last executing test programs: 27.574469103s ago: executing program 3 (id=808): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='[\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000300000014000480050003000100000005000300800000000800020003000000"], 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) r3 = socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x7f, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000001c0)=0x8, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 27.525689178s ago: executing program 3 (id=812): symlink(0x0, 0x0) 27.49419683s ago: executing program 3 (id=814): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/113, 0x71}, {0x0}], 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000380)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @opaque="dafc3fec9b284c93cf0da2c96b67919fb5146b8da82ae0aeddf99df0c319ce53"}}}}}}, 0x4e) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000000c0)=0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ftruncate(r8, 0x8) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x1, 0x0) 27.099168482s ago: executing program 3 (id=824): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000c5e375ec2cd5a400000000007e6782a5924f1c1b1e2e28fcd2fb321a5c87169d7774229773c1a18038942ef9352bb30d273b44c5be33b3feb19937b72ad50ea2b19ccf55aba8b1eec89089022fbb6927072974b51a9bc5b5797effb50cfe31293733553e451774ffe8c75a0aec29158103a78ef084ab1320da639d47f741a1c374f88168a9f6e3d210321d94a5494d15f0bd69acb94b5bc4a108aec6af7ca967a1581589d5e6a7ce6584257f9ded0a9dceb335a200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500002800640000040001a9d22144d418c0000000000000"], 0x0) write(r0, &(0x7f0000004200)='t', 0x1) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) 26.87399275s ago: executing program 3 (id=830): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 26.511938729s ago: executing program 1 (id=837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) setreuid(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x7, 0x0, &(0x7f00000004c0)=0x0) timer_getoverrun(r2) 26.418743717s ago: executing program 1 (id=838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 26.237265461s ago: executing program 3 (id=839): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a"], 0x70}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 26.213230363s ago: executing program 32 (id=839): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a"], 0x70}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 26.152729048s ago: executing program 1 (id=843): r0 = io_uring_setup(0x75c0, &(0x7f0000000980)={0x0, 0xdfef, 0x1000, 0x2, 0x3de}) r1 = syz_io_uring_setup(0xd0f, &(0x7f0000000900)={0x0, 0x66ab, 0x80, 0xffffffff, 0xbfdffffc, 0x0, r0}, &(0x7f0000000a00)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0xc0}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r6, &(0x7f0000001100)=[{&(0x7f0000000f80)="5b1a127334a15bb722da0e35ef37b6d1b8fc852e20a02c4614d29a0aac35f75d86b7f6aba3049e391f4eae6c579b939f115e44bbccbce7fa6cf02b71407e81a011e2d82429d1264b61fa8c00a807a5c57a6e8e6dc32c6ab56d0a17ca16e6af9380c61efb8cc7d8b63e792ccf869848578e727f8398c2fd694ceb32bd6bdc74c845e915f09f32a749faea23bb31ccf22c3a8b3cfea588e7df9e4f8014292e141840b5ca4c5f", 0xa5}, {&(0x7f0000001040)="137322758281d13c3709498d8972b1d0a2492ea69b198bb98a6a8c34a377288bec6f2cf337adbd8bde55d90d61282043444a0650eba8077da6df15113eae3b8c06679ae19975441ebd9c40aaec1449c2afd54f6d4e59300f08e571806136498de1ed9255d292b3cb40ca41d7d2bfeb3de7b05ce079aff47255776108febbd1b5a1cef5ae9517b81eb6ffd9", 0x8b}], 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r4, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x560, 0x0, 0x0, 0x338, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'gre0\x00', 'bond0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x200, [0x1000, 0x3], 0x0, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback, 0x0, 0x3f}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xe979eab540ef6e66, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'lo\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0xf9, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) io_uring_enter(r1, 0x4047f6, 0x6c7b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 25.868017401s ago: executing program 1 (id=848): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000c5e375ec2cd5a400000000007e6782a5924f1c1b1e2e28fcd2fb321a5c87169d7774229773c1a18038942ef9352bb30d273b44c5be33b3feb19937b72ad50ea2b19ccf55aba8b1eec89089022fbb6927072974b51a9bc5b5797effb50cfe31293733553e451774ffe8c75a0aec29158103a78ef084ab1320da639d47f741a1c374f88168a9f6e3d210321d94a5494d15f0bd69acb94b5bc4a108aec6af7ca967a1581589d5e6a7ce6584257f9ded0a9dceb335a200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500002800640000040001a9d22144d418c0000000000000"], 0x0) write(r0, &(0x7f0000004200)='t', 0x1) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) 25.644016169s ago: executing program 1 (id=852): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32=r0], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1c", 0x12) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000040000000000018110000cc72c83c2dece1dc156dac6c8aacdb2a6a35ed8cca276b7a1edf76da5d9c88fc628f367ef93e2bf9f3670e", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$inet(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) 25.223107134s ago: executing program 2 (id=858): r0 = io_uring_setup(0x75c0, &(0x7f0000000980)={0x0, 0xdfef, 0x1000, 0x2, 0x3de}) r1 = syz_io_uring_setup(0xd0f, &(0x7f0000000900)={0x0, 0x66ab, 0x80, 0xffffffff, 0xbfdffffc, 0x0, r0}, &(0x7f0000000a00)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0xc0}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r6, &(0x7f0000001100)=[{&(0x7f0000000f80)="5b1a127334a15bb722da0e35ef37b6d1b8fc852e20a02c4614d29a0aac35f75d86b7f6aba3049e391f4eae6c579b939f115e44bbccbce7fa6cf02b71407e81a011e2d82429d1264b61fa8c00a807a5c57a6e8e6dc32c6ab56d0a17ca16e6af9380c61efb8cc7d8b63e792ccf869848578e727f8398c2fd694ceb32bd6bdc74c845e915f09f32a749faea23bb31ccf22c3a8b3cfea588e7df9e4f8014292e141840b5ca4c5f", 0xa5}, {&(0x7f0000001040)="137322758281d13c3709498d8972b1d0a2492ea69b198bb98a6a8c34a377288bec6f2cf337adbd8bde55d90d61282043444a0650eba8077da6df15113eae3b8c06679ae19975441ebd9c40aaec1449c2afd54f6d4e59300f08e571806136498de1ed9255d292b3cb40ca41d7d2bfeb3de7b05ce079aff47255776108febbd1b5a1cef5ae9517b81eb6ffd9", 0x8b}], 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r4, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x560, 0x0, 0x0, 0x338, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'gre0\x00', 'bond0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x200, [0x1000, 0x3], 0x0, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback, 0x0, 0x3f}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xe979eab540ef6e66, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'lo\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0xf9, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) io_uring_enter(r1, 0x4047f6, 0x6c7b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 25.14059555s ago: executing program 1 (id=859): r0 = io_uring_setup(0x75c0, &(0x7f0000000980)={0x0, 0xdfef, 0x1000, 0x2, 0x3de}) r1 = syz_io_uring_setup(0xd0f, &(0x7f0000000900)={0x0, 0x66ab, 0x80, 0xffffffff, 0xbfdffffc, 0x0, r0}, &(0x7f0000000a00)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0xc0}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r6, &(0x7f0000001100)=[{&(0x7f0000000f80)="5b1a127334a15bb722da0e35ef37b6d1b8fc852e20a02c4614d29a0aac35f75d86b7f6aba3049e391f4eae6c579b939f115e44bbccbce7fa6cf02b71407e81a011e2d82429d1264b61fa8c00a807a5c57a6e8e6dc32c6ab56d0a17ca16e6af9380c61efb8cc7d8b63e792ccf869848578e727f8398c2fd694ceb32bd6bdc74c845e915f09f32a749faea23bb31ccf22c3a8b3cfea588e7df9e4f8014292e141840b5ca4c5f", 0xa5}, {&(0x7f0000001040)="137322758281d13c3709498d8972b1d0a2492ea69b198bb98a6a8c34a377288bec6f2cf337adbd8bde55d90d61282043444a0650eba8077da6df15113eae3b8c06679ae19975441ebd9c40aaec1449c2afd54f6d4e59300f08e571806136498de1ed9255d292b3cb40ca41d7d2bfeb3de7b05ce079aff47255776108febbd1b5a1cef5ae9517b81eb6ffd9", 0x8b}], 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r4, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x560, 0x0, 0x0, 0x338, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'gre0\x00', 'bond0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x200, [0x1000, 0x3], 0x0, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback, 0x0, 0x3f}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xe979eab540ef6e66, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'lo\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0xf9, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) epoll_create1(0x0) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) io_uring_enter(r1, 0x4047f6, 0x6c7b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 25.14033592s ago: executing program 33 (id=859): r0 = io_uring_setup(0x75c0, &(0x7f0000000980)={0x0, 0xdfef, 0x1000, 0x2, 0x3de}) r1 = syz_io_uring_setup(0xd0f, &(0x7f0000000900)={0x0, 0x66ab, 0x80, 0xffffffff, 0xbfdffffc, 0x0, r0}, &(0x7f0000000a00)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0xc0}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r6, &(0x7f0000001100)=[{&(0x7f0000000f80)="5b1a127334a15bb722da0e35ef37b6d1b8fc852e20a02c4614d29a0aac35f75d86b7f6aba3049e391f4eae6c579b939f115e44bbccbce7fa6cf02b71407e81a011e2d82429d1264b61fa8c00a807a5c57a6e8e6dc32c6ab56d0a17ca16e6af9380c61efb8cc7d8b63e792ccf869848578e727f8398c2fd694ceb32bd6bdc74c845e915f09f32a749faea23bb31ccf22c3a8b3cfea588e7df9e4f8014292e141840b5ca4c5f", 0xa5}, {&(0x7f0000001040)="137322758281d13c3709498d8972b1d0a2492ea69b198bb98a6a8c34a377288bec6f2cf337adbd8bde55d90d61282043444a0650eba8077da6df15113eae3b8c06679ae19975441ebd9c40aaec1449c2afd54f6d4e59300f08e571806136498de1ed9255d292b3cb40ca41d7d2bfeb3de7b05ce079aff47255776108febbd1b5a1cef5ae9517b81eb6ffd9", 0x8b}], 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r4, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x560, 0x0, 0x0, 0x338, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'gre0\x00', 'bond0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x200, [0x1000, 0x3], 0x0, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback, 0x0, 0x3f}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xe979eab540ef6e66, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'lo\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0xf9, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) epoll_create1(0x0) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) io_uring_enter(r1, 0x4047f6, 0x6c7b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 25.031064429s ago: executing program 2 (id=861): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40010) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="000000904abaf7ba7700"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x4af, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 24.965756684s ago: executing program 2 (id=863): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) pread64(r1, &(0x7f0000000340)=""/254, 0xfe, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x5c36c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r3}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc937ef7c5f8ce81f}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x34, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400a0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x14) r11 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newqdisc={0xa0, 0x24, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {0xa, 0x5}, {0x5, 0x8}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0xe2, 0x5, 0x6f1, 0x1, 0x0, 0x4, 0x5}}, {0xe, 0x2, [0xff, 0x8, 0x0, 0x101, 0x2]}}, {{0x1c, 0x1, {0x9, 0x8, 0x3ff, 0x6, 0x2, 0x9, 0x3ff, 0x3}}, {0xa, 0x2, [0x3, 0x4, 0x7]}}, {{0x1c, 0x1, {0x9, 0x6, 0x1, 0xd98, 0x0, 0x9b, 0x1, 0xfffffffffffffff1}}, {0x6, 0x2, [0x100]}}]}]}, 0xa0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 24.513399551s ago: executing program 2 (id=864): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000c5e375ec2cd5a400000000007e6782a5924f1c1b1e2e28fcd2fb321a5c87169d7774229773c1a18038942ef9352bb30d273b44c5be33b3feb19937b72ad50ea2b19ccf55aba8b1eec89089022fbb6927072974b51a9bc5b5797effb50cfe31293733553e451774ffe8c75a0aec29158103a78ef084ab1320da639d47f741a1c374f88168a9f6e3d210321d94a5494d15f0bd69acb94b5bc4a108aec6af7ca967a1581589d5e6a7ce6584257f9ded0a9dceb335a200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500002800640000040001a9d22144d418c0000000000000"], 0x0) write(r0, &(0x7f0000004200)='t', 0x1) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) 24.333369915s ago: executing program 2 (id=865): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 24.079563376s ago: executing program 2 (id=867): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10400, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b708000000000e007b8af80800000000000000000000000007020000f8ffffffb703000008000000b704000800000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={0x0, 0x9, 0x0, [0x10001, 0x7, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0xa, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0x5, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x8000000000001, 0xfffffffffffffff8, 0x9, 0x5, 0x1ff, 0x1, 0x4, 0x6, 0x401, 0x40, 0x4, 0x100, 0x81df244, 0x100000001, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x100200001, 0xb3, 0x8, 0x4, 0x5, 0x1, 0x9, 0xa24, 0xb10, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x0, 0x1, 0xfff, 0x6, 0x2000000, 0x800000000005, 0x18, 0x8, 0x7fe, 0x4000000200, 0x3, 0xe3, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x5e5, 0x6, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0x2, 0x1000, 0x80000001, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0x80ff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000017c0)={0x0, "0e7b325e69132379da3a5fc95f955a35"}) socket$inet(0x2, 0x7, 0x20004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8000, 0x2, 0x1, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsm_set_self_attr(0x69, 0x0, 0x21, 0x0) r6 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r10, 0x567, 0x0, 0x0, 0x0, 0x0) 24.075371686s ago: executing program 34 (id=867): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10400, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b708000000000e007b8af80800000000000000000000000007020000f8ffffffb703000008000000b704000800000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={0x0, 0x9, 0x0, [0x10001, 0x7, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0xa, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0x5, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x8000000000001, 0xfffffffffffffff8, 0x9, 0x5, 0x1ff, 0x1, 0x4, 0x6, 0x401, 0x40, 0x4, 0x100, 0x81df244, 0x100000001, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x100200001, 0xb3, 0x8, 0x4, 0x5, 0x1, 0x9, 0xa24, 0xb10, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x0, 0x1, 0xfff, 0x6, 0x2000000, 0x800000000005, 0x18, 0x8, 0x7fe, 0x4000000200, 0x3, 0xe3, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x5e5, 0x6, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0x2, 0x1000, 0x80000001, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0x80ff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000017c0)={0x0, "0e7b325e69132379da3a5fc95f955a35"}) socket$inet(0x2, 0x7, 0x20004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8000, 0x2, 0x1, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsm_set_self_attr(0x69, 0x0, 0x21, 0x0) r6 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r10, 0x567, 0x0, 0x0, 0x0, 0x0) 12.196003115s ago: executing program 6 (id=1047): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 12.14804575s ago: executing program 6 (id=1048): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) setreuid(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x7, 0x0, &(0x7f00000004c0)=0x0) timer_getoverrun(r2) 12.070597246s ago: executing program 6 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (fail_nth: 10) 11.548583728s ago: executing program 6 (id=1052): socket$kcm(0x23, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x66, &(0x7f00000006c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x30, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x67, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic={0x0, 0x4, "262dffae"}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x4}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r0 = gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = epoll_create1(0x80000) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x7f36be39) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000004680)={0xe0000016}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc, r4, &(0x7f0000000080)='E', 0x1, 0x8000}]) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x6, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000780)) 10.358264974s ago: executing program 6 (id=1066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32], 0x20}}, 0x10) 9.923455869s ago: executing program 6 (id=1072): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000540)={0x0, &(0x7f0000000480)}) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) 9.900856071s ago: executing program 35 (id=1072): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000540)={0x0, &(0x7f0000000480)}) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) 1.844920631s ago: executing program 7 (id=1263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1.802080365s ago: executing program 7 (id=1266): syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="ba387dac586d1e8bae000000000000fd10e5859152000000000000000000000015c22662cdc83b19a7cab5f6a330e34098f30f96003af9c8c14bf4bde839a2faa978774e213ccef2e6b3ebb8c54b4309c417f1e11be6d28cf81c703e283f9b9f4a6025399065e14896e685ef8b1d427826cf0e753013a5f47db018664485994784bd2fa7e2edac552797a75cb21d051f35587e696ad7155cc994464f611e302b3ddcb1fbba0c2172b8334622d7e6120957473711d1864c01ace6b85030768eba11da5f01875944f64c3c8d4c50c0505c2d0115acd21ed14a56893467f03d1fcf5720", @ANYRES64=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x9, 0x20}, 0xc) sendmsg$inet6(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x14}], 0x1}, 0x40008d4) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r7 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000100)='#', 0x1}], 0x1) r8 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) read(r8, &(0x7f0000000180)=""/240, 0xf0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x60bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa}, {0xffff, 0xd}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 1.596419782s ago: executing program 7 (id=1271): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) setreuid(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x7, 0x0, &(0x7f00000004c0)=0x0) timer_getoverrun(r2) 1.553887255s ago: executing program 7 (id=1272): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x7, &(0x7f00000003c0)=[{0x6, 0x6, 0x7, 0x7f}, {0x9, 0x3c, 0x10, 0x6}, {0x0, 0x2, 0x58, 0x2}, {0x2, 0x7, 0x3, 0x3}, {0x2, 0x1, 0x0, 0x7}, {0x4, 0x1, 0xe, 0x2}, {0x6, 0x2, 0x3, 0xd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0}, 0x94) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = signalfd(r1, &(0x7f0000000080)={[0x2]}, 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000f00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000100)='./file0/file0\x00', 0x126a4b5, &(0x7f00000021c0)=ANY=[@ANYRES16=r7, @ANYRES64=r5, @ANYRES16=r4, @ANYRES16=r7, @ANYRESDEC=r6, @ANYRES16=r3, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES64], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000b00)={{r2}, r4, 0x0, @inherit={0x58, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000100020000000000008007000000000000000400000000000000000000000000e000002daa0000000008000100000000ab00"/71]}, @name="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"}) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r10}, &(0x7f0000001c00), &(0x7f0000001c40)=r11}, 0x20) syz_clone(0xc0126080, 0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) 1.336973443s ago: executing program 0 (id=1278): r0 = memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x2e, 0x4608, @void}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x5c36c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000000}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newqdisc={0xa0, 0x24, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {0xa, 0x5}, {0x5, 0x8}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0xe2, 0x5, 0x6f1, 0x1, 0x0, 0x4, 0x5}}, {0xe, 0x2, [0xff, 0x8, 0x0, 0x101, 0x2]}}, {{0x1c, 0x1, {0x9, 0x8, 0x3ff, 0x6, 0x2, 0x9, 0x3ff, 0x3}}, {0xa, 0x2, [0x3, 0x4, 0x7]}}, {{0x1c, 0x1, {0x9, 0x6, 0x1, 0xd98, 0x0, 0x9b, 0x1, 0xfffffffffffffff1}}, {0x6, 0x2, [0x100]}}]}]}, 0xa0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 1.254152869s ago: executing program 0 (id=1281): r0 = io_uring_setup(0x75c0, &(0x7f0000000980)={0x0, 0xdfef, 0x1000, 0x2, 0x3de}) r1 = syz_io_uring_setup(0xd0f, &(0x7f0000000900)={0x0, 0x66ab, 0x80, 0xffffffff, 0xbfdffffc, 0x0, r0}, &(0x7f0000000a00)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0xc0}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r6, &(0x7f0000001100)=[{&(0x7f0000000f80)="5b1a127334a15bb722da0e35ef37b6d1b8fc852e20a02c4614d29a0aac35f75d86b7f6aba3049e391f4eae6c579b939f115e44bbccbce7fa6cf02b71407e81a011e2d82429d1264b61fa8c00a807a5c57a6e8e6dc32c6ab56d0a17ca16e6af9380c61efb8cc7d8b63e792ccf869848578e727f8398c2fd694ceb32bd6bdc74c845e915f09f32a749faea23bb31ccf22c3a8b3cfea588e7df9e4f8014292e141840b5ca4c5f", 0xa5}, {&(0x7f0000001040)="137322758281d13c3709498d8972b1d0a2492ea69b198bb98a6a8c34a377288bec6f2cf337adbd8bde55d90d61282043444a0650eba8077da6df15113eae3b8c06679ae19975441ebd9c40aaec1449c2afd54f6d4e59300f08e571806136498de1ed9255d292b3cb40ca41d7d2bfeb3de7b05ce079aff47255776108febbd1b5a1cef5ae9517b81eb6ffd9", 0x8b}], 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r4, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x560, 0x0, 0x0, 0x338, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'gre0\x00', 'bond0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x200, [0x1000, 0x3], 0x0, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback, 0x0, 0x3f}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xe979eab540ef6e66, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'lo\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0xf9, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r8 = epoll_create1(0x0) vmsplice(r8, 0x0, 0x0, 0xa) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) io_uring_enter(r1, 0x4047f6, 0x6c7b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 1.194040794s ago: executing program 4 (id=1284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4], 0x20}}, 0x10) 1.193475085s ago: executing program 4 (id=1285): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1.178303835s ago: executing program 0 (id=1286): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) 1.170718366s ago: executing program 4 (id=1287): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32=r0], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1c", 0x12) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000040000000000018110000cc72c83c2dece1dc156dac6c8aacdb2a6a35ed8cca276b7a1edf76da5d9c88fc628f367ef93e2bf9f3670e", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$inet(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.151328048s ago: executing program 0 (id=1288): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001040)='/sys/power/pm_print_times', 0x8042, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="869bf43593a9691d7fec40de09304d586f8807fc19fb35e12ce64bca9f23533493889ad49ac184cdbd5ef8072aab04a0ad051cda6936e12c29c721c758fc56e869a0d8503230fa7e341f42b947"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_clone(0x66901080, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x7, 0x9) write$P9_RWRITE(r6, &(0x7f0000000040)={0xb}, 0x11000) msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000000"], 0x1008, 0x800) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x2, 0x2}) sendfile(r0, r0, 0x0, 0xb) 676.539286ms ago: executing program 8 (id=1297): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 674.320366ms ago: executing program 7 (id=1298): r0 = io_uring_setup(0x75c0, &(0x7f0000000980)={0x0, 0xdfef, 0x1000, 0x2, 0x3de}) r1 = syz_io_uring_setup(0xd0f, &(0x7f0000000900)={0x0, 0x66ab, 0x80, 0xffffffff, 0xbfdffffc, 0x0, r0}, &(0x7f0000000a00)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0xc0}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r6, &(0x7f0000001100)=[{&(0x7f0000000f80)="5b1a127334a15bb722da0e35ef37b6d1b8fc852e20a02c4614d29a0aac35f75d86b7f6aba3049e391f4eae6c579b939f115e44bbccbce7fa6cf02b71407e81a011e2d82429d1264b61fa8c00a807a5c57a6e8e6dc32c6ab56d0a17ca16e6af9380c61efb8cc7d8b63e792ccf869848578e727f8398c2fd694ceb32bd6bdc74c845e915f09f32a749faea23bb31ccf22c3a8b3cfea588e7df9e4f8014292e141840b5ca4c5f", 0xa5}, {&(0x7f0000001040)="137322758281d13c3709498d8972b1d0a2492ea69b198bb98a6a8c34a377288bec6f2cf337adbd8bde55d90d61282043444a0650eba8077da6df15113eae3b8c06679ae19975441ebd9c40aaec1449c2afd54f6d4e59300f08e571806136498de1ed9255d292b3cb40ca41d7d2bfeb3de7b05ce079aff47255776108febbd1b5a1cef5ae9517b81eb6ffd9", 0x8b}], 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r4, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x560, 0x0, 0x0, 0x338, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'gre0\x00', 'bond0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x200, [0x1000, 0x3], 0x0, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback, 0x0, 0x3f}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xe979eab540ef6e66, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'lo\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0xf9, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r8 = epoll_create1(0x0) vmsplice(r8, 0x0, 0x0, 0xa) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) io_uring_enter(r1, 0x4047f6, 0x6c7b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 612.671661ms ago: executing program 5 (id=1299): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) 600.426652ms ago: executing program 5 (id=1300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, 0x0, 0x0) 596.447332ms ago: executing program 8 (id=1301): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="ba387dac586d1e8bae000000000000fd10e5859152000000000000000000000015c22662cdc83b19a7cab5f6a330e34098f30f96003af9c8c14bf4bde839a2faa978774e213ccef2e6b3ebb8c54b4309c417f1e11be6d28cf81c703e283f9b9f4a6025399065e14896e685ef8b1d427826cf0e753013a5f47db018664485994784bd2fa7e2edac552797a75cb21d051f35587e696ad7155cc994464f611e302b3ddcb1fbba0c2172b8334622d7e6120957473711d1864c01ace6b85030768eba11da5f01875944f64c3c8d4c50c0505c2d0115acd21ed14a56893467f03d1fcf5720", @ANYRES64=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x9, 0x20}, 0xc) sendmsg$inet6(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x14}], 0x1}, 0x40008d4) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r7 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000100)='#', 0x1}], 0x1) r8 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) read(r8, &(0x7f0000000180)=""/240, 0xf0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x60bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa}, {0xffff, 0xd}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 499.04764ms ago: executing program 7 (id=1302): futimesat(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) read(r1, &(0x7f0000000180)=""/240, 0xf0) 331.962824ms ago: executing program 5 (id=1303): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x8000000, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x3e}, 0x28) 303.275986ms ago: executing program 5 (id=1304): r0 = memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x2e, 0x4608, @void}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x5c36c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000000}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newqdisc={0xa0, 0x24, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {0xa, 0x5}, {0x5, 0x8}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0xe2, 0x5, 0x6f1, 0x1, 0x0, 0x4, 0x5}}, {0xe, 0x2, [0xff, 0x8, 0x0, 0x101, 0x2]}}, {{0x1c, 0x1, {0x9, 0x8, 0x3ff, 0x6, 0x2, 0x9, 0x3ff, 0x3}}, {0xa, 0x2, [0x3, 0x4, 0x7]}}, {{0x1c, 0x1, {0x9, 0x6, 0x1, 0xd98, 0x0, 0x9b, 0x1, 0xfffffffffffffff1}}, {0x6, 0x2, [0x100]}}]}]}, 0xa0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 286.282908ms ago: executing program 0 (id=1305): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 254.84349ms ago: executing program 5 (id=1306): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0x7, 0x0, 0x71bd2a, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x38}, 0x1, 0x7}, 0x0) 226.258792ms ago: executing program 5 (id=1307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) syz_pidfd_open(r4, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x0, 0xf}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='mm_shrink_slab_start\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, 0x0, &(0x7f0000000a40)=r5}, 0x20) 217.302773ms ago: executing program 4 (id=1308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4], 0x20}}, 0x10) 199.887574ms ago: executing program 0 (id=1309): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x7, &(0x7f00000003c0)=[{0x6, 0x6, 0x7, 0x7f}, {0x9, 0x3c, 0x10, 0x6}, {0x0, 0x2, 0x58, 0x2}, {0x2, 0x7, 0x3, 0x3}, {0x2, 0x1, 0x0, 0x7}, {0x4, 0x1, 0xe, 0x2}, {0x6, 0x2, 0x3, 0xd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0}, 0x94) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = signalfd(r1, &(0x7f0000000080)={[0x2]}, 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000f00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000100)='./file0/file0\x00', 0x126a4b5, &(0x7f00000021c0)=ANY=[@ANYRES16=r7, @ANYRES64=r5, @ANYRES16=r4, @ANYRES16=r7, @ANYRESDEC=r6, @ANYRES16=r3, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9d4fce495ea2ea250", @ANYRESHEX=0x0, @ANYRES64], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000b00)={{r2}, r4, 0x0, @inherit={0x58, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000100020000000000008007000000000000000400000000000000000000000000e000002daa0000000008000100000000ab00"/71]}, @name="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"}) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r10}, &(0x7f0000001c00), &(0x7f0000001c40)=r11}, 0x20) syz_clone(0xc0126080, 0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) 185.756066ms ago: executing program 8 (id=1310): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) setreuid(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x7, 0x0, &(0x7f00000004c0)=0x0) timer_getoverrun(r2) 149.812059ms ago: executing program 8 (id=1311): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) 149.368329ms ago: executing program 8 (id=1312): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 113.197621ms ago: executing program 4 (id=1313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, 0x0, 0x0) 92.351633ms ago: executing program 8 (id=1314): r0 = io_uring_setup(0x75c0, &(0x7f0000000980)={0x0, 0xdfef, 0x1000, 0x2, 0x3de}) r1 = syz_io_uring_setup(0xd0f, &(0x7f0000000900)={0x0, 0x66ab, 0x80, 0xffffffff, 0xbfdffffc, 0x0, r0}, &(0x7f0000000a00)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0xc0}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r6, &(0x7f0000001100)=[{&(0x7f0000000f80)="5b1a127334a15bb722da0e35ef37b6d1b8fc852e20a02c4614d29a0aac35f75d86b7f6aba3049e391f4eae6c579b939f115e44bbccbce7fa6cf02b71407e81a011e2d82429d1264b61fa8c00a807a5c57a6e8e6dc32c6ab56d0a17ca16e6af9380c61efb8cc7d8b63e792ccf869848578e727f8398c2fd694ceb32bd6bdc74c845e915f09f32a749faea23bb31ccf22c3a8b3cfea588e7df9e4f8014292e141840b5ca4c5f", 0xa5}, {&(0x7f0000001040)="137322758281d13c3709498d8972b1d0a2492ea69b198bb98a6a8c34a377288bec6f2cf337adbd8bde55d90d61282043444a0650eba8077da6df15113eae3b8c06679ae19975441ebd9c40aaec1449c2afd54f6d4e59300f08e571806136498de1ed9255d292b3cb40ca41d7d2bfeb3de7b05ce079aff47255776108febbd1b5a1cef5ae9517b81eb6ffd9", 0x8b}], 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r4, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x560, 0x0, 0x0, 0x338, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'gre0\x00', 'bond0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x200, [0x1000, 0x3], 0x0, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback, 0x0, 0x3f}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xe979eab540ef6e66, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'lo\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0xf9, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r8 = epoll_create1(0x0) vmsplice(r8, 0x0, 0x0, 0xa) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) io_uring_enter(r1, 0x4047f6, 0x6c7b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 0s ago: executing program 4 (id=1315): r0 = io_uring_setup(0x75c0, &(0x7f0000000980)={0x0, 0xdfef, 0x1000, 0x2, 0x3de}) r1 = syz_io_uring_setup(0xd0f, &(0x7f0000000900)={0x0, 0x66ab, 0x80, 0xffffffff, 0xbfdffffc, 0x0, r0}, &(0x7f0000000a00)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0xc0}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r6, &(0x7f0000001100)=[{&(0x7f0000000f80)="5b1a127334a15bb722da0e35ef37b6d1b8fc852e20a02c4614d29a0aac35f75d86b7f6aba3049e391f4eae6c579b939f115e44bbccbce7fa6cf02b71407e81a011e2d82429d1264b61fa8c00a807a5c57a6e8e6dc32c6ab56d0a17ca16e6af9380c61efb8cc7d8b63e792ccf869848578e727f8398c2fd694ceb32bd6bdc74c845e915f09f32a749faea23bb31ccf22c3a8b3cfea588e7df9e4f8014292e141840b5ca4c5f", 0xa5}, {&(0x7f0000001040)="137322758281d13c3709498d8972b1d0a2492ea69b198bb98a6a8c34a377288bec6f2cf337adbd8bde55d90d61282043444a0650eba8077da6df15113eae3b8c06679ae19975441ebd9c40aaec1449c2afd54f6d4e59300f08e571806136498de1ed9255d292b3cb40ca41d7d2bfeb3de7b05ce079aff47255776108febbd1b5a1cef5ae9517b81eb6ffd9", 0x8b}], 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r4, @ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x560, 0x0, 0x0, 0x338, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'gre0\x00', 'bond0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x200, [0x1000, 0x3], 0x0, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback, 0x0, 0x3f}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xe979eab540ef6e66, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'lo\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0xf9, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) io_uring_enter(r1, 0x4047f6, 0x6c7b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): 61: corrupted inode contents [ 67.495178][ T5313] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 67.588421][ T5277] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.661: mark_inode_dirty error [ 67.646346][ T5316] loop3: detected capacity change from 0 to 2048 [ 67.667249][ T5313] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.716576][ T5277] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.661: corrupted inode contents [ 67.790282][ T5277] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.661: mark_inode_dirty error [ 67.807078][ T5323] netlink: 'syz.0.675': attribute type 1 has an invalid length. [ 67.838036][ T5277] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.661: corrupted inode contents [ 67.860571][ T5323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.905878][ T5325] bond1 (unregistering): Released all slaves [ 67.926896][ T5277] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 67.960025][ T5323] rdma_op ffff88811bb24d80 conn xmit_rdma 0000000000000000 [ 67.969054][ T5277] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.661: corrupted inode contents [ 68.028061][ T5329] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 68.036928][ T5277] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.661: mark_inode_dirty error [ 68.076732][ T5277] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 68.152350][ T5277] EXT4-fs (loop2): 1 truncate cleaned up [ 68.176495][ T5277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.308319][ T5316] loop3: p1 < > p4 [ 68.318292][ T5316] loop3: p4 size 8388608 extends beyond EOD, truncated [ 68.341110][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.426034][ T29] kauditd_printk_skb: 872 callbacks suppressed [ 68.426049][ T29] audit: type=1326 audit(1755064369.179:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58aa0cebe9 code=0x7ffc0000 [ 68.468943][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 68.477614][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 68.495609][ T5351] sd 0:0:1:0: device reset [ 68.512802][ T29] audit: type=1326 audit(1755064369.179:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58aa0cebe9 code=0x7ffc0000 [ 68.522411][ T5354] IPv4: Oversized IP packet from 127.202.26.0 [ 68.536286][ T29] audit: type=1326 audit(1755064369.179:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58aa0cebe9 code=0x7ffc0000 [ 68.565767][ T29] audit: type=1326 audit(1755064369.179:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58aa0cebe9 code=0x7ffc0000 [ 68.597433][ T29] audit: type=1326 audit(1755064369.179:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58aa0cebe9 code=0x7ffc0000 [ 68.621207][ T29] audit: type=1326 audit(1755064369.179:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58aa0cebe9 code=0x7ffc0000 [ 68.640699][ T5356] loop2: detected capacity change from 0 to 2048 [ 68.644741][ T29] audit: type=1326 audit(1755064369.179:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58aa0cebe9 code=0x7ffc0000 [ 68.674933][ T29] audit: type=1326 audit(1755064369.179:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58aa0cebe9 code=0x7ffc0000 [ 68.698387][ T29] audit: type=1326 audit(1755064369.179:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58aa0cebe9 code=0x7ffc0000 [ 68.722081][ T29] audit: type=1326 audit(1755064369.179:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58aa0cebe9 code=0x7ffc0000 [ 68.785160][ T3298] loop2: p1 < > p4 [ 68.797692][ T3298] loop2: p4 size 8388608 extends beyond EOD, truncated [ 68.829697][ T5356] loop2: p1 < > p4 [ 68.837121][ T5356] loop2: p4 size 8388608 extends beyond EOD, truncated [ 68.906917][ T5372] loop4: detected capacity change from 0 to 2048 [ 68.908857][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 68.926130][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 68.929583][ T5372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.950284][ T5378] C: renamed from team_slave_0 [ 69.049221][ T5378] netlink: 'syz.2.693': attribute type 3 has an invalid length. [ 69.074698][ T5381] loop1: detected capacity change from 0 to 2048 [ 69.097160][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 69.144299][ T5381] loop1: p2 p3 p7 [ 69.279684][ T5391] sd 0:0:1:0: device reset [ 69.289184][ T5379] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.692: bg 0: block 234: padding at end of block bitmap is not set [ 69.304033][ T5379] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 69.316596][ T5379] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.316596][ T5379] [ 69.327315][ T5379] EXT4-fs (loop4): Total free blocks count 0 [ 69.333539][ T5379] EXT4-fs (loop4): Free/Dirty block details [ 69.339536][ T5379] EXT4-fs (loop4): free_blocks=0 [ 69.344526][ T5379] EXT4-fs (loop4): dirty_blocks=8208 [ 69.349906][ T5379] EXT4-fs (loop4): Block reservation details [ 69.352121][ T5394] IPv4: Oversized IP packet from 127.202.26.0 [ 69.356018][ T5379] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 69.371801][ T5395] IPv4: Oversized IP packet from 127.202.26.0 [ 69.397069][ T5397] IPv4: Oversized IP packet from 127.202.26.0 [ 69.404823][ T5399] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 69.445138][ T5399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.455822][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 69.523871][ T5399] bond1 (unregistering): Released all slaves [ 69.532533][ T5409] rdma_op ffff88811bb26580 conn xmit_rdma 0000000000000000 [ 69.593462][ T5418] sd 0:0:1:0: device reset [ 69.704183][ T5431] FAULT_INJECTION: forcing a failure. [ 69.704183][ T5431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.717499][ T5431] CPU: 1 UID: 0 PID: 5431 Comm: syz.1.716 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 69.717526][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.717538][ T5431] Call Trace: [ 69.717596][ T5431] [ 69.717605][ T5431] __dump_stack+0x1d/0x30 [ 69.717628][ T5431] dump_stack_lvl+0xe8/0x140 [ 69.717646][ T5431] dump_stack+0x15/0x1b [ 69.717663][ T5431] should_fail_ex+0x265/0x280 [ 69.717683][ T5431] should_fail+0xb/0x20 [ 69.717764][ T5431] should_fail_usercopy+0x1a/0x20 [ 69.717785][ T5431] _copy_from_user+0x1c/0xb0 [ 69.717825][ T5431] bpf_test_init+0xdf/0x160 [ 69.717991][ T5431] bpf_prog_test_run_xdp+0x274/0x910 [ 69.718010][ T5431] ? kstrtouint+0x76/0xc0 [ 69.718028][ T5431] ? __rcu_read_unlock+0x4f/0x70 [ 69.718092][ T5431] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 69.718201][ T5431] bpf_prog_test_run+0x227/0x390 [ 69.718231][ T5431] __sys_bpf+0x4b9/0x7b0 [ 69.718262][ T5431] __x64_sys_bpf+0x41/0x50 [ 69.718284][ T5431] x64_sys_call+0x2aea/0x2ff0 [ 69.718394][ T5431] do_syscall_64+0xd2/0x200 [ 69.718419][ T5431] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.718442][ T5431] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.718511][ T5431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.718532][ T5431] RIP: 0033:0x7fc0da37ebe9 [ 69.718608][ T5431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.718623][ T5431] RSP: 002b:00007fc0d8ddf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.718642][ T5431] RAX: ffffffffffffffda RBX: 00007fc0da5a5fa0 RCX: 00007fc0da37ebe9 [ 69.718654][ T5431] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 69.718725][ T5431] RBP: 00007fc0d8ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 69.718737][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.718822][ T5431] R13: 00007fc0da5a6038 R14: 00007fc0da5a5fa0 R15: 00007ffecf19b188 [ 69.718840][ T5431] [ 69.796860][ T5441] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 69.804793][ T5441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.807263][ T5441] __nla_validate_parse: 12 callbacks suppressed [ 69.807279][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 69.807821][ T5444] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 69.807821][ T5444] program syz.1.722 not setting count and/or reply_len properly [ 69.809766][ T5441] bond1 (unregistering): Released all slaves [ 69.816672][ T5447] sd 0:0:1:0: device reset [ 69.820028][ T5448] FAULT_INJECTION: forcing a failure. [ 69.820028][ T5448] name failslab, interval 1, probability 0, space 0, times 0 [ 69.820053][ T5448] CPU: 1 UID: 0 PID: 5448 Comm: syz.0.721 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 69.820078][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.820089][ T5448] Call Trace: [ 69.820095][ T5448] [ 69.820101][ T5448] __dump_stack+0x1d/0x30 [ 69.820118][ T5448] dump_stack_lvl+0xe8/0x140 [ 69.820133][ T5448] dump_stack+0x15/0x1b [ 69.820148][ T5448] should_fail_ex+0x265/0x280 [ 69.820168][ T5448] should_failslab+0x8c/0xb0 [ 69.820191][ T5448] kmem_cache_alloc_bulk_noprof+0x5b/0x410 [ 69.820220][ T5448] ? kmem_cache_alloc_noprof+0x186/0x310 [ 69.820239][ T5448] ? mas_alloc_nodes+0x265/0x520 [ 69.820265][ T5448] mas_alloc_nodes+0x333/0x520 [ 69.820291][ T5448] mas_preallocate+0x33e/0x520 [ 69.820318][ T5448] mmap_region+0xbdd/0x1630 [ 69.820356][ T5448] do_mmap+0x9b3/0xbe0 [ 69.820395][ T5448] vm_mmap_pgoff+0x17a/0x2e0 [ 69.820425][ T5448] ksys_mmap_pgoff+0xc2/0x310 [ 69.820447][ T5448] ? __x64_sys_mmap+0x49/0x70 [ 69.820466][ T5448] x64_sys_call+0x14a3/0x2ff0 [ 69.820482][ T5448] do_syscall_64+0xd2/0x200 [ 69.820501][ T5448] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.820524][ T5448] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.820546][ T5448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.820566][ T5448] RIP: 0033:0x7f8f0ee1ec23 [ 69.820580][ T5448] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 69.820595][ T5448] RSP: 002b:00007f8f0d886e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 69.820614][ T5448] RAX: ffffffffffffffda RBX: 000000000000054a RCX: 00007f8f0ee1ec23 [ 69.820626][ T5448] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 69.820637][ T5448] RBP: 0000200000000ac2 R08: 00000000ffffffff R09: 0000000000000000 [ 69.820647][ T5448] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 69.820657][ T5448] R13: 00007f8f0d886ef0 R14: 00007f8f0d886eb0 R15: 0000200000000040 [ 69.820672][ T5448] [ 69.833961][ T5441] rdma_op ffff88811acdc180 conn xmit_rdma 0000000000000000 [ 69.866826][ T5452] netlink: 2 bytes leftover after parsing attributes in process `syz.2.725'. [ 69.889606][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 69.984204][ T5471] netlink: 'syz.2.733': attribute type 3 has an invalid length. [ 70.003289][ T5472] IPv4: Oversized IP packet from 127.202.26.0 [ 70.047246][ T5476] sd 0:0:1:0: device reset [ 70.049837][ T5480] netlink: 2 bytes leftover after parsing attributes in process `syz.0.737'. [ 70.194923][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 70.296888][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 70.597977][ T5506] IPv4: Oversized IP packet from 127.202.26.0 [ 70.617852][ T5509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.749'. [ 70.656744][ T5517] loop4: detected capacity change from 0 to 512 [ 70.736845][ T5526] tipc: Started in network mode [ 70.742048][ T5526] tipc: Node identity e0000002, cluster identity 4711 [ 70.748939][ T5526] tipc: Enabling of bearer rejected, failed to enable media [ 70.839721][ T5535] dummy0: entered allmulticast mode [ 70.850998][ T5535] dummy0: left allmulticast mode [ 71.060626][ T5553] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 71.067182][ T5553] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 71.074974][ T5553] vhci_hcd vhci_hcd.0: Device attached [ 71.146132][ T5553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.765'. [ 71.159337][ T5553] ip6gre2: entered allmulticast mode [ 71.166296][ T5562] loop2: detected capacity change from 0 to 1024 [ 71.199627][ T2993] udevd[2993]: worker [3298] terminated by signal 33 (Unknown signal 33) [ 71.211477][ T2993] udevd[2993]: worker [3298] failed while handling '/devices/virtual/block/loop2' [ 71.220125][ T5562] EXT4-fs: Ignoring removed orlov option [ 71.230046][ T5562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.317157][ T5570] netlink: 204 bytes leftover after parsing attributes in process `syz.2.768'. [ 71.351004][ T10] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 71.359259][ T5554] vhci_hcd: connection reset by peer [ 71.365115][ T12] vhci_hcd: stop threads [ 71.369400][ T12] vhci_hcd: release socket [ 71.373918][ T12] vhci_hcd: disconnect device [ 71.457198][ T5579] binfmt_misc: register: failed to install interpreter file ./file0 [ 71.498059][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.521415][ T5582] loop2: detected capacity change from 0 to 512 [ 71.528743][ T5582] EXT4-fs: Ignoring removed nobh option [ 71.537282][ T5584] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.540479][ T5582] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 71.557912][ T5582] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.774: invalid indirect mapped block 2683928664 (level 1) [ 71.573400][ T5582] EXT4-fs (loop2): 1 truncate cleaned up [ 71.579610][ T5582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.609732][ T5582] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.774: Invalid block bitmap block 3 in block_group 0 [ 71.630157][ T5582] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 71.635733][ T5591] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 71.641294][ T5589] syz.3.777 (5589) used greatest stack depth: 9752 bytes left [ 71.653880][ T5593] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 71.657174][ T5582] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.774: invalid indirect mapped block 480848489 (level 1) [ 71.670165][ T5593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.695338][ T5593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 71.715555][ T5591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.725236][ T5595] bond1 (unregistering): Released all slaves [ 71.739174][ T5593] bond1 (unregistering): Released all slaves [ 71.752863][ T5600] sd 0:0:1:0: device reset [ 71.754663][ T5591] rdma_op ffff88811ba7c180 conn xmit_rdma 0000000000000000 [ 71.766590][ T5601] rdma_op ffff88811a1c9d80 conn xmit_rdma 0000000000000000 [ 71.823128][ T5608] IPv4: Oversized IP packet from 127.202.26.0 [ 71.830535][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.902050][ T5615] IPv4: Oversized IP packet from 127.202.26.0 [ 71.915621][ T5621] dummy0: entered allmulticast mode [ 71.926186][ T5621] dummy0: left allmulticast mode [ 71.965255][ T5623] loop4: detected capacity change from 0 to 256 [ 71.987128][ T5629] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 72.001760][ T5629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.014263][ T5625] sd 0:0:1:0: device reset [ 72.023822][ T5623] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 72.031791][ T5623] FAT-fs (loop4): Filesystem has been set read-only [ 72.040107][ T5629] bond1 (unregistering): Released all slaves [ 72.094426][ T5636] rdma_op ffff88811acdf980 conn xmit_rdma 0000000000000000 [ 72.102024][ T5638] netlink: 'syz.2.796': attribute type 29 has an invalid length. [ 72.102499][ T5640] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 72.123870][ T5643] IPv4: Oversized IP packet from 127.202.26.0 [ 72.152482][ T5640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.169370][ T5638] netlink: 'syz.2.796': attribute type 29 has an invalid length. [ 72.186804][ T5646] bond1 (unregistering): Released all slaves [ 72.217521][ T5654] FAULT_INJECTION: forcing a failure. [ 72.217521][ T5654] name failslab, interval 1, probability 0, space 0, times 0 [ 72.230273][ T5654] CPU: 1 UID: 0 PID: 5654 Comm: syz.2.803 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 72.230300][ T5654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.230310][ T5654] Call Trace: [ 72.230316][ T5654] [ 72.230363][ T5654] __dump_stack+0x1d/0x30 [ 72.230383][ T5654] dump_stack_lvl+0xe8/0x140 [ 72.230398][ T5654] dump_stack+0x15/0x1b [ 72.230412][ T5654] should_fail_ex+0x265/0x280 [ 72.230438][ T5654] should_failslab+0x8c/0xb0 [ 72.230505][ T5654] __kmalloc_noprof+0xa5/0x3e0 [ 72.230528][ T5654] ? memcg_list_lru_alloc+0x195/0x490 [ 72.230549][ T5654] memcg_list_lru_alloc+0x195/0x490 [ 72.230573][ T5654] __memcg_slab_post_alloc_hook+0x1a7/0x580 [ 72.230649][ T5654] kmem_cache_alloc_lru_noprof+0x229/0x310 [ 72.230704][ T5654] ? alloc_inode+0x9a/0x170 [ 72.230724][ T5654] alloc_inode+0x9a/0x170 [ 72.230746][ T5654] alloc_anon_inode+0x1e/0x170 [ 72.230765][ T5654] anon_inode_make_secure_inode+0x33/0xf0 [ 72.230860][ T5654] __se_sys_memfd_secret+0xcc/0x230 [ 72.230912][ T5654] __x64_sys_memfd_secret+0x1f/0x30 [ 72.230936][ T5654] x64_sys_call+0x2c81/0x2ff0 [ 72.230958][ T5654] do_syscall_64+0xd2/0x200 [ 72.231058][ T5654] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.231080][ T5654] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 72.231105][ T5654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.231194][ T5654] RIP: 0033:0x7f58aa0cebe9 [ 72.231208][ T5654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.231221][ T5654] RSP: 002b:00007f58a8b2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 72.231241][ T5654] RAX: ffffffffffffffda RBX: 00007f58aa2f5fa0 RCX: 00007f58aa0cebe9 [ 72.231279][ T5654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.231290][ T5654] RBP: 00007f58a8b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.231300][ T5654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.231310][ T5654] R13: 00007f58aa2f6038 R14: 00007f58aa2f5fa0 R15: 00007ffdfc553938 [ 72.231326][ T5654] [ 72.280680][ T5640] rdma_op ffff88811ba7d580 conn xmit_rdma 0000000000000000 [ 72.317568][ T5651] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 72.475932][ T5666] sd 0:0:1:0: device reset [ 72.531864][ T5676] IPv4: Oversized IP packet from 127.202.26.0 [ 72.593090][ T5683] loop2: detected capacity change from 0 to 512 [ 72.608789][ T5686] loop4: detected capacity change from 0 to 2048 [ 72.610192][ T5683] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.623209][ T5683] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.640071][ T5683] EXT4-fs (loop2): 1 truncate cleaned up [ 72.648198][ T5683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.657248][ T5689] IPv4: Oversized IP packet from 127.202.26.0 [ 72.687722][ T5692] sd 0:0:1:0: device reset [ 72.699483][ T3291] loop4: p1 < > p4 [ 72.706602][ T3291] loop4: p4 size 8388608 extends beyond EOD, truncated [ 72.742883][ T5686] loop4: p1 < > p4 [ 72.748446][ T5686] loop4: p4 size 8388608 extends beyond EOD, truncated [ 72.768236][ T5695] sd 0:0:1:0: device reset [ 72.791318][ T2993] loop4: p1 < > p4 [ 72.797333][ T2993] loop4: p4 size 8388608 extends beyond EOD, truncated [ 72.922612][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 72.937074][ T5709] loop3: detected capacity change from 0 to 1024 [ 72.954598][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 72.959221][ T5707] binfmt_misc: register: failed to install interpreter file ./file0 [ 72.988236][ T5709] EXT4-fs: Ignoring removed orlov option [ 73.017080][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 73.022228][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 73.042896][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 73.064325][ T5709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.181198][ T5725] netlink: 'syz.1.829': attribute type 1 has an invalid length. [ 73.207084][ T5725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.218986][ T3315] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 73.255636][ T5725] bond1 (unregistering): Released all slaves [ 73.274389][ T3315] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 73.308898][ T5731] rdma_op ffff88811ac58180 conn xmit_rdma 0000000000000000 [ 73.317227][ T5730] IPv4: Oversized IP packet from 127.202.26.0 [ 73.371308][ T5733] sd 0:0:1:0: device reset [ 73.414261][ T5735] loop1: detected capacity change from 0 to 2048 [ 73.445657][ T5737] SELinux: Context Ü is not valid (left unmapped). [ 73.465594][ T5735] loop1: p1 < > p4 [ 73.470228][ T5735] loop1: p4 size 8388608 extends beyond EOD, truncated [ 73.484364][ T5739] can0: slcan on ttyS3. [ 73.500729][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 73.500763][ T29] audit: type=1326 audit(1755064374.249:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0da37ebe9 code=0x7ffc0000 [ 73.565858][ T29] audit: type=1326 audit(1755064374.289:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0da37ebe9 code=0x7ffc0000 [ 73.589247][ T29] audit: type=1326 audit(1755064374.289:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0da37ebe9 code=0x7ffc0000 [ 73.612869][ T29] audit: type=1326 audit(1755064374.289:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0da37ebe9 code=0x7ffc0000 [ 73.619864][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.636187][ T29] audit: type=1326 audit(1755064374.289:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0da37ebe9 code=0x7ffc0000 [ 73.636213][ T29] audit: type=1326 audit(1755064374.289:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0da37ebe9 code=0x7ffc0000 [ 73.647835][ T5745] IPv4: Oversized IP packet from 127.202.26.0 [ 73.668646][ T29] audit: type=1326 audit(1755064374.289:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0da37ebe9 code=0x7ffc0000 [ 73.721392][ T29] audit: type=1326 audit(1755064374.289:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0da37ebe9 code=0x7ffc0000 [ 73.733612][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 73.744702][ T29] audit: type=1326 audit(1755064374.289:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0da37ebe9 code=0x7ffc0000 [ 73.758165][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 73.777880][ T29] audit: type=1326 audit(1755064374.289:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0da37ebe9 code=0x7ffc0000 [ 73.831156][ T5738] can0 (unregistered): slcan off ttyS3. [ 73.913013][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.938890][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.013473][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.025685][ T5781] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 74.070684][ T5781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.102750][ T5781] bond1 (unregistering): Released all slaves [ 74.145634][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.154782][ T5799] rdma_op ffff88811acdc580 conn xmit_rdma 0000000000000000 [ 74.222968][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.236013][ T5807] loop1: detected capacity change from 0 to 1024 [ 74.252915][ T5807] EXT4-fs: Ignoring removed orlov option [ 74.273602][ T5805] loop4: detected capacity change from 0 to 2048 [ 74.280725][ T5807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.293836][ T5812] IPv4: Oversized IP packet from 127.202.26.0 [ 74.332727][ T5805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.377021][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 74.391898][ T12] bridge_slave_1: left allmulticast mode [ 74.397562][ T12] bridge_slave_1: left promiscuous mode [ 74.403330][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.421340][ T12] bridge_slave_0: left allmulticast mode [ 74.426998][ T3306] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 74.427362][ T12] bridge_slave_0: left promiscuous mode [ 74.427473][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.457317][ T3306] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 74.564086][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.576896][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.587275][ T12] bond0 (unregistering): Released all slaves [ 74.625728][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.638990][ T5821] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.849: bg 0: block 234: padding at end of block bitmap is not set [ 74.654141][ T5821] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 74.666642][ T5821] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.666642][ T5821] [ 74.676318][ T5821] EXT4-fs (loop4): Total free blocks count 0 [ 74.682324][ T5821] EXT4-fs (loop4): Free/Dirty block details [ 74.688284][ T5821] EXT4-fs (loop4): free_blocks=0 [ 74.693325][ T5821] EXT4-fs (loop4): dirty_blocks=8208 [ 74.698042][ T5826] sd 0:0:1:0: device reset [ 74.698602][ T5821] EXT4-fs (loop4): Block reservation details [ 74.698615][ T5821] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 74.753361][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.760547][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.773496][ T5763] bridge_slave_0: entered allmulticast mode [ 74.782396][ T5763] bridge_slave_0: entered promiscuous mode [ 74.784767][ T573] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 74.808261][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.815448][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.833201][ T5763] bridge_slave_1: entered allmulticast mode [ 74.841819][ T5763] bridge_slave_1: entered promiscuous mode [ 74.854910][ T12] hsr_slave_0: left promiscuous mode [ 74.868936][ T12] hsr_slave_1: left promiscuous mode [ 74.890081][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.897526][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.922029][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.929552][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.958123][ T12] veth1_macvtap: left promiscuous mode [ 74.971008][ T12] veth0_macvtap: left promiscuous mode [ 74.976654][ T12] veth1_vlan: left promiscuous mode [ 74.988280][ T12] veth0_vlan: left promiscuous mode [ 75.104136][ T12] team0 (unregistering): Port device team_slave_1 removed [ 75.113290][ T12] team0 (unregistering): Port device team_slave_0 removed [ 75.120968][ T573] smc: removing ib device syz! [ 75.191654][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.224004][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.454242][ T5763] team0: Port device team_slave_0 added [ 75.470777][ T5763] team0: Port device team_slave_1 added [ 75.488767][ T5861] Set syz1 is full, maxelem 65536 reached [ 75.516469][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.523512][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.549537][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.566867][ T5884] loop2: detected capacity change from 0 to 1024 [ 75.568589][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.577641][ T5884] EXT4-fs: Ignoring removed orlov option [ 75.580670][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.580695][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.637087][ T5884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.680889][ T5763] hsr_slave_0: entered promiscuous mode [ 75.687237][ T5763] hsr_slave_1: entered promiscuous mode [ 75.694559][ T5763] debugfs: 'hsr0' already exists in 'hsr' [ 75.700308][ T5763] Cannot create hsr debugfs directory [ 75.726344][ T3305] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 75.744487][ T3305] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 75.790164][ T4128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.826046][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 75.882854][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.890015][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.897508][ T5845] bridge_slave_0: entered allmulticast mode [ 75.904234][ T5845] bridge_slave_0: entered promiscuous mode [ 75.922042][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.929154][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.937283][ T5845] bridge_slave_1: entered allmulticast mode [ 75.961555][ T5845] bridge_slave_1: entered promiscuous mode [ 75.970564][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.035018][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.048803][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.065312][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.097271][ T5763] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.129491][ T5763] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.138699][ T5763] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.148821][ T5845] team0: Port device team_slave_0 added [ 76.155998][ T5845] team0: Port device team_slave_1 added [ 76.166889][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.187741][ T5763] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.219744][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.232354][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.239336][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.265475][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.278360][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.285484][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.311826][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.330054][ T5946] syzkaller1: entered promiscuous mode [ 76.335803][ T5946] syzkaller1: entered allmulticast mode [ 76.391570][ T5845] hsr_slave_0: entered promiscuous mode [ 76.397835][ T5845] hsr_slave_1: entered promiscuous mode [ 76.403833][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 76.409647][ T5845] Cannot create hsr debugfs directory [ 76.422135][ T12] bridge_slave_1: left allmulticast mode [ 76.427873][ T12] bridge_slave_1: left promiscuous mode [ 76.433649][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.448545][ T12] bridge_slave_0: left allmulticast mode [ 76.454303][ T12] bridge_slave_0: left promiscuous mode [ 76.460026][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.460922][ T10] vhci_hcd: vhci_device speed not set [ 76.533542][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.548445][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.559555][ T12] bond0 (unregistering): Released all slaves [ 76.572712][ T5958] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.606291][ T5955] openvswitch: netlink: Message has 6 unknown bytes. [ 76.619085][ T12] hsr_slave_0: left promiscuous mode [ 76.628584][ T12] veth1_macvtap: left promiscuous mode [ 76.634299][ T12] veth0_macvtap: left promiscuous mode [ 76.640079][ T12] veth1_vlan: left promiscuous mode [ 76.660177][ T12] veth0_vlan: left promiscuous mode [ 76.718831][ T5970] sd 0:0:1:0: device reset [ 76.772835][ T12] team0 (unregistering): Port device team_slave_1 removed [ 76.789988][ T12] team0 (unregistering): Port device team_slave_0 removed [ 76.829076][ T5958] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.927506][ T5958] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.942343][ T5922] chnl_net:caif_netlink_parms(): no params data found [ 77.003374][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.016654][ T5958] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.064286][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.111707][ T5845] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 77.149680][ T5845] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 77.164371][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.174462][ T573] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.181541][ T573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.196076][ T5845] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 77.205447][ T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.214613][ T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.227216][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.234410][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.243005][ T5922] bridge_slave_0: entered allmulticast mode [ 77.249640][ T5922] bridge_slave_0: entered promiscuous mode [ 77.258257][ T573] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.265347][ T573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.274713][ T5845] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 77.284374][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.301942][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.309069][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.316429][ T5922] bridge_slave_1: entered allmulticast mode [ 77.323415][ T5922] bridge_slave_1: entered promiscuous mode [ 77.356273][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.367842][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.381136][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.396118][ T5763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.434436][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.453523][ T5922] team0: Port device team_slave_0 added [ 77.466746][ T5922] team0: Port device team_slave_1 added [ 77.500313][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.507332][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.533353][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.544944][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.551930][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.578254][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.596072][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.606445][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.649986][ T6049] sd 0:0:1:0: device reset [ 77.671497][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.691886][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.693124][ T6056] __nla_validate_parse: 6 callbacks suppressed [ 77.693138][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 77.724154][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.746961][ T5922] hsr_slave_0: entered promiscuous mode [ 77.755012][ T5922] hsr_slave_1: entered promiscuous mode [ 77.794061][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.801230][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.813882][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.821075][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.903035][ T6080] IPv4: Oversized IP packet from 127.202.26.0 [ 77.964134][ T12] bridge_slave_1: left allmulticast mode [ 77.970084][ T12] bridge_slave_1: left promiscuous mode [ 77.975839][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.990057][ T12] bridge_slave_0: left allmulticast mode [ 77.995940][ T12] bridge_slave_0: left promiscuous mode [ 78.001710][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.046970][ T6091] netlink: 80 bytes leftover after parsing attributes in process `syzkaller'. [ 78.103671][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.114619][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.124864][ T12] bond0 (unregistering): Released all slaves [ 78.147725][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.189108][ T12] hsr_slave_0: left promiscuous mode [ 78.197443][ T6109] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 78.199179][ T12] hsr_slave_1: left promiscuous mode [ 78.213468][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.221028][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.229933][ T6097] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 78.239649][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.247190][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.258287][ T12] veth1_macvtap: left promiscuous mode [ 78.264209][ T12] veth0_macvtap: left promiscuous mode [ 78.264355][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 78.269858][ T12] veth1_vlan: left promiscuous mode [ 78.283903][ T12] veth0_vlan: left promiscuous mode [ 78.323353][ T6121] rdma_op ffff888104144d80 conn xmit_rdma 0000000000000000 [ 78.383297][ T6109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.396868][ T6097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.410151][ T6115] bond1 (unregistering): Released all slaves [ 78.432794][ T5763] veth0_vlan: entered promiscuous mode [ 78.443821][ T5922] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 78.455001][ T5922] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 78.466241][ T5922] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 78.475405][ T5922] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 78.514319][ T5763] veth1_vlan: entered promiscuous mode [ 78.536849][ T5763] veth0_macvtap: entered promiscuous mode [ 78.545323][ T6146] FAULT_INJECTION: forcing a failure. [ 78.545323][ T6146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.558984][ T6146] CPU: 1 UID: 0 PID: 6146 Comm: syz.0.897 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 78.559031][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.559042][ T6146] Call Trace: [ 78.559052][ T6146] [ 78.559058][ T6146] __dump_stack+0x1d/0x30 [ 78.559098][ T6146] dump_stack_lvl+0xe8/0x140 [ 78.559164][ T6146] dump_stack+0x15/0x1b [ 78.559180][ T6146] should_fail_ex+0x265/0x280 [ 78.559202][ T6146] should_fail_alloc_page+0xf2/0x100 [ 78.559229][ T6146] __alloc_frozen_pages_noprof+0xff/0x360 [ 78.559291][ T6146] alloc_pages_mpol+0xb3/0x250 [ 78.559379][ T6146] alloc_pages_noprof+0x90/0x130 [ 78.559409][ T6146] __pmd_alloc+0x47/0x470 [ 78.559490][ T6146] handle_mm_fault+0x19d4/0x2c20 [ 78.559514][ T6146] ? check_vma_flags+0x26e/0x340 [ 78.559536][ T6146] __get_user_pages+0x102e/0x1fa0 [ 78.559561][ T6146] ? vma_link+0x1d4/0x220 [ 78.559581][ T6146] get_user_pages_remote+0x1d5/0x6d0 [ 78.559611][ T6146] ? down_read+0x77/0xe0 [ 78.559636][ T6146] get_arg_page+0x8e/0x1e0 [ 78.559656][ T6146] copy_string_kernel+0x12c/0x1f0 [ 78.559731][ T6146] do_execveat_common+0x5ad/0x750 [ 78.559771][ T6146] ? getname_flags+0x154/0x3b0 [ 78.559794][ T6146] __x64_sys_execveat+0x73/0x90 [ 78.559814][ T6146] x64_sys_call+0x1fec/0x2ff0 [ 78.559866][ T6146] do_syscall_64+0xd2/0x200 [ 78.559955][ T6146] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.559977][ T6146] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.560007][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.560104][ T6146] RIP: 0033:0x7f8f0ee1ebe9 [ 78.560118][ T6146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.560133][ T6146] RSP: 002b:00007f8f0d887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 78.560149][ T6146] RAX: ffffffffffffffda RBX: 00007f8f0f045fa0 RCX: 00007f8f0ee1ebe9 [ 78.560220][ T6146] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 78.560234][ T6146] RBP: 00007f8f0d887090 R08: 0000000000000000 R09: 0000000000000000 [ 78.560247][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.560259][ T6146] R13: 00007f8f0f046038 R14: 00007f8f0f045fa0 R15: 00007ffe2e7703a8 [ 78.560277][ T6146] [ 78.608513][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.801839][ T5763] veth1_macvtap: entered promiscuous mode [ 78.817426][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.827920][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.862251][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 78.862265][ T29] audit: type=1326 audit(1755064379.619:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.0.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 78.892469][ T29] audit: type=1326 audit(1755064379.619:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.0.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 78.916943][ T573] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.919452][ T29] audit: type=1326 audit(1755064379.619:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.0.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 78.924022][ T573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.948075][ T573] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.954592][ T29] audit: type=1326 audit(1755064379.619:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.0.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 78.961621][ T573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.992297][ T29] audit: type=1326 audit(1755064379.619:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.0.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 78.999491][ T5922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.015718][ T29] audit: type=1326 audit(1755064379.619:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.0.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 79.026076][ T5922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.060006][ T29] audit: type=1326 audit(1755064379.619:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.0.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 79.083327][ T29] audit: type=1326 audit(1755064379.619:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.0.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 79.102889][ T5845] veth0_vlan: entered promiscuous mode [ 79.106644][ T29] audit: type=1326 audit(1755064379.619:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.0.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 79.121565][ T5845] veth1_vlan: entered promiscuous mode [ 79.135517][ T29] audit: type=1326 audit(1755064379.619:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.0.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 79.150732][ T5845] veth0_macvtap: entered promiscuous mode [ 79.176034][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.211716][ T5845] veth1_macvtap: entered promiscuous mode [ 79.220735][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.229671][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.274979][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.284658][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.297090][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.322215][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.351484][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.361370][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.395400][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.416280][ T6197] loop4: detected capacity change from 0 to 128 [ 79.429959][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.449407][ T6197] loop4: detected capacity change from 0 to 512 [ 79.470537][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.539391][ T6197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.561624][ T6197] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.591884][ T6220] loop5: detected capacity change from 0 to 2048 [ 79.607064][ T6197] FAULT_INJECTION: forcing a failure. [ 79.607064][ T6197] name failslab, interval 1, probability 0, space 0, times 0 [ 79.620166][ T6197] CPU: 1 UID: 0 PID: 6197 Comm: syz.4.906 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 79.620198][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.620209][ T6197] Call Trace: [ 79.620216][ T6197] [ 79.620224][ T6197] __dump_stack+0x1d/0x30 [ 79.620292][ T6197] dump_stack_lvl+0xe8/0x140 [ 79.620349][ T6197] dump_stack+0x15/0x1b [ 79.620363][ T6197] should_fail_ex+0x265/0x280 [ 79.620380][ T6197] should_failslab+0x8c/0xb0 [ 79.620404][ T6197] __kmalloc_noprof+0xa5/0x3e0 [ 79.620444][ T6197] ? ext4_find_extent+0x16b/0x7a0 [ 79.620468][ T6197] ext4_find_extent+0x16b/0x7a0 [ 79.620526][ T6197] ext4_ext_map_blocks+0x11f/0x38a0 [ 79.620608][ T6197] ? update_io_ticks+0x14d/0x180 [ 79.620669][ T6197] ? blk_add_rq_to_plug+0x20e/0x390 [ 79.620752][ T6197] ext4_map_query_blocks+0xa8/0x480 [ 79.620783][ T6197] ext4_map_blocks+0x330/0xd00 [ 79.620851][ T6197] ? __ext4_journal_start_sb+0x131/0x300 [ 79.620875][ T6197] ext4_iomap_begin+0x88d/0xe00 [ 79.620958][ T6197] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 79.621043][ T6197] iomap_iter+0x332/0x730 [ 79.621071][ T6197] __iomap_dio_rw+0xd5e/0x1250 [ 79.621104][ T6197] ? ext4_journal_check_start+0x11a/0x1b0 [ 79.621141][ T6197] iomap_dio_rw+0x40/0x90 [ 79.621159][ T6197] ext4_file_write_iter+0xad9/0xf00 [ 79.621265][ T6197] do_iter_readv_writev+0x49c/0x540 [ 79.621288][ T6197] vfs_writev+0x2df/0x8b0 [ 79.621315][ T6197] ? mutex_lock+0xd/0x30 [ 79.621334][ T6197] do_writev+0xe7/0x210 [ 79.621395][ T6197] __x64_sys_writev+0x45/0x50 [ 79.621446][ T6197] x64_sys_call+0x1e9a/0x2ff0 [ 79.621491][ T6197] do_syscall_64+0xd2/0x200 [ 79.621516][ T6197] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.621612][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.621635][ T6197] RIP: 0033:0x7f59f333ebe9 [ 79.621651][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.621730][ T6197] RSP: 002b:00007f59f1d9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 79.621753][ T6197] RAX: ffffffffffffffda RBX: 00007f59f3565fa0 RCX: 00007f59f333ebe9 [ 79.621763][ T6197] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000007 [ 79.621774][ T6197] RBP: 00007f59f1d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.621785][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.621805][ T6197] R13: 00007f59f3566038 R14: 00007f59f3565fa0 R15: 00007ffd1e600e98 [ 79.621821][ T6197] [ 79.935104][ T6220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.083966][ T5922] veth0_vlan: entered promiscuous mode [ 80.106798][ T5922] veth1_vlan: entered promiscuous mode [ 80.175891][ T5922] veth0_macvtap: entered promiscuous mode [ 80.194150][ T5922] veth1_macvtap: entered promiscuous mode [ 80.208361][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.222910][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.234068][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.247065][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.265289][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.277307][ T6266] sd 0:0:1:0: device reset [ 80.306401][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.320446][ T6263] loop6: detected capacity change from 0 to 1024 [ 80.336624][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.349742][ T6263] EXT4-fs (loop6): inodes count not valid: 32 vs 19 [ 80.372453][ T6240] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.908: bg 0: block 234: padding at end of block bitmap is not set [ 80.391770][ T6271] FAULT_INJECTION: forcing a failure. [ 80.391770][ T6271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.405035][ T6271] CPU: 0 UID: 0 PID: 6271 Comm: syz.0.918 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 80.405075][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.405086][ T6271] Call Trace: [ 80.405092][ T6271] [ 80.405099][ T6271] __dump_stack+0x1d/0x30 [ 80.405120][ T6271] dump_stack_lvl+0xe8/0x140 [ 80.405139][ T6271] dump_stack+0x15/0x1b [ 80.405153][ T6271] should_fail_ex+0x265/0x280 [ 80.405174][ T6271] should_fail+0xb/0x20 [ 80.405195][ T6271] should_fail_usercopy+0x1a/0x20 [ 80.405216][ T6271] _copy_from_user+0x1c/0xb0 [ 80.405239][ T6271] ___sys_sendmsg+0xc1/0x1d0 [ 80.405266][ T6271] __x64_sys_sendmsg+0xd4/0x160 [ 80.405345][ T6271] x64_sys_call+0x191e/0x2ff0 [ 80.405364][ T6271] do_syscall_64+0xd2/0x200 [ 80.405452][ T6271] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.405544][ T6271] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.405569][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.405619][ T6271] RIP: 0033:0x7f8f0ee1ebe9 [ 80.405634][ T6271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.405648][ T6271] RSP: 002b:00007f8f0d887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.405664][ T6271] RAX: ffffffffffffffda RBX: 00007f8f0f045fa0 RCX: 00007f8f0ee1ebe9 [ 80.405692][ T6271] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 80.405705][ T6271] RBP: 00007f8f0d887090 R08: 0000000000000000 R09: 0000000000000000 [ 80.405755][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.405812][ T6271] R13: 00007f8f0f046038 R14: 00007f8f0f045fa0 R15: 00007ffe2e7703a8 [ 80.405829][ T6271] [ 80.603215][ T6240] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 80.604069][ T6276] netlink: 'syz.7.919': attribute type 1 has an invalid length. [ 80.615764][ T6240] EXT4-fs (loop5): This should not happen!! Data will be lost [ 80.615764][ T6240] [ 80.633376][ T6240] EXT4-fs (loop5): Total free blocks count 0 [ 80.635656][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.919'. [ 80.639384][ T6240] EXT4-fs (loop5): Free/Dirty block details [ 80.639399][ T6240] EXT4-fs (loop5): free_blocks=0 [ 80.639412][ T6240] EXT4-fs (loop5): dirty_blocks=8208 [ 80.664558][ T6240] EXT4-fs (loop5): Block reservation details [ 80.670603][ T6240] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 80.755574][ T1004] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 80.825696][ T6294] loop6: detected capacity change from 0 to 512 [ 80.907785][ T6294] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.944154][ T6294] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 81.005675][ T6306] sd 0:0:1:0: device reset [ 81.017520][ T6294] EXT4-fs (loop6): 1 truncate cleaned up [ 81.033145][ T6294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.038533][ T6300] infiniband syz!: set down [ 81.049816][ T6300] infiniband syz!: added team_slave_0 [ 81.116924][ T6300] RDS/IB: syz!: added [ 81.201906][ T6300] smc: adding ib device syz! with port count 1 [ 81.236902][ T6325] FAULT_INJECTION: forcing a failure. [ 81.236902][ T6325] name failslab, interval 1, probability 0, space 0, times 0 [ 81.249717][ T6325] CPU: 1 UID: 0 PID: 6325 Comm: syz.5.932 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 81.249742][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.249753][ T6325] Call Trace: [ 81.249759][ T6325] [ 81.249767][ T6325] __dump_stack+0x1d/0x30 [ 81.249786][ T6325] dump_stack_lvl+0xe8/0x140 [ 81.249801][ T6325] dump_stack+0x15/0x1b [ 81.249815][ T6325] should_fail_ex+0x265/0x280 [ 81.249834][ T6325] should_failslab+0x8c/0xb0 [ 81.249855][ T6325] kmem_cache_alloc_noprof+0x50/0x310 [ 81.249877][ T6325] ? vm_area_alloc+0x2c/0xb0 [ 81.249904][ T6325] vm_area_alloc+0x2c/0xb0 [ 81.249929][ T6325] mmap_region+0xaa2/0x1630 [ 81.249972][ T6325] do_mmap+0x9b3/0xbe0 [ 81.250001][ T6325] vm_mmap_pgoff+0x17a/0x2e0 [ 81.250031][ T6325] ksys_mmap_pgoff+0xc2/0x310 [ 81.250057][ T6325] ? __x64_sys_mmap+0x49/0x70 [ 81.250079][ T6325] x64_sys_call+0x14a3/0x2ff0 [ 81.250097][ T6325] do_syscall_64+0xd2/0x200 [ 81.250121][ T6325] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.250142][ T6325] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.250165][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.250184][ T6325] RIP: 0033:0x7f035060ec23 [ 81.250204][ T6325] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 81.250220][ T6325] RSP: 002b:00007f034f06ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 81.250239][ T6325] RAX: ffffffffffffffda RBX: 00000000000005ab RCX: 00007f035060ec23 [ 81.250251][ T6325] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 81.250263][ T6325] RBP: 0000200000000182 R08: 00000000ffffffff R09: 0000000000000000 [ 81.250274][ T6325] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 81.250286][ T6325] R13: 00007f034f06eef0 R14: 00007f034f06eeb0 R15: 0000200000000940 [ 81.250304][ T6325] [ 81.442343][ T6300] smc: ib device syz! port 1 has pnetid [ 81.506727][ T6293] Set syz1 is full, maxelem 65536 reached [ 81.530195][ T6335] netlink: 'syz.4.936': attribute type 1 has an invalid length. [ 81.538326][ T6330] loop5: detected capacity change from 0 to 2048 [ 81.564855][ T6330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.621254][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'. [ 81.653801][ T6335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.821481][ T6345] bond2 (unregistering): Released all slaves [ 81.999779][ T5845] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.098680][ T6383] loop7: detected capacity change from 0 to 512 [ 82.114739][ T6383] EXT4-fs: Ignoring removed oldalloc option [ 82.115310][ T6351] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.935: bg 0: block 234: padding at end of block bitmap is not set [ 82.146364][ T6351] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 82.158877][ T6351] EXT4-fs (loop5): This should not happen!! Data will be lost [ 82.158877][ T6351] [ 82.168546][ T6351] EXT4-fs (loop5): Total free blocks count 0 [ 82.172316][ T6383] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.942: Parent and EA inode have the same ino 15 [ 82.174753][ T6351] EXT4-fs (loop5): Free/Dirty block details [ 82.174767][ T6351] EXT4-fs (loop5): free_blocks=0 [ 82.174779][ T6351] EXT4-fs (loop5): dirty_blocks=8208 [ 82.196265][ T6383] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.942: Parent and EA inode have the same ino 15 [ 82.197876][ T6351] EXT4-fs (loop5): Block reservation details [ 82.197891][ T6351] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 82.231598][ T6383] EXT4-fs (loop7): 1 orphan inode deleted [ 82.238141][ T6383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.255674][ T6383] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.942: deleted inode referenced: 15 [ 82.273366][ T6383] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 82.286852][ T1004] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 82.300414][ T6391] bond0: (slave dummy0): Releasing backup interface [ 82.559175][ T6424] loop5: detected capacity change from 0 to 1024 [ 82.571826][ T6424] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 82.588617][ T6424] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.612215][ T6424] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #32: comm syz.5.947: iget: special inode unallocated [ 82.618633][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 82.635419][ T6424] EXT4-fs (loop5): Remounting filesystem read-only [ 82.642047][ T6424] EXT4-fs (loop5): no journal found [ 82.647265][ T6424] EXT4-fs (loop5): can't get journal size [ 82.654400][ T6424] EXT4-fs (loop5): filesystem is read-only [ 82.662076][ T6424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.674714][ T6436] IPv4: Oversized IP packet from 127.202.26.0 [ 82.674755][ T6424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.760722][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 82.795617][ T6451] loop5: detected capacity change from 0 to 512 [ 82.803115][ T6451] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.824144][ T6451] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.843815][ T6451] EXT4-fs (loop5): 1 truncate cleaned up [ 82.861294][ T6451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.919585][ T5922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.924889][ T6458] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 82.974151][ T6473] hub 9-0:1.0: USB hub found [ 82.986326][ T6473] hub 9-0:1.0: 8 ports detected [ 83.005586][ T6476] veth0_to_team: entered promiscuous mode [ 83.045211][ T6476] loop6: detected capacity change from 0 to 2048 [ 83.082384][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.960'. [ 83.093069][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 83.118013][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.959'. [ 83.142325][ T6476] loop6: p1 < > [ 83.179598][ T6493] IPv4: Oversized IP packet from 127.202.26.0 [ 83.219161][ T2993] loop6: p1 < > [ 83.235581][ T6504] netlink: 'syz.4.962': attribute type 1 has an invalid length. [ 83.238343][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 83.302537][ T6504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.350895][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.962'. [ 83.374359][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 83.384605][ T6510] FAULT_INJECTION: forcing a failure. [ 83.384605][ T6510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.397786][ T6510] CPU: 1 UID: 0 PID: 6510 Comm: syz.7.964 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 83.397940][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.397952][ T6510] Call Trace: [ 83.397958][ T6510] [ 83.397966][ T6510] __dump_stack+0x1d/0x30 [ 83.398022][ T6510] dump_stack_lvl+0xe8/0x140 [ 83.398042][ T6510] dump_stack+0x15/0x1b [ 83.398059][ T6510] should_fail_ex+0x265/0x280 [ 83.398179][ T6510] should_fail+0xb/0x20 [ 83.398197][ T6510] should_fail_usercopy+0x1a/0x20 [ 83.398220][ T6510] _copy_from_user+0x1c/0xb0 [ 83.398247][ T6510] sock_do_ioctl+0xe6/0x220 [ 83.398297][ T6510] sock_ioctl+0x41b/0x610 [ 83.398320][ T6510] ? __pfx_sock_ioctl+0x10/0x10 [ 83.398344][ T6510] __se_sys_ioctl+0xcb/0x140 [ 83.398371][ T6510] __x64_sys_ioctl+0x43/0x50 [ 83.398431][ T6510] x64_sys_call+0x1816/0x2ff0 [ 83.398459][ T6510] do_syscall_64+0xd2/0x200 [ 83.398479][ T6510] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.398557][ T6510] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.398577][ T6510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.398661][ T6510] RIP: 0033:0x7f04b11bebe9 [ 83.398676][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.398692][ T6510] RSP: 002b:00007f04afc27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.398713][ T6510] RAX: ffffffffffffffda RBX: 00007f04b13e5fa0 RCX: 00007f04b11bebe9 [ 83.398725][ T6510] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000007 [ 83.398738][ T6510] RBP: 00007f04afc27090 R08: 0000000000000000 R09: 0000000000000000 [ 83.398752][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.398826][ T6510] R13: 00007f04b13e6038 R14: 00007f04b13e5fa0 R15: 00007ffe1aadf548 [ 83.398842][ T6510] [ 83.403318][ T6514] syzkaller0: entered promiscuous mode [ 83.592731][ T6514] syzkaller0: entered allmulticast mode [ 83.606143][ T6504] bond2 (unregistering): Released all slaves [ 83.759354][ T6528] syzkaller0: entered promiscuous mode [ 83.765223][ T6528] syzkaller0: entered allmulticast mode [ 83.830107][ T6545] syz!: rxe_newlink: already configured on team_slave_0 [ 83.857363][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.888514][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.005167][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.027380][ T6571] capability: warning: `syz.4.976' uses 32-bit capabilities (legacy support in use) [ 84.037246][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.047483][ T6568] SELinux: policydb version -524709643 does not match my version range 15-35 [ 84.051211][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.056829][ T6568] SELinux: failed to load policy [ 84.093250][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.113982][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 84.113997][ T29] audit: type=1400 audit(1755064384.869:6897): avc: denied { ioctl } for pid=6547 comm="syz.0.974" path="socket:[17050]" dev="sockfs" ino=17050 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.147820][ T6576] FAULT_INJECTION: forcing a failure. [ 84.147820][ T6576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.161312][ T6576] CPU: 1 UID: 0 PID: 6576 Comm: syz.4.977 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 84.161341][ T6576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.161351][ T6576] Call Trace: [ 84.161359][ T6576] [ 84.161366][ T6576] __dump_stack+0x1d/0x30 [ 84.161428][ T6576] dump_stack_lvl+0xe8/0x140 [ 84.161445][ T6576] dump_stack+0x15/0x1b [ 84.161460][ T6576] should_fail_ex+0x265/0x280 [ 84.161479][ T6576] should_fail+0xb/0x20 [ 84.161495][ T6576] should_fail_usercopy+0x1a/0x20 [ 84.161656][ T6576] _copy_from_user+0x1c/0xb0 [ 84.161678][ T6576] __se_sys_mount+0x10d/0x2e0 [ 84.161697][ T6576] ? fput+0x8f/0xc0 [ 84.161768][ T6576] ? ksys_write+0x192/0x1a0 [ 84.161788][ T6576] __x64_sys_mount+0x67/0x80 [ 84.161808][ T6576] x64_sys_call+0x2b4d/0x2ff0 [ 84.161841][ T6576] do_syscall_64+0xd2/0x200 [ 84.161866][ T6576] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.161946][ T6576] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.161971][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.161992][ T6576] RIP: 0033:0x7f59f333ebe9 [ 84.162005][ T6576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.162046][ T6576] RSP: 002b:00007f59f1d9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.162064][ T6576] RAX: ffffffffffffffda RBX: 00007f59f3565fa0 RCX: 00007f59f333ebe9 [ 84.162077][ T6576] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 84.162091][ T6576] RBP: 00007f59f1d9f090 R08: 0000200000000240 R09: 0000000000000000 [ 84.162104][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.162115][ T6576] R13: 00007f59f3566038 R14: 00007f59f3565fa0 R15: 00007ffd1e600e98 [ 84.162172][ T6576] [ 84.481561][ T29] audit: type=1326 audit(1755064385.229:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.7.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 84.508874][ T29] audit: type=1326 audit(1755064385.239:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.7.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 84.532458][ T29] audit: type=1326 audit(1755064385.239:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.7.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 84.556045][ T29] audit: type=1326 audit(1755064385.239:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.7.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 84.580183][ T29] audit: type=1326 audit(1755064385.239:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.7.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 84.603866][ T29] audit: type=1326 audit(1755064385.239:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.7.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 84.627552][ T29] audit: type=1326 audit(1755064385.239:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.7.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 84.654279][ T29] audit: type=1326 audit(1755064385.269:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.7.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 84.677787][ T29] audit: type=1326 audit(1755064385.269:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.7.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 84.804784][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.976251][ T6630] loop6: detected capacity change from 0 to 2048 [ 84.986297][ T6635] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 85.000852][ T6635] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 85.030034][ T6634] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 85.052896][ T6630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.165126][ T5845] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.197987][ T6645] loop7: detected capacity change from 0 to 8192 [ 85.319759][ T6625] Set syz1 is full, maxelem 65536 reached [ 85.438876][ T6675] netlink: 'syz.5.998': attribute type 1 has an invalid length. [ 85.446949][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.998'. [ 85.456625][ T6673] sd 0:0:1:0: device reset [ 85.474104][ T6675] bond0: (slave bond_slave_0): Releasing backup interface [ 85.526213][ T6684] FAULT_INJECTION: forcing a failure. [ 85.526213][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 85.538011][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1003'. [ 85.538973][ T6684] CPU: 1 UID: 0 PID: 6684 Comm: syz.0.1001 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 85.539001][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.539037][ T6684] Call Trace: [ 85.539058][ T6684] [ 85.539065][ T6684] __dump_stack+0x1d/0x30 [ 85.539156][ T6684] dump_stack_lvl+0xe8/0x140 [ 85.539251][ T6684] dump_stack+0x15/0x1b [ 85.539267][ T6684] should_fail_ex+0x265/0x280 [ 85.539305][ T6684] should_failslab+0x8c/0xb0 [ 85.539328][ T6684] kmem_cache_alloc_node_noprof+0x57/0x320 [ 85.539364][ T6684] ? __alloc_skb+0x101/0x320 [ 85.539394][ T6684] __alloc_skb+0x101/0x320 [ 85.539420][ T6684] ? audit_log_start+0x365/0x6c0 [ 85.539462][ T6684] audit_log_start+0x380/0x6c0 [ 85.539493][ T6684] audit_seccomp+0x48/0x100 [ 85.539535][ T6684] ? __seccomp_filter+0x68c/0x10d0 [ 85.539597][ T6684] __seccomp_filter+0x69d/0x10d0 [ 85.539619][ T6684] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.539645][ T6684] ? vfs_write+0x7e8/0x960 [ 85.539703][ T6684] __secure_computing+0x82/0x150 [ 85.539723][ T6684] syscall_trace_enter+0xcf/0x1e0 [ 85.539748][ T6684] do_syscall_64+0xac/0x200 [ 85.539841][ T6684] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.539864][ T6684] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.539886][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.539907][ T6684] RIP: 0033:0x7f8f0ee1ebe9 [ 85.539923][ T6684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.539951][ T6684] RSP: 002b:00007f8f0d887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 85.539970][ T6684] RAX: ffffffffffffffda RBX: 00007f8f0f045fa0 RCX: 00007f8f0ee1ebe9 [ 85.539983][ T6684] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.540028][ T6684] RBP: 00007f8f0d887090 R08: 0000000000000000 R09: 0000000000000000 [ 85.540040][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.540052][ T6684] R13: 00007f8f0f046038 R14: 00007f8f0f045fa0 R15: 00007ffe2e7703a8 [ 85.540070][ T6684] [ 85.881044][ T6706] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1008'. [ 85.903860][ T6706] netem: change failed [ 85.911020][ T6709] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 85.938024][ T6712] netem: incorrect gi model size [ 85.943081][ T6712] netem: change failed [ 86.217753][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'. [ 86.235605][ T6735] netlink: 'syz.7.1016': attribute type 1 has an invalid length. [ 86.243863][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1016'. [ 86.337680][ T6743] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 86.348167][ T6743] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 86.423379][ T6755] loop4: detected capacity change from 0 to 2048 [ 86.452943][ T6761] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 86.461410][ T6755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.742847][ T6769] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1023: bg 0: block 234: padding at end of block bitmap is not set [ 86.774449][ T6769] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 86.787111][ T6769] EXT4-fs (loop4): This should not happen!! Data will be lost [ 86.787111][ T6769] [ 86.796776][ T6769] EXT4-fs (loop4): Total free blocks count 0 [ 86.802798][ T6769] EXT4-fs (loop4): Free/Dirty block details [ 86.808696][ T6769] EXT4-fs (loop4): free_blocks=0 [ 86.813707][ T6769] EXT4-fs (loop4): dirty_blocks=8208 [ 86.819054][ T6769] EXT4-fs (loop4): Block reservation details [ 86.825112][ T6769] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 86.907098][ T1004] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 87.132878][ T6751] Set syz1 is full, maxelem 65536 reached [ 87.145410][ T6789] FAULT_INJECTION: forcing a failure. [ 87.145410][ T6789] name failslab, interval 1, probability 0, space 0, times 0 [ 87.158115][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.5.1029 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 87.158142][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.158231][ T6789] Call Trace: [ 87.158239][ T6789] [ 87.158247][ T6789] __dump_stack+0x1d/0x30 [ 87.158301][ T6789] dump_stack_lvl+0xe8/0x140 [ 87.158321][ T6789] dump_stack+0x15/0x1b [ 87.158345][ T6789] should_fail_ex+0x265/0x280 [ 87.158363][ T6789] should_failslab+0x8c/0xb0 [ 87.158383][ T6789] __kmalloc_node_noprof+0xa9/0x410 [ 87.158464][ T6789] ? qdisc_alloc+0x65/0x440 [ 87.158517][ T6789] qdisc_alloc+0x65/0x440 [ 87.158541][ T6789] ? nla_strcmp+0xc3/0xe0 [ 87.158559][ T6789] qdisc_create+0xf5/0x9e0 [ 87.158634][ T6789] tc_modify_qdisc+0xf2e/0x1420 [ 87.158665][ T6789] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 87.158731][ T6789] rtnetlink_rcv_msg+0x65a/0x6d0 [ 87.158757][ T6789] netlink_rcv_skb+0x120/0x220 [ 87.158773][ T6789] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.158799][ T6789] rtnetlink_rcv+0x1c/0x30 [ 87.158848][ T6789] netlink_unicast+0x5c0/0x690 [ 87.158875][ T6789] netlink_sendmsg+0x58b/0x6b0 [ 87.158898][ T6789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.158922][ T6789] __sock_sendmsg+0x145/0x180 [ 87.158950][ T6789] ____sys_sendmsg+0x31e/0x4e0 [ 87.158974][ T6789] ___sys_sendmsg+0x17b/0x1d0 [ 87.159004][ T6789] __x64_sys_sendmsg+0xd4/0x160 [ 87.159055][ T6789] x64_sys_call+0x191e/0x2ff0 [ 87.159090][ T6789] do_syscall_64+0xd2/0x200 [ 87.159116][ T6789] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.159138][ T6789] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.159240][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.159263][ T6789] RIP: 0033:0x7f035060ebe9 [ 87.159278][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.159311][ T6789] RSP: 002b:00007f034f06f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.159330][ T6789] RAX: ffffffffffffffda RBX: 00007f0350835fa0 RCX: 00007f035060ebe9 [ 87.159347][ T6789] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 87.159357][ T6789] RBP: 00007f034f06f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.159368][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.159403][ T6789] R13: 00007f0350836038 R14: 00007f0350835fa0 R15: 00007ffd8d3dacb8 [ 87.159422][ T6789] [ 87.532592][ T6811] loop4: detected capacity change from 0 to 512 [ 87.540111][ T6812] netlink: 'syz.5.1036': attribute type 1 has an invalid length. [ 87.553214][ T6811] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.580434][ T6811] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.618532][ T6811] EXT4-fs (loop4): 1 truncate cleaned up [ 87.624982][ T6811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.681808][ T6827] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 87.807791][ T6837] loop7: detected capacity change from 0 to 512 [ 87.831966][ T6837] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.838818][ T6837] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 87.866996][ T6837] EXT4-fs (loop7): 1 truncate cleaned up [ 87.875805][ T6837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.960903][ T6841] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 88.011303][ T6850] netlink: 'syz.6.1049': attribute type 1 has an invalid length. [ 88.019135][ T6850] FAULT_INJECTION: forcing a failure. [ 88.019135][ T6850] name failslab, interval 1, probability 0, space 0, times 0 [ 88.031928][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.6.1049 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 88.031962][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.031974][ T6850] Call Trace: [ 88.031980][ T6850] [ 88.032063][ T6850] __dump_stack+0x1d/0x30 [ 88.032081][ T6850] dump_stack_lvl+0xe8/0x140 [ 88.032097][ T6850] dump_stack+0x15/0x1b [ 88.032170][ T6850] should_fail_ex+0x265/0x280 [ 88.032253][ T6850] should_failslab+0x8c/0xb0 [ 88.032345][ T6850] kmem_cache_alloc_noprof+0x50/0x310 [ 88.032371][ T6850] ? security_inode_alloc+0x37/0x100 [ 88.032471][ T6850] security_inode_alloc+0x37/0x100 [ 88.032495][ T6850] inode_init_always_gfp+0x4b7/0x500 [ 88.032516][ T6850] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 88.032542][ T6850] alloc_inode+0x58/0x170 [ 88.032562][ T6850] new_inode+0x1d/0xe0 [ 88.032643][ T6850] __debugfs_create_file+0x109/0x330 [ 88.032667][ T6850] debugfs_create_file_full+0x3f/0x60 [ 88.032692][ T6850] ? __pfx_bond_setup+0x10/0x10 [ 88.032733][ T6850] ref_tracker_dir_debugfs+0x100/0x1e0 [ 88.032817][ T6850] alloc_netdev_mqs+0x1a2/0xa20 [ 88.032839][ T6850] rtnl_create_link+0x239/0x710 [ 88.032857][ T6850] rtnl_newlink_create+0x14c/0x620 [ 88.032880][ T6850] ? security_capable+0x83/0x90 [ 88.032978][ T6850] ? netlink_ns_capable+0x86/0xa0 [ 88.033006][ T6850] rtnl_newlink+0xf29/0x12d0 [ 88.033080][ T6850] ? __memcg_slab_free_hook+0x135/0x230 [ 88.033165][ T6850] ? __rcu_read_unlock+0x4f/0x70 [ 88.033185][ T6850] ? avc_has_perm_noaudit+0x1b1/0x200 [ 88.033206][ T6850] ? cred_has_capability+0x210/0x280 [ 88.033225][ T6850] ? selinux_capable+0x31/0x40 [ 88.033324][ T6850] ? security_capable+0x83/0x90 [ 88.033342][ T6850] ? ns_capable+0x7d/0xb0 [ 88.033358][ T6850] ? __pfx_rtnl_newlink+0x10/0x10 [ 88.033383][ T6850] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 88.033460][ T6850] netlink_rcv_skb+0x120/0x220 [ 88.033521][ T6850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.033551][ T6850] rtnetlink_rcv+0x1c/0x30 [ 88.033575][ T6850] netlink_unicast+0x5c0/0x690 [ 88.033670][ T6850] netlink_sendmsg+0x58b/0x6b0 [ 88.033694][ T6850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.033737][ T6850] __sock_sendmsg+0x145/0x180 [ 88.033762][ T6850] ____sys_sendmsg+0x31e/0x4e0 [ 88.033786][ T6850] ___sys_sendmsg+0x17b/0x1d0 [ 88.033890][ T6850] __x64_sys_sendmsg+0xd4/0x160 [ 88.033915][ T6850] x64_sys_call+0x191e/0x2ff0 [ 88.033964][ T6850] do_syscall_64+0xd2/0x200 [ 88.033987][ T6850] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.034011][ T6850] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.034113][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.034135][ T6850] RIP: 0033:0x7f89aaadebe9 [ 88.034151][ T6850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.034165][ T6850] RSP: 002b:00007f89a953f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.034181][ T6850] RAX: ffffffffffffffda RBX: 00007f89aad05fa0 RCX: 00007f89aaadebe9 [ 88.034219][ T6850] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 88.034232][ T6850] RBP: 00007f89a953f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.034245][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.034258][ T6850] R13: 00007f89aad06038 R14: 00007f89aad05fa0 R15: 00007fff8646faa8 [ 88.034276][ T6850] [ 88.034381][ T6850] debugfs: out of free dentries, can not create file 'netdev@ffff888109eac550' [ 88.423682][ T6853] 9pnet_fd: Insufficient options for proto=fd [ 88.446413][ T6850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.495012][ T6867] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 88.537869][ T6867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.547875][ T6871] __nla_validate_parse: 3 callbacks suppressed [ 88.547891][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 88.679007][ T6871] bond1 (unregistering): Released all slaves [ 88.734676][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 88.772554][ T6878] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.799321][ T6878] pimreg: entered allmulticast mode [ 88.943198][ T5922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.984602][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1060'. [ 89.019712][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.061531][ T6913] FAULT_INJECTION: forcing a failure. [ 89.061531][ T6913] name failslab, interval 1, probability 0, space 0, times 0 [ 89.074318][ T6913] CPU: 1 UID: 0 PID: 6913 Comm: syz.7.1062 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 89.074343][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.074354][ T6913] Call Trace: [ 89.074361][ T6913] [ 89.074381][ T6913] __dump_stack+0x1d/0x30 [ 89.074401][ T6913] dump_stack_lvl+0xe8/0x140 [ 89.074420][ T6913] dump_stack+0x15/0x1b [ 89.074437][ T6913] should_fail_ex+0x265/0x280 [ 89.074457][ T6913] should_failslab+0x8c/0xb0 [ 89.074480][ T6913] kmem_cache_alloc_node_noprof+0x57/0x320 [ 89.074573][ T6913] ? __alloc_skb+0x101/0x320 [ 89.074601][ T6913] __alloc_skb+0x101/0x320 [ 89.074631][ T6913] alloc_skb_with_frags+0x7d/0x470 [ 89.074647][ T6913] ? sk_psock_verdict_recv+0x27c/0x4b0 [ 89.074708][ T6913] ? __kfree_skb+0x109/0x150 [ 89.074722][ T6913] ? sk_skb_reason_drop+0xbd/0x270 [ 89.074740][ T6913] sock_alloc_send_pskb+0x43a/0x4f0 [ 89.074764][ T6913] ? sock_def_readable+0xaf/0x190 [ 89.074868][ T6913] ? __rcu_read_unlock+0x4f/0x70 [ 89.074928][ T6913] unix_stream_sendmsg+0x3f3/0xb90 [ 89.074951][ T6913] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 89.074980][ T6913] __sock_sendmsg+0x145/0x180 [ 89.075003][ T6913] ____sys_sendmsg+0x31e/0x4e0 [ 89.075024][ T6913] ___sys_sendmsg+0x17b/0x1d0 [ 89.075050][ T6913] __x64_sys_sendmsg+0xd4/0x160 [ 89.075072][ T6913] x64_sys_call+0x191e/0x2ff0 [ 89.075126][ T6913] do_syscall_64+0xd2/0x200 [ 89.075148][ T6913] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.075178][ T6913] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.075221][ T6913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.075242][ T6913] RIP: 0033:0x7f04b11bebe9 [ 89.075257][ T6913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.075274][ T6913] RSP: 002b:00007f04afc27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.075294][ T6913] RAX: ffffffffffffffda RBX: 00007f04b13e5fa0 RCX: 00007f04b11bebe9 [ 89.075306][ T6913] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 89.075364][ T6913] RBP: 00007f04afc27090 R08: 0000000000000000 R09: 0000000000000000 [ 89.075428][ T6913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.075439][ T6913] R13: 00007f04b13e6038 R14: 00007f04b13e5fa0 R15: 00007ffe1aadf548 [ 89.075456][ T6913] [ 89.333185][ T6914] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (65536) [ 89.334517][ T6911] 9pnet_fd: Insufficient options for proto=fd [ 89.343144][ T6914] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 89.398034][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 89.398047][ T29] audit: type=1326 audit(1755064390.149:7524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 89.404674][ T6914] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 89.434608][ T6914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.440876][ T29] audit: type=1326 audit(1755064390.149:7525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 89.442458][ T6914] vhci_hcd vhci_hcd.0: Device attached [ 89.466083][ T29] audit: type=1326 audit(1755064390.149:7526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 89.472550][ T6928] 9pnet_fd: Insufficient options for proto=fd [ 89.495074][ T29] audit: type=1326 audit(1755064390.149:7527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 89.509290][ T6924] vhci_hcd: connection closed [ 89.524817][ T29] audit: type=1326 audit(1755064390.149:7528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 89.553236][ T29] audit: type=1326 audit(1755064390.149:7529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 89.576966][ T29] audit: type=1326 audit(1755064390.149:7530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 89.600520][ T29] audit: type=1326 audit(1755064390.149:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 89.603879][ T51] vhci_hcd: stop threads [ 89.623981][ T29] audit: type=1326 audit(1755064390.149:7532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 89.628225][ T51] vhci_hcd: release socket [ 89.628235][ T51] vhci_hcd: disconnect device [ 89.660985][ T29] audit: type=1326 audit(1755064390.149:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f0ee1d550 code=0x7ffc0000 [ 89.781593][ T6944] FAULT_INJECTION: forcing a failure. [ 89.781593][ T6944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.794794][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: syz.4.1069 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 89.794858][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.794869][ T6944] Call Trace: [ 89.794876][ T6944] [ 89.794883][ T6944] __dump_stack+0x1d/0x30 [ 89.794903][ T6944] dump_stack_lvl+0xe8/0x140 [ 89.794920][ T6944] dump_stack+0x15/0x1b [ 89.794985][ T6944] should_fail_ex+0x265/0x280 [ 89.795085][ T6944] should_fail+0xb/0x20 [ 89.795115][ T6944] should_fail_usercopy+0x1a/0x20 [ 89.795138][ T6944] strncpy_from_user+0x25/0x230 [ 89.795168][ T6944] ? kmem_cache_alloc_noprof+0x186/0x310 [ 89.795190][ T6944] ? getname_flags+0x80/0x3b0 [ 89.795276][ T6944] getname_flags+0xae/0x3b0 [ 89.795308][ T6944] __x64_sys_execve+0x42/0x70 [ 89.795386][ T6944] x64_sys_call+0x2716/0x2ff0 [ 89.795408][ T6944] do_syscall_64+0xd2/0x200 [ 89.795433][ T6944] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.795476][ T6944] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.795551][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.795573][ T6944] RIP: 0033:0x7f59f333ebe9 [ 89.795624][ T6944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.795640][ T6944] RSP: 002b:00007f59f1d9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 89.795661][ T6944] RAX: ffffffffffffffda RBX: 00007f59f3565fa0 RCX: 00007f59f333ebe9 [ 89.795674][ T6944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 89.795720][ T6944] RBP: 00007f59f1d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.795733][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.795746][ T6944] R13: 00007f59f3566038 R14: 00007f59f3565fa0 R15: 00007ffd1e600e98 [ 89.795763][ T6944] [ 90.151584][ T1004] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.225395][ T1004] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.276133][ T1004] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.324758][ T1004] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.340252][ T6970] raw_sendmsg: syz.5.1076 forgot to set AF_INET. Fix it! [ 90.418470][ T1004] bridge_slave_1: left allmulticast mode [ 90.424329][ T1004] bridge_slave_1: left promiscuous mode [ 90.430093][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.460266][ T1004] bridge_slave_0: left allmulticast mode [ 90.466000][ T1004] bridge_slave_0: left promiscuous mode [ 90.472161][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.553869][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.563852][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.573410][ T1004] bond0 (unregistering): Released all slaves [ 90.580449][ T6985] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 90.582488][ T1004] bond1 (unregistering): Released all slaves [ 90.601519][ T6955] chnl_net:caif_netlink_parms(): no params data found [ 90.686037][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.693307][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.705354][ T6955] bridge_slave_0: entered allmulticast mode [ 90.714689][ T6955] bridge_slave_0: entered promiscuous mode [ 90.725505][ T1004] hsr_slave_0: left promiscuous mode [ 90.737665][ T1004] hsr_slave_1: left promiscuous mode [ 90.749833][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.757330][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.768371][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.776036][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.803832][ T1004] veth1_macvtap: left promiscuous mode [ 90.809725][ T1004] veth0_macvtap: left promiscuous mode [ 90.816594][ T1004] veth1_vlan: left promiscuous mode [ 90.822150][ T1004] veth0_vlan: left promiscuous mode [ 90.903692][ T7014] random: crng reseeded on system resumption [ 90.922857][ T7014] loop4: detected capacity change from 0 to 2048 [ 90.933859][ T7014] ext4: Unknown parameter 'measure' [ 90.965116][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 90.975093][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 91.004316][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.011460][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.019493][ T6955] bridge_slave_1: entered allmulticast mode [ 91.026288][ T6955] bridge_slave_1: entered promiscuous mode [ 91.059769][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.071256][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.105364][ T6955] team0: Port device team_slave_0 added [ 91.115646][ T6955] team0: Port device team_slave_1 added [ 91.148179][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.155234][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.181427][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.204029][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.211081][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.237374][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.244686][ T7026] netlink: 'syz.7.1089': attribute type 1 has an invalid length. [ 91.274696][ T7026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.285305][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1089'. [ 91.297670][ T7026] bond1 (unregistering): Released all slaves [ 91.314825][ T7029] syz!: rxe_newlink: already configured on team_slave_0 [ 91.358854][ T6955] hsr_slave_0: entered promiscuous mode [ 91.368257][ T6955] hsr_slave_1: entered promiscuous mode [ 91.381270][ T6955] debugfs: 'hsr0' already exists in 'hsr' [ 91.387042][ T6955] Cannot create hsr debugfs directory [ 91.567173][ T6955] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 91.585554][ T6955] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 91.652200][ T6955] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 91.667741][ T6955] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 91.735458][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.769318][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.791505][ T7095] FAULT_INJECTION: forcing a failure. [ 91.791505][ T7095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.805386][ T7095] CPU: 1 UID: 0 PID: 7095 Comm: syz.0.1099 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 91.805412][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.805425][ T7095] Call Trace: [ 91.805432][ T7095] [ 91.805496][ T7095] __dump_stack+0x1d/0x30 [ 91.805518][ T7095] dump_stack_lvl+0xe8/0x140 [ 91.805537][ T7095] dump_stack+0x15/0x1b [ 91.805616][ T7095] should_fail_ex+0x265/0x280 [ 91.805637][ T7095] should_fail+0xb/0x20 [ 91.805655][ T7095] should_fail_usercopy+0x1a/0x20 [ 91.805677][ T7095] strncpy_from_user+0x25/0x230 [ 91.805705][ T7095] ? kmem_cache_alloc_noprof+0x186/0x310 [ 91.805765][ T7095] ? getname_flags+0x80/0x3b0 [ 91.805862][ T7095] getname_flags+0xae/0x3b0 [ 91.805887][ T7095] path_setxattrat+0x223/0x310 [ 91.805923][ T7095] __x64_sys_lsetxattr+0x71/0x90 [ 91.805948][ T7095] x64_sys_call+0x2877/0x2ff0 [ 91.806069][ T7095] do_syscall_64+0xd2/0x200 [ 91.806095][ T7095] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.806114][ T7095] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.806193][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.806211][ T7095] RIP: 0033:0x7f8f0ee1ebe9 [ 91.806225][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.806240][ T7095] RSP: 002b:00007f8f0d887038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 91.806256][ T7095] RAX: ffffffffffffffda RBX: 00007f8f0f045fa0 RCX: 00007f8f0ee1ebe9 [ 91.806268][ T7095] RDX: 0000200000000c00 RSI: 0000200000000440 RDI: 0000200000000140 [ 91.806278][ T7095] RBP: 00007f8f0d887090 R08: 0000000000000000 R09: 0000000000000000 [ 91.806292][ T7095] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 91.806305][ T7095] R13: 00007f8f0f046038 R14: 00007f8f0f045fa0 R15: 00007ffe2e7703a8 [ 91.806364][ T7095] [ 91.816146][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.008950][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.046809][ T7105] loop5: detected capacity change from 0 to 1024 [ 92.056002][ T7105] EXT4-fs: Ignoring removed orlov option [ 92.061992][ T7105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.074938][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.082049][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.090293][ T7108] syz!: rxe_newlink: already configured on team_slave_0 [ 92.120070][ T7105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.133866][ T7113] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 92.147690][ T7113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.158117][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 92.177869][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1102'. [ 92.186934][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1102'. [ 92.228072][ T7113] bond1 (unregistering): Released all slaves [ 92.273468][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.303165][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.514789][ T7165] netlink: 'syz.5.1110': attribute type 1 has an invalid length. [ 92.576623][ T7165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.598987][ T6955] veth0_vlan: entered promiscuous mode [ 92.604683][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1110'. [ 92.613763][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1110'. [ 92.709514][ T6955] veth1_vlan: entered promiscuous mode [ 92.866040][ T7165] syzkaller0: entered promiscuous mode [ 92.871807][ T7165] syzkaller0: entered allmulticast mode [ 92.980328][ T6955] veth0_macvtap: entered promiscuous mode [ 93.002612][ T7200] FAULT_INJECTION: forcing a failure. [ 93.002612][ T7200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.015744][ T7200] CPU: 0 UID: 0 PID: 7200 Comm: syz.0.1111 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 93.015776][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.015786][ T7200] Call Trace: [ 93.015793][ T7200] [ 93.015799][ T7200] __dump_stack+0x1d/0x30 [ 93.015822][ T7200] dump_stack_lvl+0xe8/0x140 [ 93.015838][ T7200] dump_stack+0x15/0x1b [ 93.015852][ T7200] should_fail_ex+0x265/0x280 [ 93.015888][ T7200] should_fail+0xb/0x20 [ 93.015902][ T7200] should_fail_usercopy+0x1a/0x20 [ 93.015920][ T7200] _copy_from_user+0x1c/0xb0 [ 93.016023][ T7200] __sys_bpf+0x178/0x7b0 [ 93.016050][ T7200] __x64_sys_bpf+0x41/0x50 [ 93.016071][ T7200] x64_sys_call+0x2aea/0x2ff0 [ 93.016168][ T7200] do_syscall_64+0xd2/0x200 [ 93.016190][ T7200] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.016211][ T7200] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.016234][ T7200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.016281][ T7200] RIP: 0033:0x7f8f0ee1ebe9 [ 93.016294][ T7200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.016309][ T7200] RSP: 002b:00007f8f0d887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.016328][ T7200] RAX: ffffffffffffffda RBX: 00007f8f0f045fa0 RCX: 00007f8f0ee1ebe9 [ 93.016368][ T7200] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000015 [ 93.016379][ T7200] RBP: 00007f8f0d887090 R08: 0000000000000000 R09: 0000000000000000 [ 93.016390][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.016400][ T7200] R13: 00007f8f0f046038 R14: 00007f8f0f045fa0 R15: 00007ffe2e7703a8 [ 93.016415][ T7200] [ 93.039649][ T6955] veth1_macvtap: entered promiscuous mode [ 93.062632][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.065908][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.069275][ T51] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.069324][ T51] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.069394][ T51] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.069425][ T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.123664][ T7204] tipc: New replicast peer: 255.255.255.255 [ 93.123859][ T7204] tipc: Enabled bearer , priority 10 [ 93.139147][ T7206] loop5: detected capacity change from 0 to 1024 [ 93.169849][ T7212] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 93.188916][ T7212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.715304][ T7253] SELinux: failed to load policy [ 93.800455][ T7278] netlink: 'syz.7.1127': attribute type 1 has an invalid length. [ 93.887310][ T7278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.907481][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1127'. [ 93.965234][ T7278] bond1 (unregistering): Released all slaves [ 94.009632][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1129'. [ 94.019057][ T7299] loop8: detected capacity change from 0 to 512 [ 94.036453][ T7299] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.061510][ T7299] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 94.073910][ T7302] sd 0:0:1:0: device reset [ 94.098055][ T7299] EXT4-fs (loop8): 1 truncate cleaned up [ 94.107677][ T7307] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1133'. [ 94.120860][ T10] tipc: Node number set to 3758096386 [ 94.126813][ T7299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.474954][ T29] kauditd_printk_skb: 868 callbacks suppressed [ 94.474971][ T29] audit: type=1326 audit(1755064395.229:8402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 94.482649][ T7340] sch_tbf: peakrate 3855131656510743697 is lower than or equals to rate 13299252879720578360 ! [ 94.540735][ T7338] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.567881][ T29] audit: type=1326 audit(1755064395.229:8403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 94.591589][ T29] audit: type=1326 audit(1755064395.239:8404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035060ebe9 code=0x7ffc0000 [ 94.615319][ T29] audit: type=1326 audit(1755064395.239:8405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f035060ebe9 code=0x7ffc0000 [ 94.638868][ T29] audit: type=1326 audit(1755064395.239:8406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035060ebe9 code=0x7ffc0000 [ 94.662289][ T29] audit: type=1326 audit(1755064395.239:8407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f035060ebe9 code=0x7ffc0000 [ 94.685838][ T29] audit: type=1326 audit(1755064395.279:8408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 94.710034][ T29] audit: type=1326 audit(1755064395.289:8409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035060ebe9 code=0x7ffc0000 [ 94.733767][ T29] audit: type=1326 audit(1755064395.289:8410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035060ebe9 code=0x7ffc0000 [ 94.791794][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1139'. [ 94.811754][ T7340] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1139'. [ 94.866016][ T29] audit: type=1326 audit(1755064395.549:8411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f035060ebe9 code=0x7ffc0000 [ 94.950141][ T7366] sd 0:0:1:0: device reset [ 94.972744][ T6955] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.094055][ T7388] netlink: 'syz.4.1151': attribute type 1 has an invalid length. [ 95.112323][ T7388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.146919][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 95.198473][ T7388] bond2 (unregistering): Released all slaves [ 95.288334][ T7413] SELinux: failed to load policy [ 95.374492][ T7423] FAULT_INJECTION: forcing a failure. [ 95.374492][ T7423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.387699][ T7423] CPU: 0 UID: 0 PID: 7423 Comm: syz.4.1159 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 95.387729][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.387741][ T7423] Call Trace: [ 95.387755][ T7423] [ 95.387763][ T7423] __dump_stack+0x1d/0x30 [ 95.387837][ T7423] dump_stack_lvl+0xe8/0x140 [ 95.387856][ T7423] dump_stack+0x15/0x1b [ 95.387873][ T7423] should_fail_ex+0x265/0x280 [ 95.387944][ T7423] should_fail+0xb/0x20 [ 95.387961][ T7423] should_fail_usercopy+0x1a/0x20 [ 95.388047][ T7423] _copy_from_user+0x1c/0xb0 [ 95.388074][ T7423] restore_altstack+0x4b/0x2d0 [ 95.388178][ T7423] ? __set_task_blocked+0x23a/0x2a0 [ 95.388202][ T7423] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 95.388224][ T7423] ? _raw_spin_unlock_irq+0x26/0x50 [ 95.388255][ T7423] ? signal_setup_done+0x266/0x290 [ 95.388319][ T7423] ? xfd_validate_state+0x45/0xf0 [ 95.388350][ T7423] ? fpu__clear_user_states+0x63/0x1e0 [ 95.388377][ T7423] ? fpregs_mark_activate+0x66/0x140 [ 95.388430][ T7423] ? fpu__clear_user_states+0x63/0x1e0 [ 95.388529][ T7423] ? arch_do_signal_or_restart+0x2f3/0x480 [ 95.388550][ T7423] ? __rcu_read_unlock+0x4f/0x70 [ 95.388574][ T7423] x64_sys_call+0x2d3c/0x2ff0 [ 95.388595][ T7423] do_syscall_64+0xd2/0x200 [ 95.388646][ T7423] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.388666][ T7423] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.388688][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.388710][ T7423] RIP: 0033:0x7f59f32dadd9 [ 95.388725][ T7423] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 95.388805][ T7423] RSP: 002b:00007f59f1d9ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 95.388824][ T7423] RAX: ffffffffffffffda RBX: 00007f59f3565fa0 RCX: 00007f59f32dadd9 [ 95.388837][ T7423] RDX: 00007f59f1d9ea80 RSI: 00007f59f1d9ebb0 RDI: 0000000000000021 [ 95.388849][ T7423] RBP: 00007f59f1d9f090 R08: 0000200000048000 R09: 0000000000000300 [ 95.388908][ T7423] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 95.388921][ T7423] R13: 00007f59f3566038 R14: 00007f59f3565fa0 R15: 00007ffd1e600e98 [ 95.388941][ T7423] [ 95.685535][ T7437] sd 0:0:1:0: device reset [ 95.817321][ T7454] netlink: 'syz.4.1167': attribute type 1 has an invalid length. [ 95.839913][ T7454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.868175][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1167'. [ 95.912060][ T7461] IPv4: Oversized IP packet from 127.202.26.0 [ 95.923915][ T7459] bond2 (unregistering): Released all slaves [ 96.080086][ T7479] sd 0:0:1:0: device reset [ 96.147860][ T7487] loop5: detected capacity change from 0 to 2048 [ 96.186135][ T7494] netlink: 'syz.4.1187': attribute type 1 has an invalid length. [ 96.201248][ T7494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.209073][ T7497] syz!: rxe_newlink: already configured on team_slave_0 [ 96.214281][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1187'. [ 96.225621][ T7487] loop5: p1 < > p4 [ 96.230326][ T7487] loop5: p4 size 8388608 extends beyond EOD, truncated [ 96.242977][ T7494] bond2 (unregistering): Released all slaves [ 96.335104][ T7510] sd 0:0:1:0: device reset [ 96.403080][ T7523] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1199'. [ 96.414692][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 96.435219][ T7525] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 96.490703][ T7535] netlink: 'syz.5.1205': attribute type 1 has an invalid length. [ 96.503341][ T7538] sd 0:0:1:0: device reset [ 96.508504][ T7535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.529900][ T7535] bond2 (unregistering): Released all slaves [ 96.667034][ T7553] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 97.062287][ T7586] netlink: 'syz.7.1225': attribute type 1 has an invalid length. [ 97.073291][ T7589] sd 0:0:1:0: device reset [ 97.096922][ T7586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.151901][ T7586] bond1 (unregistering): Released all slaves [ 97.160330][ T7596] IPv4: Oversized IP packet from 127.202.26.0 [ 97.202498][ T7597] syz!: rxe_newlink: already configured on team_slave_0 [ 97.539474][ T7623] sd 0:0:1:0: device reset [ 97.568151][ T7627] syz!: rxe_newlink: already configured on team_slave_0 [ 97.580449][ T7629] netlink: 'syz.8.1242': attribute type 1 has an invalid length. [ 97.739632][ T7652] sd 0:0:1:0: device reset [ 97.823724][ T7660] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 98.005427][ T7673] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 98.068346][ T7673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.139531][ T7673] rdma_op ffff88810ffa3d80 conn xmit_rdma 0000000000000000 [ 98.162595][ T7676] bond2 (unregistering): Released all slaves [ 98.193665][ T7654] Set syz1 is full, maxelem 65536 reached [ 98.281392][ T7687] sd 0:0:1:0: device reset [ 98.299638][ T7688] loop7: detected capacity change from 0 to 2048 [ 98.341360][ T3755] loop7: p1 < > p4 [ 98.346556][ T3755] loop7: p4 size 8388608 extends beyond EOD, truncated [ 98.379972][ T7688] loop7: p1 < > p4 [ 98.390364][ T7688] loop7: p4 size 8388608 extends beyond EOD, truncated [ 98.480322][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 98.492314][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 98.666607][ T7708] netlink: 'syz.5.1275': attribute type 1 has an invalid length. [ 98.706452][ T7708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.734374][ T7708] bond2 (unregistering): Released all slaves [ 98.736687][ T7715] sd 0:0:1:0: device reset [ 98.775934][ T7717] rdma_op ffff8881044c9580 conn xmit_rdma 0000000000000000 [ 98.787603][ T7719] syz!: rxe_newlink: already configured on team_slave_0 [ 98.845281][ T7727] loop5: detected capacity change from 0 to 2048 [ 98.905933][ T7727] loop5: p1 < > p4 [ 98.919839][ T7727] loop5: p4 size 8388608 extends beyond EOD, truncated [ 99.029771][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 99.041537][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 99.147387][ T7750] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 99.174334][ T7753] sd 0:0:1:0: device reset [ 99.228049][ T7758] netlink: 'syz.8.1294': attribute type 1 has an invalid length. [ 99.243723][ T7758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.253361][ T7758] __nla_validate_parse: 7 callbacks suppressed [ 99.253374][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1294'. [ 99.272055][ T7758] bond1 (unregistering): Released all slaves [ 99.305170][ T7760] rdma_op ffff888109d40980 conn xmit_rdma 0000000000000000 [ 99.483756][ T29] kauditd_printk_skb: 1708 callbacks suppressed [ 99.483824][ T29] audit: type=1326 audit(1755064400.239:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.7.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 99.518272][ T29] audit: type=1326 audit(1755064400.239:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.7.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 99.541867][ T29] audit: type=1326 audit(1755064400.239:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.7.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 99.565727][ T29] audit: type=1326 audit(1755064400.239:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.7.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b11bebe9 code=0x7ffc0000 [ 99.589754][ T29] audit: type=1326 audit(1755064400.269:10124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f0ee15ba7 code=0x7ffc0000 [ 99.613633][ T29] audit: type=1326 audit(1755064400.269:10125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f0edbadd9 code=0x7ffc0000 [ 99.637580][ T29] audit: type=1326 audit(1755064400.269:10126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 99.676704][ T29] audit: type=1326 audit(1755064400.309:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f0ee15ba7 code=0x7ffc0000 [ 99.700287][ T29] audit: type=1326 audit(1755064400.309:10128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f0edbadd9 code=0x7ffc0000 [ 99.708421][ T7777] loop8: detected capacity change from 0 to 2048 [ 99.723906][ T29] audit: type=1326 audit(1755064400.309:10129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8f0ee1ebe9 code=0x7ffc0000 [ 99.766623][ T7784] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 99.830651][ T7777] loop8: p1 < > p4 [ 99.836610][ T7777] loop8: p4 size 8388608 extends beyond EOD, truncated [ 99.846250][ T7786] sd 0:0:1:0: device reset [ 99.857743][ T7790] netlink: 'syz.5.1307': attribute type 1 has an invalid length. [ 99.925505][ T7790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.956955][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1307'. [ 99.987391][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 99.998840][ T7802] bond2 (unregistering): Released all slaves [ 100.006755][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 100.015798][ T3291] ================================================================== [ 100.015824][ T3291] BUG: KCSAN: data-race in set_nlink / set_nlink [ 100.015846][ T3291] [ 100.015850][ T3291] read to 0xffff8881070f3d28 of 4 bytes by task 2993 on cpu 1: [ 100.015864][ T3291] set_nlink+0x29/0xb0 [ 100.015880][ T3291] kernfs_iop_permission+0x1e2/0x220 [ 100.015901][ T3291] inode_permission+0x1c7/0x310 [ 100.015925][ T3291] link_path_walk+0x162/0x900 [ 100.015947][ T3291] path_openat+0x1de/0x2170 [ 100.015963][ T3291] do_filp_open+0x109/0x230 [ 100.015979][ T3291] do_sys_openat2+0xa6/0x110 [ 100.016003][ T3291] __x64_sys_openat+0xf2/0x120 [ 100.016027][ T3291] x64_sys_call+0x2e9c/0x2ff0 [ 100.016045][ T3291] do_syscall_64+0xd2/0x200 [ 100.016069][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.016087][ T3291] [ 100.016092][ T3291] write to 0xffff8881070f3d28 of 4 bytes by task 3291 on cpu 0: [ 100.016105][ T3291] set_nlink+0x99/0xb0 [ 100.016125][ T3291] kernfs_iop_permission+0x1e2/0x220 [ 100.016144][ T3291] inode_permission+0x1c7/0x310 [ 100.016164][ T3291] link_path_walk+0x162/0x900 [ 100.016185][ T3291] path_openat+0x1de/0x2170 [ 100.016202][ T3291] do_filp_open+0x109/0x230 [ 100.016217][ T3291] do_sys_openat2+0xa6/0x110 [ 100.016245][ T3291] __x64_sys_openat+0xf2/0x120 [ 100.016271][ T3291] x64_sys_call+0x2e9c/0x2ff0 [ 100.016291][ T3291] do_syscall_64+0xd2/0x200 [ 100.016311][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.016329][ T3291] [ 100.016333][ T3291] value changed: 0x00000027 -> 0x00000029 [ 100.016344][ T3291] [ 100.016357][ T3291] Reported by Kernel Concurrency Sanitizer on: [ 100.016367][ T3291] CPU: 0 UID: 0 PID: 3291 Comm: udevd Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 100.016388][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.016398][ T3291] ================================================================== [ 100.025048][ T7790] rdma_op ffff8881319ddd80 conn xmit_rdma 0000000000000000