 [ 446.698237][T25200] dump_stack_lvl+0xe8/0x140 [ 446.698262][T25200] dump_stack+0x15/0x1b [ 446.698304][T25200] should_fail_ex+0x265/0x280 [ 446.698345][T25200] should_failslab+0x8c/0xb0 [ 446.698373][T25200] kmem_cache_alloc_noprof+0x50/0x310 [ 446.698483][T25200] ? audit_log_start+0x365/0x6c0 [ 446.698543][T25200] audit_log_start+0x365/0x6c0 [ 446.698591][T25200] audit_seccomp+0x48/0x100 [ 446.698733][T25200] ? __seccomp_filter+0x68c/0x10d0 [ 446.698811][T25200] __seccomp_filter+0x69d/0x10d0 [ 446.698838][T25200] ? percpu_counter_add_batch+0xb6/0x130 [ 446.698875][T25200] ? errseq_sample+0x2f/0x40 [ 446.698901][T25200] ? file_init_path+0x278/0x2a0 [ 446.698939][T25200] __secure_computing+0x82/0x150 [ 446.699039][T25200] syscall_trace_enter+0xcf/0x1e0 [ 446.699063][T25200] do_syscall_64+0xac/0x200 [ 446.699087][T25200] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 446.699170][T25200] ? clear_bhb_loop+0x40/0x90 [ 446.699198][T25200] ? clear_bhb_loop+0x40/0x90 [ 446.699224][T25200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.699248][T25200] RIP: 0033:0x7f131b67d3bc [ 446.699275][T25200] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 446.699298][T25200] RSP: 002b:00007f1319ce7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.699322][T25200] RAX: ffffffffffffffda RBX: 00007f131b8a5fa0 RCX: 00007f131b67d3bc [ 446.699339][T25200] RDX: 000000000000000f RSI: 00007f1319ce70a0 RDI: 0000000000000003 [ 446.699354][T25200] RBP: 00007f1319ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 446.699370][T25200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.699400][T25200] R13: 0000000000000000 R14: 00007f131b8a5fa0 R15: 00007ffcf7568078 [ 446.699426][T25200] [ 447.439910][T25269] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7849'. [ 447.508591][T25277] loop8: detected capacity change from 0 to 128 [ 447.512749][T25279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.523602][T25279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.534577][T25277] EXT4-fs mount: 10 callbacks suppressed [ 447.534599][T25277] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 447.562394][T25277] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 447.609126][T25292] vlan2: entered allmulticast mode [ 447.614545][T25292] vlan0: entered allmulticast mode [ 447.620547][T25292] veth0_vlan: entered allmulticast mode [ 447.701770][T25299] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7861'. [ 447.812776][T25308] warn_alloc: 6 callbacks suppressed [ 447.812808][T25308] syz.8.7864: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 447.833048][T25308] CPU: 0 UID: 0 PID: 25308 Comm: syz.8.7864 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 447.833133][T25308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 447.833148][T25308] Call Trace: [ 447.833157][T25308] [ 447.833168][T25308] __dump_stack+0x1d/0x30 [ 447.833195][T25308] dump_stack_lvl+0xe8/0x140 [ 447.833290][T25308] dump_stack+0x15/0x1b [ 447.833313][T25308] warn_alloc+0x12b/0x1a0 [ 447.833357][T25308] __vmalloc_node_range_noprof+0x9c/0xe00 [ 447.833393][T25308] ? __futex_wait+0x1ff/0x260 [ 447.833493][T25308] ? __pfx_futex_wake_mark+0x10/0x10 [ 447.833531][T25308] ? __rcu_read_unlock+0x4f/0x70 [ 447.833560][T25308] ? avc_has_perm_noaudit+0x1b1/0x200 [ 447.833597][T25308] ? should_fail_ex+0x30/0x280 [ 447.833666][T25308] ? xskq_create+0x36/0xe0 [ 447.833694][T25308] vmalloc_user_noprof+0x7d/0xb0 [ 447.833778][T25308] ? xskq_create+0x80/0xe0 [ 447.833813][T25308] xskq_create+0x80/0xe0 [ 447.833844][T25308] xsk_init_queue+0x95/0xf0 [ 447.833904][T25308] xsk_setsockopt+0x35c/0x510 [ 447.833932][T25308] ? __pfx_xsk_setsockopt+0x10/0x10 [ 447.833958][T25308] __sys_setsockopt+0x184/0x200 [ 447.834042][T25308] __x64_sys_setsockopt+0x64/0x80 [ 447.834094][T25308] x64_sys_call+0x2bd5/0x2fb0 [ 447.834116][T25308] do_syscall_64+0xd2/0x200 [ 447.834133][T25308] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 447.834198][T25308] ? clear_bhb_loop+0x40/0x90 [ 447.834226][T25308] ? clear_bhb_loop+0x40/0x90 [ 447.834324][T25308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.834351][T25308] RIP: 0033:0x7f64ee18e9a9 [ 447.834404][T25308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.834421][T25308] RSP: 002b:00007f64ec7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 447.834442][T25308] RAX: ffffffffffffffda RBX: 00007f64ee3b5fa0 RCX: 00007f64ee18e9a9 [ 447.834525][T25308] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 447.834541][T25308] RBP: 00007f64ee210d69 R08: 0000000000000004 R09: 0000000000000000 [ 447.834556][T25308] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.834572][T25308] R13: 0000000000000000 R14: 00007f64ee3b5fa0 R15: 00007ffd31c2ae78 [ 447.834598][T25308] [ 447.834606][T25308] Mem-Info: [ 448.063478][T25308] active_anon:4470 inactive_anon:0 isolated_anon:0 [ 448.063478][T25308] active_file:22541 inactive_file:2744 isolated_file:0 [ 448.063478][T25308] unevictable:0 dirty:227 writeback:0 [ 448.063478][T25308] slab_reclaimable:4010 slab_unreclaimable:190294 [ 448.063478][T25308] mapped:35212 shmem:431 pagetables:1425 [ 448.063478][T25308] sec_pagetables:0 bounce:0 [ 448.063478][T25308] kernel_misc_reclaimable:0 [ 448.063478][T25308] free:1671894 free_pcp:19866 free_cma:0 [ 448.108633][T25308] Node 0 active_anon:17880kB inactive_anon:0kB active_file:90164kB inactive_file:10976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140848kB dirty:908kB writeback:0kB shmem:1724kB writeback_tmp:0kB kernel_stack:6320kB pagetables:5700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 448.137799][T25308] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 448.166638][T25308] lowmem_reserve[]: 0 2882 7860 7860 [ 448.172309][T25308] Node 0 DMA32 free:2947820kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951348kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 448.202956][T25308] lowmem_reserve[]: 0 0 4978 4978 [ 448.208122][T25308] Node 0 Normal free:3724396kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17648kB inactive_anon:0kB active_file:90164kB inactive_file:10976kB unevictable:0kB writepending:908kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:75832kB local_pcp:33160kB free_cma:0kB [ 448.240152][T25308] lowmem_reserve[]: 0 0 0 0 [ 448.244752][T25308] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 448.257579][T25308] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 2*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947820kB [ 448.273921][T25308] Node 0 Normal: 263*4kB (UME) 157*8kB (UM) 996*16kB (ME) 565*32kB (UME) 236*64kB (UME) 126*128kB (UME) 110*256kB (UME) 109*512kB (UME) 67*1024kB (UME) 51*2048kB (UM) 830*4096kB (UM) = 3724260kB [ 448.293232][T25308] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 448.302611][T25308] 25699 total pagecache pages [ 448.307336][T25308] 1 pages in swap cache [ 448.311651][T25308] Free swap = 124628kB [ 448.315932][T25308] Total swap = 124996kB [ 448.320400][T25308] 2097051 pages RAM [ 448.324342][T25308] 0 pages HighMem/MovableOnly [ 448.329080][T25308] 80814 pages reserved [ 448.403226][T25336] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 448.415817][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 448.415835][ T29] audit: type=1326 audit(1216.756:23747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25335 comm="syz.8.7872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 448.445255][ T29] audit: type=1326 audit(1216.756:23748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25335 comm="syz.8.7872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 448.448574][T25336] loop8: detected capacity change from 0 to 512 [ 448.468463][ T29] audit: type=1326 audit(1216.756:23749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25335 comm="syz.8.7872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 448.468511][ T29] audit: type=1326 audit(1216.756:23750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25335 comm="syz.8.7872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 448.479657][ T29] audit: type=1326 audit(1216.766:23751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25335 comm="syz.8.7872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 448.544849][ T29] audit: type=1326 audit(1216.766:23752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25335 comm="syz.8.7872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 448.549211][T25336] ext4: Unknown parameter 'noacl' [ 448.568246][ T29] audit: type=1326 audit(1216.766:23753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25335 comm="syz.8.7872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 448.568335][ T29] audit: type=1326 audit(1216.766:23754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25335 comm="syz.8.7872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 448.568379][ T29] audit: type=1326 audit(1216.766:23755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25335 comm="syz.8.7872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 448.568422][ T29] audit: type=1326 audit(1216.766:23756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25335 comm="syz.8.7872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64ee18e9a9 code=0x7ffc0000 [ 448.763161][T25345] Falling back ldisc for ttyS3. [ 448.956776][T25370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=25370 comm=syz.1.7883 [ 449.022517][T25376] netlink: 'syz.9.7888': attribute type 39 has an invalid length. [ 449.413919][T25400] ================================================================== [ 449.422046][T25400] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 449.430994][T25400] [ 449.433330][T25400] read to 0xffff888127ac82a0 of 4 bytes by task 25397 on cpu 0: [ 449.440980][T25400] selinux_inode_permission+0x2a7/0x620 [ 449.446544][T25400] security_inode_permission+0x6d/0xb0 [ 449.452061][T25400] inode_permission+0x106/0x310 [ 449.456950][T25400] link_path_walk+0x162/0x900 [ 449.461651][T25400] path_openat+0x1de/0x2170 [ 449.466175][T25400] do_filp_open+0x109/0x230 [ 449.470698][T25400] do_sys_openat2+0xa6/0x110 [ 449.475307][T25400] __x64_sys_openat+0xf2/0x120 [ 449.480122][T25400] x64_sys_call+0x1af/0x2fb0 [ 449.484754][T25400] do_syscall_64+0xd2/0x200 [ 449.489270][T25400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.495181][T25400] [ 449.497556][T25400] write to 0xffff888127ac82a0 of 4 bytes by task 25400 on cpu 1: [ 449.505294][T25400] selinux_inode_permission+0x31b/0x620 [ 449.510915][T25400] security_inode_permission+0x6d/0xb0 [ 449.516394][T25400] inode_permission+0x106/0x310 [ 449.521262][T25400] link_path_walk+0x162/0x900 [ 449.525956][T25400] path_lookupat+0x63/0x2a0 [ 449.530472][T25400] do_o_path+0x45/0x130 [ 449.534652][T25400] path_openat+0x1df9/0x2170 [ 449.539276][T25400] do_filp_open+0x109/0x230 [ 449.543797][T25400] io_openat2+0x272/0x390 [ 449.548144][T25400] io_openat+0x1b/0x30 [ 449.552219][T25400] __io_issue_sqe+0xfb/0x2e0 [ 449.556856][T25400] io_issue_sqe+0x53/0x970 [ 449.561312][T25400] io_submit_sqes+0x667/0xfd0 [ 449.566032][T25400] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 449.571604][T25400] __x64_sys_io_uring_enter+0x78/0x90 [ 449.576992][T25400] x64_sys_call+0x28c8/0x2fb0 [ 449.581687][T25400] do_syscall_64+0xd2/0x200 [ 449.586298][T25400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.592229][T25400] [ 449.594588][T25400] value changed: 0x00000000 -> 0x00000001 [ 449.600337][T25400] [ 449.602682][T25400] Reported by Kernel Concurrency Sanitizer on: [ 449.608847][T25400] CPU: 1 UID: 0 PID: 25400 Comm: syz.4.7898 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 449.619714][T25400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.629877][T25400] ================================================================== [ 458.037974][ T9388] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 458.046519][ T9388] ref_tracker: lo@ffff88810c654550 has 1/1 users at [ 458.046519][ T9388] netdev_get_by_index+0x13e/0x1b0 [ 458.046519][ T9388] fib6_nh_init+0xeb/0x15a0 [ 458.046519][ T9388] rtm_new_nexthop+0x1dd8/0x4530 [ 458.046519][ T9388] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 458.046519][ T9388] netlink_rcv_skb+0x120/0x220 [ 458.046519][ T9388] rtnetlink_rcv+0x1c/0x30 [ 458.046519][ T9388] netlink_unicast+0x5a8/0x680 [ 458.046519][ T9388] netlink_sendmsg+0x58b/0x6b0 [ 458.046519][ T9388] __sock_sendmsg+0x145/0x180 [ 458.046519][ T9388] ____sys_sendmsg+0x345/0x4e0 [ 458.046519][ T9388] ___sys_sendmsg+0x17b/0x1d0 [ 458.046519][ T9388] __sys_sendmmsg+0x178/0x300 [ 458.046519][ T9388] __x64_sys_sendmmsg+0x57/0x70 [ 458.046519][ T9388] x64_sys_call+0x2f2f/0x2fb0 [ 458.046519][ T9388] do_syscall_64+0xd2/0x200 [ 458.046519][ T9388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.046519][ T9388]