last executing test programs: 5m47.139037671s ago: executing program 32 (id=135): pread64(0xffffffffffffffff, &(0x7f0000000380)=""/181, 0xffffff84, 0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) acct(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000000000000ffe600"/28], 0x50) r1 = syz_open_dev$vcsn(&(0x7f0000000280), 0x4, 0x40003) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8fe, r2, 0x4}, 0x38) r3 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000880)={0x0, 0x40}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000900)={r4, 0xfd74, 0x9, [0x30, 0x0, 0x62e8, 0x2, 0x2, 0x8001, 0x5, 0x8, 0x8]}, &(0x7f0000000940)=0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xf}, {0xffe0, 0xa}, {0xd, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x3, 0x4, 0x1, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x7}}, @fwd={0x5}]}, {0x0, [0x2e, 0x61, 0x5f, 0x61]}}, &(0x7f0000000540)=""/41, 0x42, 0x29, 0x0, 0x7fff, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000640)=""/76, 0x4c, 0x0, &(0x7f00000006c0)=""/22, 0x16}}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x2008c082) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xfe}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffff7}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4m45.050417072s ago: executing program 33 (id=1189): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3c5b, &(0x7f00000002c0)={0x0, 0x79af, 0x1, 0x208000, 0x40024e}, &(0x7f0000000680)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x44, 0x4007, @fd_index=0x3, 0x106, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000580)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r7, 0x0, 0x80000}, 0x18) alarm(0x9) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r8, 0x0, 0x0}, 0x20) 2m54.266644523s ago: executing program 34 (id=3056): pread64(0xffffffffffffffff, &(0x7f0000000380)=""/181, 0xffffff84, 0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) acct(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000000000000ffe600"/28], 0x50) r1 = syz_open_dev$vcsn(&(0x7f0000000280), 0x4, 0x40003) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8fe, r2, 0x4}, 0x38) r3 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f00000008c0)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000900)={0x0, 0xfd74, 0x7, [0x30, 0x0, 0x2, 0x2, 0x8001, 0x5, 0x8]}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xf}, {0xffe0, 0xa}, {0xd, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x3, 0x4, 0x1, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x7}}, @fwd={0x5}]}, {0x0, [0x2e, 0x61, 0x5f, 0x61]}}, &(0x7f0000000540)=""/41, 0x42, 0x29, 0x0, 0x7fff, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000640)=""/76, 0x4c, 0x0, &(0x7f00000006c0)=""/22, 0x16}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x2008c082) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xfe}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffff7}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m6.053684093s ago: executing program 35 (id=3478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r3, 0xb03, 0x3}, 0x14}}, 0x0) preadv(r1, &(0x7f0000000000), 0x0, 0x2, 0x802) 1m38.080056992s ago: executing program 36 (id=4062): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) socket$kcm(0x21, 0x2, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x9}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1m33.599243508s ago: executing program 37 (id=4133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200000, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='rpc_request\x00', r5}, 0x18) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x9) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000001a00000a14"], 0x28}}, 0x0) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r11, 0x400454a4, &(0x7f00000003c0)=0x1) sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000844) 1m26.675623437s ago: executing program 38 (id=4193): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020204d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x7fffffff]}, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) 1m25.778798031s ago: executing program 39 (id=4212): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="fef9ba83f7067bf561ecd574cf9a245dc31f3dbf8cbe4f7deea33b40113a6b07adc85c185a7e994d4f753cd168e0396835a4eb560efe567c780d968aabb2a7d7c600b0a5d8ee59ea0e65decf1fd91175147e9f57e750d8b624dcf6a8ce886116b3024741af035b515b4c269f8d0cc8e4bf421d21aebfb78e0528e5aa532d44e2662f061e05bcb28c17fa3e1c639e7860f6a2fbd4", @ANYRESDEC=r4, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRES64=r3, @ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESOCT=r4, @ANYRES16=r3], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r6, &(0x7f00000009c0), 0xd4ba0ff) removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x2, 0x5}, 0x8002, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000e3ff7fff0000000000000000010000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="ff00000000000000b70400000800000085000000950004009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) socket$nl_generic(0x11, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r9}, 0x38) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 1m24.676606357s ago: executing program 40 (id=4230): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000500)={0x335, @tick, 0x3, {0x6}, 0x40}) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x7, 0x7f}, {0x10, 0x9}, 0x8, 0x1, 0x83}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r4, 0x1}}, 0x18) (fail_nth: 3) 1m13.29457503s ago: executing program 41 (id=4337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158"], 0x66) 1m10.64348692s ago: executing program 42 (id=4358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b21ac2fc7dff972d000200", "e9be1ea2", "bb10000000000001"}, 0x28) 1m6.321916665s ago: executing program 43 (id=4391): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x5) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xf9, 0x5, 0x7, 0x4d, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x10, 0x80000000, 0x9}}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x33}, r3}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) ftruncate(r1, 0x2007ffc) write$UHID_INPUT(r0, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0x1006) readv(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m2.770389169s ago: executing program 44 (id=4420): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl(0xffffffffffffffff, 0x8b22, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1m1.645033356s ago: executing program 45 (id=4428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x20000004) 58.538019453s ago: executing program 46 (id=4450): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000740)={0x0, 0x1}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000008c0)={r1, @in={{0x2, 0x4e20, @remote}}, 0x0, 0x8, 0x6, 0x7, 0xf0, 0x0, 0x80}, &(0x7f0000000980)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r2]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x27bd, &(0x7f0000000600)={0x0, 0x40d6, 0x8000, 0x0, 0x20e}, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000840)={0x8, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/49, 0x31}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/1, 0x1}], &(0x7f0000000800)=[0x80000000, 0x3, 0x7, 0x8, 0x0], 0x3}, 0x20) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000001740)={0x1990, r8, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x614, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1f8, 0x4, 0x0, 0x1, [{0x1f4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x8b, 0x2, "827600709ee3f5d6d37ba3c4381b2f0544d3d0b13e0635a360e8c3d496b1c962e5de8e7ffa1ea4146072c03793c69d87e9cc6d9361490a814dfec9b503872707577700d4f786b27859834e34873e96828d2f29d439070d78d4375e13da86d7495db680d3d95c9b16961d0ad8c047dc773b3ee1bbb459d8fe6822e5d3aaf086dc1a97b4b830741b"}, @NL80211_PKTPAT_PATTERN={0x1e, 0x2, "d885756218ddd2d3c42ad5daf3a7c03b39e4d50fa2477266d327"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fff}, @NL80211_PKTPAT_MASK={0x40, 0x1, "827e4334be783ecc7e9d2b36ffe5b5e3ccd61be2a6b9ef3a3c6057cc5799dd0a1f824f831ad3b49bf60ccecfe492605bfc2cebe4da480fce616876fe"}, @NL80211_PKTPAT_PATTERN={0xfa, 0x2, "812543d36bc06d1b547e2eed5bc5edd17dde722a259b2b4475957d0c7df009645a3ee5f4b6b788709f11ca2f1e036de252c19fef1d4c23ede4ef62e4663897fe76cf7cb8731b6e0fc9edf203b7d8f772f64593fc5d6b2ef4eefbb1b86737efb37cf6a6df6a3e8d69b6d1c26714d4defffbfed8ec284323d87eb599c8cf3f46e0abe115a05497b2f218d530a4419299efdff66e2be3fb9fe8b442a8938b7f81f429f3e5f5b221cd52c178ae8cf2a157170c2191d14393def29a7d51111f39efcfd315fe3f4800ed203012d2c4c27573d64e102b20c6dc70bfb148c6f77da826acbecbb6509af60d2b92265d33a825f2785f7ded6dc8f7"}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1cc, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x14c, 0x2a, [@link_id={0x65, 0x12, {@random="137f4ce0a03e"}}, @random={0x8, 0x16, "f3fa35842b267861bbc8f449f9febc5bfeec92e53732"}, @fast_bss_trans={0x37, 0x11a, {0x4, 0xa, "c8b70ee87c4b4a359905d392013f6c96", "c8524202b69e1f0d299be5eda4f45f9994ad3d0b6b56412fc10f70836039670f", "34c7c3d09489b58b280166feb0b76ce4a0b8a1e375db3ddc817e60ab377aafc3", [{0x4, 0xc, "e9893a2f4604d905435e7a23"}, {0x1, 0x3, "6b758f"}, {0x1, 0xc, "6e57adac36cf0cdaacd6461c"}, {0x4, 0xc, "bb22bb1ba6a2f608736a783b"}, {0x3, 0x7, "0f58260864fa22"}, {0x2, 0x20, "46c8408e92dca5da95b8f45a786b457b20bdaf108dd3db535e6e3cce6af2f222"}, {0x3, 0x28, "cffc409c838b6ac9464b93138f4aa9c8e4d59ca9e5f00a8a2ae37ff340345e3fd222371abe72379b"}, {0x2, 0x1a, "dcd93e526e5ac1149973b18e3f147f95104a33c5c6296339726c"}, {0x1, 0x9, "7897e0227204972dcc"}, {0x2, 0x1b, "f1c8e216f003e316871e9be9f6abeb4a6c52afef52a635d6dd4c91"}]}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x24, 0x0, @random="6a718d4e0b245ccb646f4b0c3627edf3167beeef4c2addceb15401329008bf36"}, {0x13, 0x0, @random="468bab4b1cfe04bb9420c93b598f99"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x234, 0x4, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x36, 0x1, "9074d30247b1a26f995d944763b1d3867c4344fe49ba31da864cda9291b7fcefa47e3b3881c20846d24365a08970d9b2e999"}, @NL80211_PKTPAT_PATTERN={0x2a, 0x2, "f1a261d760024efa6126ff3a8103c02287024cc366eea7a2b5d7b44e812d690642599a3d3740"}, @NL80211_PKTPAT_MASK={0x42, 0x1, "fe185d2e9e852fe434f2df0f04e9ce601ff7e1759453d080fb6b41c400b15e623b397c1c5bb09c28634256d0c21b0231545cd4f6ea762c3c4f25d4a2ac2f"}]}, {0x184, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x59, 0x2, "e579d7cdde06997ebe3f2e4122d8c1af84cdcb6dfbc4a30b8dabb85f64cb89065f4d110038ac3fcb9fcd69538620a08a6a5e7435854b440994996427b57d1bce5fa0ddaf516c8c5839440b2b04c99989abc603101a"}, @NL80211_PKTPAT_PATTERN={0x52, 0x2, "5a81fc5062b4856898f9bd1194e1de6cc42ab404373d6c253effb756709e912ecbc11421eaebb7bf61e9c6dcb93768e128fff99503a8cf3919407b76638ae2898480690da75281c0fd0aeefada8e"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x40}, @NL80211_PKTPAT_MASK={0xc6, 0x1, "8ffd6547dfdc26a7018768f08385e1e7c6fd33cb476a20efbf1dc38ef82a02be5fca04adaf1143b797fbd16b651727a5079359f599030b832556ef4374a94246d4f1e5411e3cf366b35f460ec3b4a780d84a4bce1024e33608ebdb640cd3a31846c89101d4af9b2892bf945011b4a7eea433d6fa4dc135f1a9b964b027fee60176abb6e4de832169ad700f7727b27ac1eb954e649bdf346cc5701bab18f704c2aad25937282565ee1a110f4742b3f1fa17c83ea6abda1f1409879a28027c47459f6b"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1cc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1bc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x46, 0xb, "d7398d40b823e2670dfeb45172def1428c304f0b59853858f0b92c1f37ae0a437cf46a83b222726ddda4f02be72cbb07a4f00ccf7630e8f491c871075c4ca876d44f"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x9}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x8001, 0x1ff, 0xfffffffe}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xf5, 0x8, {0x3b0, 0x3, "d0fef559d61617f0c5336cf39bfabc5de4d154aa066a57bf45ae74f0e06bc08e879776257748797c80b2595343d56c962d101bd2473e4f1d3e6706241bd083c0fab1f0c5ad43924f214496b544f1ecf532f8d8aa33b9880cd4ea4d419db2762c0930b2396c260abf4768cd1c15aef2f2b7b25236a9371e3c8d810d0783f58f8205762825652ab4a8e3df2ec4d65a6e755bb4845f8c975bad186ad2e21c26930e3c098696ec7596ad0e8372d220f9f579c05dbc76c416f72bd78e1ea9d4abbf2b98d40d5e259c05daf2c3e5f37085190cc90b3490c3cae2b282d2b033585ed40625b3b5d9f306039d4a"}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x46, 0x6, "0e9d1e3118c1ba85ba6d1523141b010374bbec0152c288ea79bd10d1303b1ee418f3d9a5e9ef352b5265fe690df6150b42013cc2255dd619f774c5b6288ba3f94ace"}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1188, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x10ac, 0x4, 0x0, 0x1, [{0x10a8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_MASK={0x5a, 0x1, "f06e9680343879c9d9bd888fb64bea0aa192be4bc6510715db244b550a6a0a3ee57c3434df9f5c4157fc474f9db033315ce27affe4feaa7dcd031b08493ee90f05ab14d1c9b3314205038851091594ec51127d85d981"}, @NL80211_PKTPAT_PATTERN={0x41, 0x2, "9a538f3b8cd7ad290ad69ee61928e5ad873a2c3ec652b39f077739ef9793ffd424ab942c6a3dbd51b48668118b682be19bed695154ebd379533732104c"}]}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xb8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x95, 0x6, "8e6eaeed790c31731f664d09a04207ff13c02210d1e62a87d98afaffbb7a2aa04861496b54dcfbe8a4ccee1467af54dcc70c6f77e9a38a1f37a492078a2e3b38f5713948a146ae3f85300f439f01d6e65b6c1f7fba362850da5a00311c974eaf8165e94296b4b4edc4f49c092d6385c1467652f758bffcd7cd0c9deaa287bdd0757fd39d550e0aaac2631c7005d6f87286"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x1990}, 0x1, 0x0, 0x0, 0x40010}, 0x20008001) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080)) renameat2(r6, &(0x7f00000009c0)='./file0\x00', r0, &(0x7f0000000a00)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000001700), 0x4) syz_read_part_table(0x5dc, &(0x7f0000000000)="$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") 47.276653314s ago: executing program 47 (id=4549): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020204d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x7fffffff]}, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) 41.369444713s ago: executing program 8 (id=4610): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x6, {[@window={0x3, 0x3, 0xc}]}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000140)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@errors_remount}]}, 0xff, 0x42f, &(0x7f0000000940)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000340)=0x7) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000100)=0x7) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000640)=""/168) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r7 = socket(0x80000000000000a, 0x2, 0x0) socketpair(0x11, 0x80d, 0xb46, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}}, {{0xa, 0x4e23, 0xffffffff, @empty, 0x1000000}}}, 0x108) preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, 0x5b, 0x0) 41.094366008s ago: executing program 8 (id=4617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r3}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x50}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (fail_nth: 11) 40.498806497s ago: executing program 8 (id=4623): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_load(r2, &(0x7f00000002c0)={0xf97cff8c, 0x8}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 39.745539968s ago: executing program 48 (id=4634): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff03318944268cb89914f00800", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.385753449s ago: executing program 0 (id=4647): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0) 38.355928909s ago: executing program 49 (id=4647): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0) 37.537930901s ago: executing program 8 (id=4653): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 37.481620982s ago: executing program 8 (id=4654): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 37.346794684s ago: executing program 8 (id=4655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffffffffffff, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000ac0)="cc14b341", 0x4, 0xc804, &(0x7f0000000200)={0xa, 0x4e22, 0x487000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000380)={r10}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000340)={r10, 0x8, 0x8e, "d12e84bd223d95e0f709b6f44a2b7c2b785a296a6f77badd865e879498d3648bfd5c0025cbfb12bab7155778d94f786448a8dcf0eaedeb746ff90a9afa3db2f89603f5f1877d0a3a6f735361ecea2938b38a3455e6879a83f50a72bb783f3d710b12bb96a5648aaf0b8f45654e17397ec990574180d7dad7113130b8cba4f33bdaf6591edc30e601e9abb977a3c0"}, 0x96) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x0) 37.346498674s ago: executing program 50 (id=4655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffffffffffff, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000ac0)="cc14b341", 0x4, 0xc804, &(0x7f0000000200)={0xa, 0x4e22, 0x487000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000380)={r10}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000340)={r10, 0x8, 0x8e, "d12e84bd223d95e0f709b6f44a2b7c2b785a296a6f77badd865e879498d3648bfd5c0025cbfb12bab7155778d94f786448a8dcf0eaedeb746ff90a9afa3db2f89603f5f1877d0a3a6f735361ecea2938b38a3455e6879a83f50a72bb783f3d710b12bb96a5648aaf0b8f45654e17397ec990574180d7dad7113130b8cba4f33bdaf6591edc30e601e9abb977a3c0"}, 0x96) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x0) 34.887327012s ago: executing program 2 (id=4667): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1}, 0x13) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',aname=a']) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r0, r0], 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 34.658189735s ago: executing program 2 (id=4668): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x208, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 34.486850917s ago: executing program 2 (id=4669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = socket(0x11, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xa0179e08}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000280)={{0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) read(r6, &(0x7f0000000640)=""/211, 0xd3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x10, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r8, @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x2, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x1202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r10, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r10, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 33.63473264s ago: executing program 2 (id=4670): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 33.609564791s ago: executing program 2 (id=4671): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r3, 0x3, 0x30}, &(0x7f0000000140)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000009c0)={0x0, "08c108f6120e272a88341927e8852bcd"}) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r8, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r9}, 0x10) timer_gettime(0x0, 0x0) mlockall(0x7) 32.148984803s ago: executing program 2 (id=4686): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file2\x00', 0x484, &(0x7f00000002c0)=ANY=[], 0xfe, 0x122e, &(0x7f0000002580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="2c32653da53b283ade6571190d543f633fe249d353ddee496ccaa57fa0585faa7a755fd9d5734f95abb930f9a3831215af2e867d5de072a4625e11d07f22770ee9aa9b455dd43ec6a8ee7fbf9ac50445c73b8ec079952cbaa1c04649b13765f80404f2c2bca6d8da0f8d9f71e414e25f759a7dce2528e412fb41b5e97da2d6f5bdff1c9d334c72d2f89c9fe66425227d3be28c674615c05952584d0813bf3c7ce832a15d49689928e0d8b0bbce6a070e1ce794f0a5692cd64e7366f649a864b5a8235b9160419bdc82a91942bd4644b2bf4e59715e028f52878c9c9ab7b202f45ec4fd8b5dd3b5c5c320de36be0a35f55322ac076cac1e0b7dc98d7e9813b735"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 32.121025893s ago: executing program 51 (id=4686): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file2\x00', 0x484, &(0x7f00000002c0)=ANY=[], 0xfe, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="2c32653da53b283ade6571190d543f633fe249d353ddee496ccaa57fa0585faa7a755fd9d5734f95abb930f9a3831215af2e867d5de072a4625e11d07f22770ee9aa9b455dd43ec6a8ee7fbf9ac50445c73b8ec079952cbaa1c04649b13765f80404f2c2bca6d8da0f8d9f71e414e25f759a7dce2528e412fb41b5e97da2d6f5bdff1c9d334c72d2f89c9fe66425227d3be28c674615c05952584d0813bf3c7ce832a15d49689928e0d8b0bbce6a070e1ce794f0a5692cd64e7366f649a864b5a8235b9160419bdc82a91942bd4644b2bf4e59715e028f52878c9c9ab7b202f45ec4fd8b5dd3b5c5c320de36be0a35f55322ac076cac1e0b7dc98d7e9813b735"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 27.69303995s ago: executing program 5 (id=4751): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) semop(0x0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) 27.604620481s ago: executing program 5 (id=4754): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) 27.575391682s ago: executing program 5 (id=4756): mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 27.488878883s ago: executing program 5 (id=4758): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 27.403943084s ago: executing program 5 (id=4760): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tlb_flush\x00', r4}, 0x18) socket$igmp6(0xa, 0x3, 0x2) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x6a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000040), &(0x7f0000000200)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000002c0)=0x20) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r8) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r10, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xfffffff1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x45) 27.03343863s ago: executing program 5 (id=4765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) 23.943759737s ago: executing program 3 (id=4801): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000540)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b5"], 0xfd, 0x299, &(0x7f0000000280)="$eJzs3M9rE0EUwPHXtGnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUp2jUTE9ubVv6N49CZY/4FevHkXL0UQvPQgXelu1mxLsD9s3Np8P1B2ujMvM7s7CW8XdjbvvXlaq7hWxXiSyqikRFZlSyS/U+oY6mxTQXlU4lbl6sSPzxfu3H9ws1gqzc6rzhUXrhVUderih+cv31766E3cfTf1fkw28g83vxe+bJzdOLe5vRB9esNTo4uNhmcWHVuXqm7NUr3t2Ma1tVp37eau+orTWF5uq6kvTWaXm7brqqm3tWa31Wuo12yreWyqdbUsSyezMmiGDx1RXpufN8W+DAZJGO+1s9ksmuGeleW1fzEoAABwsiSV/z+pulp1tb5f/p8S8v/+CfL/7Z5JI06H9M4NQNFkO9/f3cj/AQAAAAAAAAAAAAAAAAAAAAD4H2z5fs73/Vy0jf7GRCQjItH/SY8T/XGE6z+U4HBxzGIv7mVEnNetcqscbsP6YkWq4ogt02mRn8F86AjLczdKs9MayMu6s9KJD14SHIviI/ne8TNhvMbiV1rltGTj/RckJ2d6xxf2xKdFpFUelSuXY/GW5OTTI2mII0vBvO7Gv5pRvX6rtKf/8aAdAAAAAACngaW/5Xff/4arSVqWRsuG7KkPd3afD0hun+cDKuuj0o0fkfMjyR03AAAAAACDxG2/qBnHsZsUDlcYxFNnZcJJ88fGvu+v7DT6+05TIpLQkX4TkRNwwo+78PVZeAEP0jjJXyUAAAAA/dBN+pMeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg+ugi4dF7Y+y9lisu+FkjhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GX4FAAD//z2KG1o=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x800, 0x7, 0x300, 0x0, r3}, &(0x7f0000000940), &(0x7f0000000280)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 23.884318978s ago: executing program 3 (id=4802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) 23.857216078s ago: executing program 3 (id=4803): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa0601, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00', 0x100}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRES16=r0, @ANYRESOCT=r1], 0x48) 23.74518016s ago: executing program 3 (id=4805): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000001540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000180)={0x20, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0xc024) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000001680)={0x2, 0x0, @multicast1}, &(0x7f00000016c0)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001700)={0x0, 0x2}, &(0x7f0000001740)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001780)={r3, 0xfff9}, 0x8) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 23.620077082s ago: executing program 3 (id=4807): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa0601, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00', 0x100}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRES16=r0, @ANYRESOCT=r1], 0x48) 23.587013713s ago: executing program 3 (id=4809): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000019961cc90000000000000000000000000009", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000380), 0x0}, 0x20) syz_io_uring_setup(0x43d5, &(0x7f0000000200)={0x0, 0xb18c, 0x80, 0x2, 0x2f1}, &(0x7f0000000280), 0xfffffffffffffffc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x35, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 23.545893323s ago: executing program 52 (id=4809): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000019961cc90000000000000000000000000009", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000380), 0x0}, 0x20) syz_io_uring_setup(0x43d5, &(0x7f0000000200)={0x0, 0xb18c, 0x80, 0x2, 0x2f1}, &(0x7f0000000280), 0xfffffffffffffffc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x35, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 12.015108998s ago: executing program 53 (id=4765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) 7.637266364s ago: executing program 6 (id=5101): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.616352954s ago: executing program 6 (id=5103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) 7.589553945s ago: executing program 6 (id=5107): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 7.525401556s ago: executing program 6 (id=5112): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 7.409673557s ago: executing program 6 (id=5120): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 6.310403304s ago: executing program 6 (id=5151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.267832615s ago: executing program 54 (id=5151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.362685539s ago: executing program 1 (id=5221): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@delalloc}, {@nojournal_checksum}, {@journal_async_commit}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@mb_optimize_scan}, {@nobarrier}, {@abort}, {@user_xattr}, {@noblock_validity}, {@errors_remount}]}, 0x0, 0x570, &(0x7f00000019c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) unshare(0x44040000) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) 2.59059298s ago: executing program 0 (id=5152): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) 2.502231842s ago: executing program 0 (id=5245): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095", @ANYBLOB="89031fb2d768b589af9954c2cf089a721e51e750f91e8b5dfa55180d9e776bd452c4cb8e311cc9b87121cc965607e82161f8a40e49597728b1d694038ea687ffe9bc71550f5f7e01daf3b0fac705f88b88e031956a1262aaf4025d7f368f2350f4e1273fb27936e19cd6b2d4f361657d79e515b9ccb60ec1714895b5e4e37cfc5eea10c6f930c24230fef96b71b8504ef652af2814d46f872f302731a73391bdb0e3abb8334e3fe3f53855302bfd62e8d4bc06eb128d9b6988dbe0dca28226cca2a7ddb10c5f0362f0d32c", @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESDEC=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000700)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESOCT=r3, @ANYRESHEX=0x0, @ANYBLOB="308af218c507fba195043000030fac571f882167129e3ce9ffb2d4b5e03563b8b8032777302a9b251d128f8ecf8d76d5490ef766de9b3e0ea02211fb", @ANYRES64=0x0, @ANYRES32=r2], 0x1, 0x30e, &(0x7f0000000f00)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111980000e6ff00180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat(0xffffffffffffff9c, 0x0, 0x248002, 0xcc) pwrite64(r4, 0x0, 0x0, 0x9000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000baba0300"], 0x8) sendfile(r6, r5, 0x0, 0x7ffff000) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000040)={'veth0\x00', @ifru_addrs=@isdn={0x22, 0x0, 0x0, 0x3, 0x81}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x814) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x50800) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000fb4206ba000000a0d0039690cfff6a00050500050007000000da17050005000300e1f0f3eaf6d648b2fb65ff38d32cef10180d2c0376be8b9a30307a70a90c41b9e664c22d6cbb39a51f323b7a2cd54d273b9a83513dd17cf474be52e2f6456303b283f107f416cb14e20d83188773fbbb9f9919a776a1c79bf0e88be74d40d1918281152197a05884"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8000ca0}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r9, @ANYBLOB="100029bd7000fcdbdf25180000002c0001801400020076657468305f746f5f68737200000000140002007465616d5f736c6176655f31a83a000008000700040000006400018008000300010000001400020067656e657665310000000000000000001400020076657468305f746f5f6873720000000008000300030000001400020076657468305f746f5f7465616d000000140002006970365f7674693000000000000000002800028022000400df156ade4a80f1d968766a71ac551c99476f742c8b403d9717d1786ce7de0000"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socket$inet6(0xa, 0x80002, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.177510787s ago: executing program 1 (id=5249): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 2.122283558s ago: executing program 1 (id=5251): capset(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffe, 0x0, @perf_bp={0x0}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x2, 0x0, 0x4000000, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="c0", 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x40) 2.093050488s ago: executing program 1 (id=5253): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000"], 0x4c}, 0x20001850) 2.037478439s ago: executing program 1 (id=5255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r0}], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 2.036802179s ago: executing program 4 (id=5256): capset(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffe, 0x0, @perf_bp={0x0}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x2, 0x0, 0x4000000, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="c0", 0x1}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0xc042) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x801) close(r4) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x40) 2.036349239s ago: executing program 1 (id=5257): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_load(r2, &(0x7f00000002c0)={0xf97cff8c, 0x8}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 1.99743242s ago: executing program 4 (id=5258): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x44, @local, 0x3}, 0x80, 0x0}, 0x41) 1.93487741s ago: executing program 4 (id=5259): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.485090707s ago: executing program 0 (id=5267): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) sendfile(r1, r0, 0x0, 0x3ffff) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000baba0300"], 0x8) 1.445778358s ago: executing program 7 (id=5269): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.445579508s ago: executing program 0 (id=5270): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1.375025559s ago: executing program 7 (id=5271): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x8, 0xf}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1e", 0xd}], 0x1}, 0x0) 1.374721069s ago: executing program 7 (id=5272): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.367328289s ago: executing program 0 (id=5273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c580000e6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0c440961f182babd18cac1bd4f4390af9a9ceafd0002cab9ccb6159c17d29e1000000870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9957399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda20000000000000000a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400001000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c9994894ee7f8249dc1e3428d2129369ee1b85af6eb2ef414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb90900006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905cbb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d4230328de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf1077d3cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df4028fc2018d07af1491ef060cd4403a099f322d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffabd76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a0dd287b84bc21f130be45dbd20c8ce4af2b6ae1fd9e494c7970ff5b152733fc2ef7f4082840705397c0e79727c489adcefac8371225bb1c23a85bb15d4301e16fb4e6247815c43b0c7704d0816349681f100000000000000e01106a76b56a1a434ac969c2498a1fb42495377ec7aa8965df697d907f4bb1ad661172d92a4cb6218205cf3747add0ec76011477872a5e9005b976ba8b88c6185406d9354aeade40f13c4a2127f8e2f65629043732e3478af76b33b06c623069ae78d2c91040fd821f323674d841eff41332d5d856a1d32326bc2bdb980e92cc50d05"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.34067496s ago: executing program 7 (id=5274): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) 1.278606941s ago: executing program 7 (id=5275): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) fsetxattr$security_capability(r0, 0x0, &(0x7f00000003c0)=@v2={0x2000000, [{0x80000000, 0x6}, {0x0, 0xfffffffd}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001d000100000002000000000007000000b0437b92f7cab17c2f58633b892eb40980f5c9648e35387e116f39f3976873efaa7bc1a18ac8bfdf6d1d4fb9b2fbbfec11385938be5f0263ed33f5a0c08111945ebb3998740fd2d7448b01c4988cec0a3bb0f738320017491cf0d20c9056cb39af312dff29271ed5ea2f328588ee65282ce25516344045987fbc0c101bb5423926de8083b2c2dd7e368be76fe7bdcaf29e9c792674ee7edda3895516bf2dfa5d9efac714728136da2e851edc61e3ee1aa5822c0732d3dbebdeaf67b3d3f2d4011e9e04", @ANYRES32=r3, @ANYBLOB="800002000a0002000180c20000000000"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.000562265s ago: executing program 4 (id=5276): capset(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffe, 0x0, @perf_bp={0x0}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x2, 0x0, 0x4000000, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="c0", 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x40) 900.091926ms ago: executing program 4 (id=5277): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffefffffffffffff, r1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) write$P9_RCREATE(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) recvmmsg(r3, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x20, 0x0) 633.11257ms ago: executing program 9 (id=5280): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r1, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 632.53174ms ago: executing program 9 (id=5281): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, 0x0, 0x60) 590.674191ms ago: executing program 9 (id=5282): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 590.383711ms ago: executing program 9 (id=5283): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x8, 0xf}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1e", 0xd}], 0x1}, 0x0) 590.014421ms ago: executing program 9 (id=5284): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 574.954741ms ago: executing program 9 (id=5285): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095", @ANYBLOB="89031fb2d768b589af9954c2cf089a721e51e750f91e8b5dfa55180d9e776bd452c4cb8e311cc9b87121cc965607e82161f8a40e49597728b1d694038ea687ffe9bc71550f5f7e01daf3b0fac705f88b88e031956a1262aaf4025d7f368f2350f4e1273fb27936e19cd6b2d4f361657d79e515b9ccb60ec1714895b5e4e37cfc5eea10c6f930c24230fef96b71b8504ef652af2814d46f872f302731a73391bdb0e3abb8334e3fe3f53855302bfd62e8d4bc06eb128d9b6988dbe0dca28226cca2a7ddb10c5f0362f0d32c", @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESDEC=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000700)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESOCT=r3, @ANYRESHEX=0x0, @ANYBLOB="308af218c507fba195043000030fac571f882167129e3ce9ffb2d4b5e03563b8b8032777302a9b251d128f8ecf8d76d5490ef766de9b3e0ea02211fb", @ANYRES64=0x0, @ANYRES32=r2], 0x1, 0x30e, &(0x7f0000000f00)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111980000e6ff00180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat(0xffffffffffffff9c, 0x0, 0x248002, 0xcc) pwrite64(r4, 0x0, 0x0, 0x9000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000baba0300"], 0x8) sendfile(r6, r5, 0x0, 0x7ffff000) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000040)={'veth0\x00', @ifru_addrs=@isdn={0x22, 0x0, 0x0, 0x3, 0x81}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x814) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x50800) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000fb4206ba000000a0d0039690cfff6a00050500050007000000da17050005000300e1f0f3eaf6d648b2fb65ff38d32cef10180d2c0376be8b9a30307a70a90c41b9e664c22d6cbb39a51f323b7a2cd54d273b9a83513dd17cf474be52e2f6456303b283f107f416cb14e20d83188773fbbb9f9919a776a1c79bf0e88be74d40d1918281152197a05884"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 424.620164ms ago: executing program 7 (id=5286): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@delalloc}, {@nojournal_checksum}, {@journal_async_commit}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@mb_optimize_scan}, {@nobarrier}, {@abort}, {@user_xattr}, {@noblock_validity}, {@errors_remount}]}, 0x0, 0x570, &(0x7f00000019c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) unshare(0x44040000) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=5287): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa0601, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00', 0x100}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRES16=r0, @ANYRESOCT=r1], 0x48) kernel console output (not intermixed with test programs): ed disabled state [ 375.059869][T18188] bridge_slave_1: entered allmulticast mode [ 375.067597][T18188] bridge_slave_1: entered promiscuous mode [ 375.090615][T18188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.095298][T18233] loop5: detected capacity change from 0 to 512 [ 375.101344][T18188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.106875][T18233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.127250][T18104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.130945][T18233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.156442][T18188] team0: Port device team_slave_0 added [ 375.165199][T18188] team0: Port device team_slave_1 added [ 375.182836][T18188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.190046][T18188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.216199][T18188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.229436][T18188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.236442][T18188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.262603][T18188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.288440][T18188] hsr_slave_0: entered promiscuous mode [ 375.294593][T18188] hsr_slave_1: entered promiscuous mode [ 375.300577][T18188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.308151][T18188] Cannot create hsr debugfs directory [ 375.530611][T12033] bond0 (unregistering): Released all slaves [ 375.635030][T12033] tipc: Disabling bearer [ 375.640083][T12033] tipc: Left network mode [ 375.650519][T12033] hsr_slave_0: left promiscuous mode [ 375.656654][T12033] hsr_slave_1: left promiscuous mode [ 375.666164][T12033] veth1_macvtap: left promiscuous mode [ 375.673544][T12033] veth0_macvtap: left promiscuous mode [ 375.679662][T12033] veth1_vlan: left promiscuous mode [ 375.684913][T12033] veth0_vlan: left promiscuous mode [ 375.853970][T18188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.863588][T18188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.873021][T18188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.881908][T18188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.925459][T18188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.965594][T18188] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.976276][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.983551][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.002802][ T1716] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.009950][ T1716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.021349][T17356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.104584][T18188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.148113][T18264] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4650'. [ 376.157722][T18264] FAULT_INJECTION: forcing a failure. [ 376.157722][T18264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.171024][T18264] CPU: 0 UID: 0 PID: 18264 Comm: syz.5.4650 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 376.171057][T18264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.171072][T18264] Call Trace: [ 376.171079][T18264] [ 376.171087][T18264] __dump_stack+0x1d/0x30 [ 376.171112][T18264] dump_stack_lvl+0xe8/0x140 [ 376.171250][T18264] dump_stack+0x15/0x1b [ 376.171273][T18264] should_fail_ex+0x265/0x280 [ 376.171316][T18264] should_fail+0xb/0x20 [ 376.171421][T18264] should_fail_usercopy+0x1a/0x20 [ 376.171493][T18264] _copy_to_user+0x20/0xa0 [ 376.171521][T18264] simple_read_from_buffer+0xb5/0x130 [ 376.171563][T18264] proc_fail_nth_read+0x100/0x140 [ 376.171624][T18264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.171667][T18264] vfs_read+0x19d/0x6f0 [ 376.171770][T18264] ? __rcu_read_unlock+0x4f/0x70 [ 376.171798][T18264] ? __fget_files+0x184/0x1c0 [ 376.171827][T18264] ksys_read+0xda/0x1a0 [ 376.171931][T18264] __x64_sys_read+0x40/0x50 [ 376.171972][T18264] x64_sys_call+0x2d77/0x2fb0 [ 376.172000][T18264] do_syscall_64+0xd2/0x200 [ 376.172024][T18264] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 376.172068][T18264] ? clear_bhb_loop+0x40/0x90 [ 376.172096][T18264] ? clear_bhb_loop+0x40/0x90 [ 376.172123][T18264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.172149][T18264] RIP: 0033:0x7f79da75d33c [ 376.172177][T18264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 376.172200][T18264] RSP: 002b:00007f79d8dc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.172224][T18264] RAX: ffffffffffffffda RBX: 00007f79da985fa0 RCX: 00007f79da75d33c [ 376.172263][T18264] RDX: 000000000000000f RSI: 00007f79d8dc70a0 RDI: 000000000000000b [ 376.172298][T18264] RBP: 00007f79d8dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 376.172312][T18264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.172323][T18264] R13: 0000000000000000 R14: 00007f79da985fa0 R15: 00007ffdf9a1a6d8 [ 376.172347][T18264] [ 376.212856][T18246] chnl_net:caif_netlink_parms(): no params data found [ 376.430269][T18246] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.437374][T18246] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.444783][T18246] bridge_slave_0: entered allmulticast mode [ 376.451519][T18246] bridge_slave_0: entered promiscuous mode [ 376.462737][T18246] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.469979][T18246] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.477236][T18246] bridge_slave_1: entered allmulticast mode [ 376.483859][T18246] bridge_slave_1: entered promiscuous mode [ 376.503418][T18246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.515019][T18188] veth0_vlan: entered promiscuous mode [ 376.525181][T18246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.550405][T18278] loop5: detected capacity change from 0 to 128 [ 376.557769][T18246] team0: Port device team_slave_0 added [ 376.564817][T18278] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 376.567207][T18188] veth1_vlan: entered promiscuous mode [ 376.572488][T18278] FAT-fs (loop5): Filesystem has been set read-only [ 376.583880][T18246] team0: Port device team_slave_1 added [ 376.585887][T18278] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 376.605423][T18246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.612689][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.638674][T18246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.649905][T12033] bridge_slave_1: left allmulticast mode [ 376.655661][T12033] bridge_slave_1: left promiscuous mode [ 376.661439][T12033] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.669456][T12033] bridge_slave_0: left allmulticast mode [ 376.675127][T12033] bridge_slave_0: left promiscuous mode [ 376.680959][T12033] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.721280][T18282] loop8: detected capacity change from 0 to 1024 [ 376.731519][T18282] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.744033][T12033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.754151][T12033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.763644][T12033] bond0 (unregistering): Released all slaves [ 376.770673][T17502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.783150][T18246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.790232][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.816307][T18246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.846811][T18246] hsr_slave_0: entered promiscuous mode [ 376.853246][T18246] hsr_slave_1: entered promiscuous mode [ 376.859406][T18246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.866994][T18246] Cannot create hsr debugfs directory [ 376.880143][T12033] hsr_slave_0: left promiscuous mode [ 376.888718][T12033] hsr_slave_1: left promiscuous mode [ 376.895301][T12033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.905162][T12033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.946307][T12033] team0 (unregistering): Port device team_slave_1 removed [ 376.957415][T12033] team0 (unregistering): Port device team_slave_0 removed [ 376.998046][T18287] netlink: 'syz.5.4657': attribute type 3 has an invalid length. [ 377.028584][T18188] veth0_macvtap: entered promiscuous mode [ 377.042061][T18188] veth1_macvtap: entered promiscuous mode [ 377.054606][T18188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.072788][T18188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.093291][T18188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.102109][T18188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.110866][T18188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.119661][T18188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.180959][T18301] FAULT_INJECTION: forcing a failure. [ 377.180959][T18301] name failslab, interval 1, probability 0, space 0, times 0 [ 377.193755][T18301] CPU: 0 UID: 0 PID: 18301 Comm: syz.2.4635 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 377.193828][T18301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.193844][T18301] Call Trace: [ 377.193852][T18301] [ 377.193860][T18301] __dump_stack+0x1d/0x30 [ 377.193887][T18301] dump_stack_lvl+0xe8/0x140 [ 377.193912][T18301] dump_stack+0x15/0x1b [ 377.193967][T18301] should_fail_ex+0x265/0x280 [ 377.193997][T18301] should_failslab+0x8c/0xb0 [ 377.194025][T18301] __kmalloc_noprof+0xa5/0x3e0 [ 377.194055][T18301] ? nla_strdup+0x78/0xc0 [ 377.194073][T18301] nla_strdup+0x78/0xc0 [ 377.194162][T18301] nf_tables_newtable+0x3ba/0xea0 [ 377.194229][T18301] nfnetlink_rcv+0xb96/0x1690 [ 377.194347][T18301] netlink_unicast+0x59e/0x670 [ 377.194380][T18301] netlink_sendmsg+0x58b/0x6b0 [ 377.194400][T18301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.194421][T18301] __sock_sendmsg+0x142/0x180 [ 377.194453][T18301] ____sys_sendmsg+0x31e/0x4e0 [ 377.194511][T18301] ___sys_sendmsg+0x17b/0x1d0 [ 377.194584][T18301] __x64_sys_sendmsg+0xd4/0x160 [ 377.194662][T18301] x64_sys_call+0x2999/0x2fb0 [ 377.194690][T18301] do_syscall_64+0xd2/0x200 [ 377.194712][T18301] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 377.194746][T18301] ? clear_bhb_loop+0x40/0x90 [ 377.194774][T18301] ? clear_bhb_loop+0x40/0x90 [ 377.194796][T18301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.194823][T18301] RIP: 0033:0x7fcea894e929 [ 377.194837][T18301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.194855][T18301] RSP: 002b:00007fcea6fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.194873][T18301] RAX: ffffffffffffffda RBX: 00007fcea8b75fa0 RCX: 00007fcea894e929 [ 377.194890][T18301] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 377.194906][T18301] RBP: 00007fcea6fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 377.194922][T18301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.194938][T18301] R13: 0000000000000000 R14: 00007fcea8b75fa0 R15: 00007ffe58851fb8 [ 377.194963][T18301] [ 377.424085][T18104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.450403][T18288] chnl_net:caif_netlink_parms(): no params data found [ 377.508031][T18104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.519793][T18288] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.526955][T18288] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.534230][T18288] bridge_slave_0: entered allmulticast mode [ 377.541215][T18288] bridge_slave_0: entered promiscuous mode [ 377.552229][T18288] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.559531][T18288] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.567428][T18288] bridge_slave_1: entered allmulticast mode [ 377.574479][T18288] bridge_slave_1: entered promiscuous mode [ 377.595159][T18288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.610940][T18104] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.633048][T18104] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.651115][T18104] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.665540][T18104] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.693522][T18246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.712774][T18246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.723134][T18288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.733346][T18246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.741087][T18315] SELinux: failed to load policy [ 377.746696][T18315] netlink: 'syz.3.4661': attribute type 10 has an invalid length. [ 377.762841][T18246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.794293][T18315] team0 (unregistering): Port device team_slave_0 removed [ 377.810211][T18315] team0 (unregistering): Port device team_slave_1 removed [ 377.978390][T18319] netlink: 'syz.5.4662': attribute type 1 has an invalid length. [ 377.986547][ T12] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.999307][T18288] team0: Port device team_slave_0 added [ 378.425682][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4662'. [ 378.452311][T18319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.463038][T18288] team0: Port device team_slave_1 added [ 378.478935][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 378.478971][ T29] audit: type=1400 audit(378.374:25003): avc: denied { create } for pid=18316 comm="syz.5.4662" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.505639][ T29] audit: type=1400 audit(378.384:25004): avc: denied { write } for pid=18316 comm="syz.5.4662" name="file0" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.527835][ T29] audit: type=1400 audit(378.384:25005): avc: denied { open } for pid=18316 comm="syz.5.4662" path="/47/file0" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.550030][ T29] audit: type=1400 audit(378.384:25006): avc: denied { ioctl } for pid=18316 comm="syz.5.4662" path="/47/file0" dev="tmpfs" ino=276 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.662044][ T12] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.675134][T18317] bond1 (unregistering): Released all slaves [ 378.691328][T18319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=18319 comm=syz.5.4662 [ 378.707343][T18288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.714386][T18288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.740552][T18288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.805284][T18246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.835408][ T29] audit: type=1400 audit(378.794:25007): avc: denied { unlink } for pid=17356 comm="syz-executor" name="file0" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 378.866093][T18246] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.874706][ T29] audit: type=1326 audit(378.824:25008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.5.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79da75e929 code=0x7ffc0000 [ 378.888723][T18288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.897823][ T29] audit: type=1326 audit(378.824:25009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.5.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79da75e929 code=0x7ffc0000 [ 378.904762][T18288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.927713][ T29] audit: type=1326 audit(378.834:25010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.5.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f79da75e929 code=0x7ffc0000 [ 378.953746][T18288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.005434][ T29] audit: type=1326 audit(378.834:25011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.5.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79da75e929 code=0x7ffc0000 [ 379.028624][ T29] audit: type=1326 audit(378.834:25012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.5.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79da75e929 code=0x7ffc0000 [ 379.056379][ T12] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.080839][T18288] hsr_slave_0: entered promiscuous mode [ 379.086845][T18288] hsr_slave_1: entered promiscuous mode [ 379.092989][T18338] netlink: 332 bytes leftover after parsing attributes in process `syz.5.4665'. [ 379.093074][T18288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.109870][T18288] Cannot create hsr debugfs directory [ 379.116652][ T12] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.128644][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.135742][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.157325][T12033] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.164549][T12033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.244851][T18288] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.256685][T18344] FAULT_INJECTION: forcing a failure. [ 379.256685][T18344] name failslab, interval 1, probability 0, space 0, times 0 [ 379.269485][T18344] CPU: 0 UID: 0 PID: 18344 Comm: syz.2.4666 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 379.269565][T18344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.269581][T18344] Call Trace: [ 379.269589][T18344] [ 379.269648][T18344] __dump_stack+0x1d/0x30 [ 379.269732][T18344] dump_stack_lvl+0xe8/0x140 [ 379.269755][T18344] dump_stack+0x15/0x1b [ 379.269775][T18344] should_fail_ex+0x265/0x280 [ 379.269827][T18344] should_failslab+0x8c/0xb0 [ 379.269857][T18344] kmem_cache_alloc_node_noprof+0x57/0x320 [ 379.269960][T18344] ? __alloc_skb+0x101/0x320 [ 379.269998][T18344] __alloc_skb+0x101/0x320 [ 379.270033][T18344] netlink_ack+0xfd/0x500 [ 379.270071][T18344] ? __pfx_taskstats_user_cmd+0x10/0x10 [ 379.270163][T18344] netlink_rcv_skb+0x192/0x220 [ 379.270203][T18344] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.270361][T18344] genl_rcv+0x28/0x40 [ 379.270390][T18344] netlink_unicast+0x59e/0x670 [ 379.270432][T18344] netlink_sendmsg+0x58b/0x6b0 [ 379.270460][T18344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.270514][T18344] __sock_sendmsg+0x142/0x180 [ 379.270615][T18344] ____sys_sendmsg+0x31e/0x4e0 [ 379.270658][T18344] ___sys_sendmsg+0x17b/0x1d0 [ 379.270709][T18344] __x64_sys_sendmsg+0xd4/0x160 [ 379.270793][T18344] x64_sys_call+0x2999/0x2fb0 [ 379.270822][T18344] do_syscall_64+0xd2/0x200 [ 379.270892][T18344] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 379.270927][T18344] ? clear_bhb_loop+0x40/0x90 [ 379.270974][T18344] ? clear_bhb_loop+0x40/0x90 [ 379.271003][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.271073][T18344] RIP: 0033:0x7fcea894e929 [ 379.271093][T18344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.271123][T18344] RSP: 002b:00007fcea6fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.271148][T18344] RAX: ffffffffffffffda RBX: 00007fcea8b75fa0 RCX: 00007fcea894e929 [ 379.271164][T18344] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000006 [ 379.271181][T18344] RBP: 00007fcea6fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 379.271197][T18344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.271245][T18344] R13: 0000000000000000 R14: 00007fcea8b75fa0 R15: 00007ffe58851fb8 [ 379.271269][T18344] [ 379.288225][T18246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.521635][T18288] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.537138][ T12] bridge_slave_1: left allmulticast mode [ 379.542848][ T12] bridge_slave_1: left promiscuous mode [ 379.548526][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.556405][ T12] bridge_slave_0: left allmulticast mode [ 379.562125][ T12] bridge_slave_0: left promiscuous mode [ 379.567811][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.595672][T18350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4668'. [ 379.646320][T18351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4668'. [ 379.660858][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.670872][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.680322][ T12] bond0 (unregistering): Released all slaves [ 379.693264][T18288] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.722303][ T12] hsr_slave_0: left promiscuous mode [ 379.727924][ T12] hsr_slave_1: left promiscuous mode [ 379.733740][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.741326][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.751873][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.759789][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.771415][ T12] veth1_macvtap: left promiscuous mode [ 379.776977][ T12] veth0_macvtap: left promiscuous mode [ 379.782623][ T12] veth1_vlan: left promiscuous mode [ 379.787934][ T12] veth0_vlan: left promiscuous mode [ 379.868189][T18288] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.902475][T18246] veth0_vlan: entered promiscuous mode [ 379.910224][T18246] veth1_vlan: entered promiscuous mode [ 379.924472][T18246] veth0_macvtap: entered promiscuous mode [ 379.932148][T18246] veth1_macvtap: entered promiscuous mode [ 379.940375][ T3394] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 379.942781][T18246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.947824][ T3394] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 379.962596][ T3394] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 379.964507][T18246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.973697][ T3394] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 379.980317][T18246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.995255][T18246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.004065][T18246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.012976][T18246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.048945][T18288] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 380.058403][T18288] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 380.068594][T18288] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 380.078578][T18288] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 380.115929][T18288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.129410][T18288] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.138340][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.145452][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.156770][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.163873][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.233204][T18288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.348428][T18288] veth0_vlan: entered promiscuous mode [ 380.356793][T18288] veth1_vlan: entered promiscuous mode [ 380.373746][T18288] veth0_macvtap: entered promiscuous mode [ 380.381312][T18288] veth1_macvtap: entered promiscuous mode [ 380.392737][T18288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.401578][T18288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.414198][T18288] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.423076][T18288] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.432020][T18288] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.440800][T18288] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.484590][T18390] loop7: detected capacity change from 0 to 128 [ 381.064733][T18404] program syz.1.4675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.093875][ T3355] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 381.101475][ T3355] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 381.108948][ T3355] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 381.116943][ T3355] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 381.146467][ T36] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 381.154060][ T36] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 381.161513][ T36] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 381.170424][ T36] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 382.026195][T18431] loop5: detected capacity change from 0 to 1024 [ 382.033019][T18431] EXT4-fs: Ignoring removed bh option [ 382.062221][T18431] EXT4-fs (loop5): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.077917][T18431] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4684: inode #3: comm syz.5.4684: iget: illegal inode # [ 382.098182][T18431] EXT4-fs (loop5): Remounting filesystem read-only [ 382.104912][T18431] EXT4-fs warning (device loop5): ext4_xattr_block_set:2190: inode #19: comm syz.5.4684: dec ref error=-30 [ 382.132617][T17356] EXT4-fs (loop5): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 382.135995][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.185386][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.226916][T18450] block device autoloading is deprecated and will be removed. [ 382.284971][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.336089][T18468] FAULT_INJECTION: forcing a failure. [ 382.336089][T18468] name failslab, interval 1, probability 0, space 0, times 0 [ 382.336438][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.348949][T18468] CPU: 0 UID: 0 PID: 18468 Comm: syz.1.4693 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 382.349106][T18468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.349126][T18468] Call Trace: [ 382.349134][T18468] [ 382.349145][T18468] __dump_stack+0x1d/0x30 [ 382.349176][T18468] dump_stack_lvl+0xe8/0x140 [ 382.349237][T18468] dump_stack+0x15/0x1b [ 382.349260][T18468] should_fail_ex+0x265/0x280 [ 382.349304][T18468] should_failslab+0x8c/0xb0 [ 382.349338][T18468] __kvmalloc_node_noprof+0x123/0x4e0 [ 382.349448][T18468] ? simple_xattr_alloc+0x43/0x90 [ 382.349485][T18468] simple_xattr_alloc+0x43/0x90 [ 382.349518][T18468] shmem_initxattrs+0x18c/0x350 [ 382.349554][T18468] security_inode_init_security+0x25c/0x330 [ 382.349693][T18468] ? __pfx_shmem_initxattrs+0x10/0x10 [ 382.349729][T18468] shmem_mknod+0xad/0x180 [ 382.349759][T18468] shmem_create+0x34/0x50 [ 382.349789][T18468] ? __pfx_shmem_create+0x10/0x10 [ 382.349827][T18468] path_openat+0x1102/0x2170 [ 382.349931][T18468] do_filp_open+0x109/0x230 [ 382.349984][T18468] do_sys_openat2+0xa6/0x110 [ 382.350035][T18468] __x64_sys_open+0xe6/0x110 [ 382.350125][T18468] x64_sys_call+0x14d4/0x2fb0 [ 382.350155][T18468] do_syscall_64+0xd2/0x200 [ 382.350179][T18468] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 382.350228][T18468] ? clear_bhb_loop+0x40/0x90 [ 382.350256][T18468] ? clear_bhb_loop+0x40/0x90 [ 382.350304][T18468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.350332][T18468] RIP: 0033:0x7effbd05e929 [ 382.350353][T18468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.350378][T18468] RSP: 002b:00007effbb6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 382.350404][T18468] RAX: ffffffffffffffda RBX: 00007effbd285fa0 RCX: 00007effbd05e929 [ 382.350421][T18468] RDX: 0000000000000006 RSI: 000000000014927e RDI: 00002000000000c0 [ 382.350487][T18468] RBP: 00007effbb6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 382.350504][T18468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.350521][T18468] R13: 0000000000000000 R14: 00007effbd285fa0 R15: 00007fffc7686688 [ 382.350548][T18468] [ 382.603024][T18475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.679201][ T37] bridge_slave_1: left allmulticast mode [ 382.684944][ T37] bridge_slave_1: left promiscuous mode [ 382.690664][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.698470][ T37] bridge_slave_0: left allmulticast mode [ 382.704220][ T37] bridge_slave_0: left promiscuous mode [ 382.709921][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.790848][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.800963][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.810877][ T37] bond0 (unregistering): Released all slaves [ 382.823348][T18444] chnl_net:caif_netlink_parms(): no params data found [ 382.861710][T18444] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.869025][T18444] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.876253][T18444] bridge_slave_0: entered allmulticast mode [ 382.882917][T18444] bridge_slave_0: entered promiscuous mode [ 382.890068][T18444] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.897144][T18444] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.904378][T18444] bridge_slave_1: entered allmulticast mode [ 382.911078][T18444] bridge_slave_1: entered promiscuous mode [ 382.925795][ T37] hsr_slave_0: left promiscuous mode [ 382.932958][ T37] hsr_slave_1: left promiscuous mode [ 382.938726][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.946297][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.955297][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.962935][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.975898][ T37] veth1_macvtap: left promiscuous mode [ 382.987542][ T37] veth0_macvtap: left promiscuous mode [ 382.993160][ T37] veth1_vlan: left promiscuous mode [ 382.998513][ T37] veth0_vlan: left promiscuous mode [ 383.030688][T18496] loop5: detected capacity change from 0 to 128 [ 383.077247][ T37] team0 (unregistering): Port device team_slave_1 removed [ 383.088033][ T37] team0 (unregistering): Port device team_slave_0 removed [ 383.138550][T18444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.150583][T18507] loop5: detected capacity change from 0 to 128 [ 383.158733][T18444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.183595][T18444] team0: Port device team_slave_0 added [ 383.190684][T18444] team0: Port device team_slave_1 added [ 383.196604][T18509] FAULT_INJECTION: forcing a failure. [ 383.196604][T18509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.210006][T18509] CPU: 0 UID: 0 PID: 18509 Comm: syz.5.4702 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 383.210034][T18509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.210050][T18509] Call Trace: [ 383.210057][T18509] [ 383.210067][T18509] __dump_stack+0x1d/0x30 [ 383.210161][T18509] dump_stack_lvl+0xe8/0x140 [ 383.210181][T18509] dump_stack+0x15/0x1b [ 383.210196][T18509] should_fail_ex+0x265/0x280 [ 383.210235][T18509] should_fail+0xb/0x20 [ 383.210323][T18509] should_fail_usercopy+0x1a/0x20 [ 383.210366][T18509] _copy_to_user+0x20/0xa0 [ 383.210394][T18509] simple_read_from_buffer+0xb5/0x130 [ 383.210434][T18509] proc_fail_nth_read+0x100/0x140 [ 383.210539][T18509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 383.210582][T18509] vfs_read+0x19d/0x6f0 [ 383.210683][T18509] ? __rcu_read_unlock+0x4f/0x70 [ 383.210709][T18509] ? __fget_files+0x184/0x1c0 [ 383.210731][T18509] ksys_read+0xda/0x1a0 [ 383.210789][T18509] __x64_sys_read+0x40/0x50 [ 383.210830][T18509] x64_sys_call+0x2d77/0x2fb0 [ 383.210858][T18509] do_syscall_64+0xd2/0x200 [ 383.210881][T18509] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 383.210972][T18509] ? clear_bhb_loop+0x40/0x90 [ 383.211000][T18509] ? clear_bhb_loop+0x40/0x90 [ 383.211028][T18509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.211050][T18509] RIP: 0033:0x7f79da75d33c [ 383.211065][T18509] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 383.211153][T18509] RSP: 002b:00007f79d8dc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.211186][T18509] RAX: ffffffffffffffda RBX: 00007f79da985fa0 RCX: 00007f79da75d33c [ 383.211203][T18509] RDX: 000000000000000f RSI: 00007f79d8dc70a0 RDI: 0000000000000003 [ 383.211219][T18509] RBP: 00007f79d8dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 383.211234][T18509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.211281][T18509] R13: 0000000000000001 R14: 00007f79da985fa0 R15: 00007ffdf9a1a6d8 [ 383.211304][T18509] [ 383.440282][T18444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.447298][T18444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.473460][T18444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.487763][T18444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.494827][T18444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.520882][T18444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.552098][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 383.552113][ T29] audit: type=1326 audit(383.514:25102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18512 comm="syz.5.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79da75e929 code=0x7ffc0000 [ 383.581321][ T29] audit: type=1326 audit(383.514:25103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18512 comm="syz.5.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f79da75e929 code=0x7ffc0000 [ 383.612295][ T29] audit: type=1326 audit(383.514:25104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18512 comm="syz.5.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79da75e929 code=0x7ffc0000 [ 383.635399][ T29] audit: type=1326 audit(383.514:25105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18512 comm="syz.5.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f79da75e929 code=0x7ffc0000 [ 383.658478][ T29] audit: type=1326 audit(383.514:25106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18512 comm="syz.5.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79da75e929 code=0x7ffc0000 [ 383.685218][T18444] hsr_slave_0: entered promiscuous mode [ 383.693117][T18444] hsr_slave_1: entered promiscuous mode [ 383.699194][ T29] audit: type=1400 audit(383.664:25107): avc: denied { ioctl } for pid=18510 comm="syz.7.4703" path="socket:[67974]" dev="sockfs" ino=67974 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 383.699774][T18444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.732815][T18444] Cannot create hsr debugfs directory [ 383.789232][ T29] audit: type=1400 audit(383.754:25108): avc: denied { create } for pid=18523 comm="syz.7.4709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 383.810411][ T29] audit: type=1400 audit(383.774:25109): avc: denied { connect } for pid=18523 comm="syz.7.4709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 383.829913][ T29] audit: type=1400 audit(383.774:25110): avc: denied { write } for pid=18523 comm="syz.7.4709" path="socket:[67989]" dev="sockfs" ino=67989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 383.886209][ T29] audit: type=1326 audit(383.844:25111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.3.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3d2ae929 code=0x7ffc0000 [ 383.974069][T18542] loop7: detected capacity change from 0 to 128 [ 383.992161][T18542] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 383.999825][T18542] FAT-fs (loop7): Filesystem has been set read-only [ 384.008618][T18542] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 384.018657][T18475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.064327][T18475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.075047][T18547] loop7: detected capacity change from 0 to 2048 [ 384.138761][T18475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.223840][T18444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.255290][T18444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.276225][T18475] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.294994][T18444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.311752][T18475] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.337399][T18475] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.347396][T18444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.360007][T18475] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.462253][T18444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.475402][T18444] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.486930][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.494087][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.506798][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.514000][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.611097][T18444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.631185][T18572] netlink: 300 bytes leftover after parsing attributes in process `syz.5.4720'. [ 384.646640][T18573] loop5: detected capacity change from 0 to 128 [ 384.791957][T18444] veth0_vlan: entered promiscuous mode [ 384.803313][T18444] veth1_vlan: entered promiscuous mode [ 384.822824][T18444] veth0_macvtap: entered promiscuous mode [ 384.830451][T18444] veth1_macvtap: entered promiscuous mode [ 384.842068][T18444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.854862][T18444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.866505][T18444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.875389][T18444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.884331][T18444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.893127][T18444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.909087][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4722'. [ 384.930746][T18590] FAULT_INJECTION: forcing a failure. [ 384.930746][T18590] name failslab, interval 1, probability 0, space 0, times 0 [ 384.943608][T18590] CPU: 1 UID: 0 PID: 18590 Comm: syz.5.4722 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 384.943645][T18590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.943662][T18590] Call Trace: [ 384.943670][T18590] [ 384.943680][T18590] __dump_stack+0x1d/0x30 [ 384.943707][T18590] dump_stack_lvl+0xe8/0x140 [ 384.943746][T18590] dump_stack+0x15/0x1b [ 384.943767][T18590] should_fail_ex+0x265/0x280 [ 384.943862][T18590] should_failslab+0x8c/0xb0 [ 384.943891][T18590] kmem_cache_alloc_node_noprof+0x57/0x320 [ 384.943991][T18590] ? __alloc_skb+0x101/0x320 [ 384.944034][T18590] ? __rtnl_unlock+0x95/0xb0 [ 384.944073][T18590] __alloc_skb+0x101/0x320 [ 384.944112][T18590] netlink_ack+0xfd/0x500 [ 384.944168][T18590] netlink_rcv_skb+0x192/0x220 [ 384.944224][T18590] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.944325][T18590] rtnetlink_rcv+0x1c/0x30 [ 384.944350][T18590] netlink_unicast+0x59e/0x670 [ 384.944392][T18590] netlink_sendmsg+0x58b/0x6b0 [ 384.944420][T18590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.944443][T18590] __sock_sendmsg+0x142/0x180 [ 384.944517][T18590] ____sys_sendmsg+0x31e/0x4e0 [ 384.944563][T18590] ___sys_sendmsg+0x17b/0x1d0 [ 384.944618][T18590] __x64_sys_sendmsg+0xd4/0x160 [ 384.944668][T18590] x64_sys_call+0x2999/0x2fb0 [ 384.944705][T18590] do_syscall_64+0xd2/0x200 [ 384.944725][T18590] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 384.944753][T18590] ? clear_bhb_loop+0x40/0x90 [ 384.944776][T18590] ? clear_bhb_loop+0x40/0x90 [ 384.944810][T18590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.944837][T18590] RIP: 0033:0x7f79da75e929 [ 384.944856][T18590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.944879][T18590] RSP: 002b:00007f79d8dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.944904][T18590] RAX: ffffffffffffffda RBX: 00007f79da985fa0 RCX: 00007f79da75e929 [ 384.944920][T18590] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000003 [ 384.944940][T18590] RBP: 00007f79d8dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 384.944957][T18590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.944973][T18590] R13: 0000000000000000 R14: 00007f79da985fa0 R15: 00007ffdf9a1a6d8 [ 384.945006][T18590] [ 385.232983][T18601] loop7: detected capacity change from 0 to 128 [ 385.239547][T18598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4687'. [ 385.250267][T18598] tipc: Started in network mode [ 385.255165][T18598] tipc: Node identity 4, cluster identity 4711 [ 385.261434][T18598] tipc: Node number set to 4 [ 385.266494][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4687'. [ 385.337988][T18601] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 385.345773][T18601] FAT-fs (loop7): Filesystem has been set read-only [ 385.394067][T18612] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 385.461301][T18613] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 385.482042][T18614] netlink: 'syz.4.4730': attribute type 39 has an invalid length. [ 385.504738][T18613] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 385.613417][T18631] loop3: detected capacity change from 0 to 1024 [ 385.620218][T18631] EXT4-fs: Ignoring removed i_version option [ 385.628685][T18631] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 385.641890][T18631] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4736: Invalid block bitmap block 0 in block_group 0 [ 385.655812][T18631] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4736: Failed to acquire dquot type 0 [ 385.667553][T18631] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4736: Freeing blocks not in datazone - block = 0, count = 4096 [ 385.681241][T18631] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4736: Invalid inode bitmap blk 0 in block_group 0 [ 385.696373][ T146] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 385.708264][T18631] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 385.717061][T18631] EXT4-fs (loop3): 1 orphan inode deleted [ 385.723341][T18631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.793603][T18645] loop5: detected capacity change from 0 to 128 [ 385.983993][T18652] loop5: detected capacity change from 0 to 128 [ 386.007900][T18652] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 386.015801][T18652] FAT-fs (loop5): Filesystem has been set read-only [ 386.042641][T18652] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 386.184187][T18639] ------------[ cut here ]------------ [ 386.189840][T18639] WARNING: CPU: 1 PID: 18639 at kernel/events/core.c:7211 perf_pending_task+0x206/0x210 [ 386.199715][T18639] Modules linked in: [ 386.203641][T18639] CPU: 1 UID: 60928 PID: 18639 Comm: syz.7.4740 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 386.216628][T18639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.226822][T18639] RIP: 0010:perf_pending_task+0x206/0x210 [ 386.232620][T18639] Code: 10 f0 fc ff 41 88 6c 1d 00 eb 05 e8 c4 ec e2 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 ab ec e2 ff 90 <0f> 0b 90 eb 86 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 386.252387][T18639] RSP: 0018:ffffc9000173fc30 EFLAGS: 00010293 [ 386.258537][T18639] RAX: ffffffff8174d4b5 RBX: 0000000000000000 RCX: ffff8881032c9040 [ 386.266663][T18639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811aae4d88 [ 386.274768][T18639] RBP: 000000007e8e34dd R08: 000188811aae4d8f R09: 0000000000000000 [ 386.282826][T18639] R10: ffff88811864f3c0 R11: ffffffff8174d2b0 R12: ffff88811c8e8f70 [ 386.290902][T18639] R13: ffff8881032c9040 R14: ffff88811c8e90b8 R15: ffff88811aae4d00 [ 386.299002][T18639] FS: 0000000000000000(0000) GS:ffff8882aef30000(0000) knlGS:0000000000000000 [ 386.308021][T18639] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.314741][T18639] CR2: 000020000000f000 CR3: 0000000006834000 CR4: 00000000003506f0 [ 386.322832][T18639] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 386.330953][T18639] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 386.339063][T18639] Call Trace: [ 386.342356][T18639] [ 386.345311][T18639] task_work_run+0x12e/0x1a0 [ 386.350003][T18639] do_exit+0x483/0x1590 [ 386.354196][T18639] do_group_exit+0xff/0x140 [ 386.358823][T18639] ? get_signal+0xe51/0xf70 [ 386.363425][T18639] get_signal+0xe59/0xf70 [ 386.367838][T18639] arch_do_signal_or_restart+0x96/0x480 [ 386.373515][T18639] exit_to_user_mode_loop+0x7a/0x100 [ 386.378872][T18639] do_syscall_64+0x1d6/0x200 [ 386.383501][T18639] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 386.389351][T18639] ? clear_bhb_loop+0x40/0x90 [ 386.394154][T18639] ? clear_bhb_loop+0x40/0x90 [ 386.399053][T18639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.404984][T18639] RIP: 0033:0x7f4abde2e929 [ 386.409801][T18639] Code: Unable to access opcode bytes at 0x7f4abde2e8ff. [ 386.416901][T18639] RSP: 002b:00007f4abc497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 386.425581][T18639] RAX: 0000000000000000 RBX: 00007f4abe055fa0 RCX: 00007f4abde2e929 [ 386.433670][T18639] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 386.441721][T18639] RBP: 00007f4abdeb0b39 R08: 0000200000000040 R09: 0000000000000000 [ 386.449813][T18639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.457815][T18639] R13: 0000000000000000 R14: 00007f4abe055fa0 R15: 00007ffe875021c8 [ 386.465943][T18639] [ 386.468995][T18639] ---[ end trace 0000000000000000 ]--- [ 386.489581][T17882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.630076][T18671] SELinux: failed to load policy [ 386.663154][T18671] netlink: 'syz.3.4753': attribute type 10 has an invalid length. [ 386.683380][T18675] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.698777][T18677] loop5: detected capacity change from 0 to 1024 [ 386.715159][T18677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.731887][T18675] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.757844][T17356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.791566][T18687] loop3: detected capacity change from 0 to 128 [ 386.811943][T18675] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.895721][T18675] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.908166][T18694] loop3: detected capacity change from 0 to 1024 [ 386.943326][T18694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.991370][T18675] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.028050][T18675] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.043129][T18694] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 387.090196][T18675] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.124046][T18675] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.166825][T17882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.256742][T18709] SELinux: failed to load policy [ 387.265262][T18709] netlink: 'syz.7.4767': attribute type 10 has an invalid length. [ 387.284270][T18709] team0 (unregistering): Port device team_slave_0 removed [ 387.303563][T18709] team0 (unregistering): Port device team_slave_1 removed [ 387.686677][T18714] FAULT_INJECTION: forcing a failure. [ 387.686677][T18714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.701891][T18714] CPU: 0 UID: 0 PID: 18714 Comm: syz.1.4768 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 387.701927][T18714] Tainted: [W]=WARN [ 387.701934][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.701946][T18714] Call Trace: [ 387.701952][T18714] [ 387.701959][T18714] __dump_stack+0x1d/0x30 [ 387.702064][T18714] dump_stack_lvl+0xe8/0x140 [ 387.702092][T18714] dump_stack+0x15/0x1b [ 387.702115][T18714] should_fail_ex+0x265/0x280 [ 387.702152][T18714] should_fail+0xb/0x20 [ 387.702234][T18714] should_fail_usercopy+0x1a/0x20 [ 387.702275][T18714] _copy_from_user+0x1c/0xb0 [ 387.702297][T18714] ___sys_sendmsg+0xc1/0x1d0 [ 387.702346][T18714] __x64_sys_sendmsg+0xd4/0x160 [ 387.702431][T18714] x64_sys_call+0x2999/0x2fb0 [ 387.702454][T18714] do_syscall_64+0xd2/0x200 [ 387.702472][T18714] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 387.702497][T18714] ? clear_bhb_loop+0x40/0x90 [ 387.702571][T18714] ? clear_bhb_loop+0x40/0x90 [ 387.702600][T18714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.702754][T18714] RIP: 0033:0x7effbd05e929 [ 387.702772][T18714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.702798][T18714] RSP: 002b:00007effbb6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.702840][T18714] RAX: ffffffffffffffda RBX: 00007effbd285fa0 RCX: 00007effbd05e929 [ 387.702853][T18714] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 387.702865][T18714] RBP: 00007effbb6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 387.702884][T18714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.702896][T18714] R13: 0000000000000000 R14: 00007effbd285fa0 R15: 00007fffc7686688 [ 387.702917][T18714] [ 388.049654][T18724] netlink: 'syz.1.4772': attribute type 39 has an invalid length. [ 388.195363][T18736] loop4: detected capacity change from 0 to 128 [ 388.206020][T18736] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 388.213702][T18736] FAT-fs (loop4): Filesystem has been set read-only [ 388.221128][T18736] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 388.257654][T18738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.342073][T18741] 9pnet: Could not find request transport: fd?; [ 388.414930][T18741] loop3: detected capacity change from 0 to 512 [ 388.422196][T18741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 388.436215][T18741] EXT4-fs (loop3): 1 truncate cleaned up [ 388.442547][T18741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.490382][T17882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.521727][T18738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.602138][T18738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.653112][T18738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.700772][T18749] netlink: 'syz.3.4780': attribute type 39 has an invalid length. [ 388.751670][T18738] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.764623][T18738] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.776424][T18738] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.788556][T18738] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.846553][T18754] binfmt_misc: register: failed to install interpreter file ./file2 [ 388.887577][ T29] kauditd_printk_skb: 564 callbacks suppressed [ 388.887595][ T29] audit: type=1326 audit(388.844:25673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 388.917001][ T29] audit: type=1326 audit(388.844:25674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 388.945029][ T29] audit: type=1326 audit(388.904:25675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 388.968062][ T29] audit: type=1326 audit(388.904:25676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 388.991277][ T29] audit: type=1326 audit(388.904:25677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 389.014495][ T29] audit: type=1326 audit(388.904:25678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 389.037691][ T29] audit: type=1326 audit(388.904:25679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 389.060956][ T29] audit: type=1326 audit(388.904:25680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 389.061176][T18760] loop3: detected capacity change from 0 to 1024 [ 389.084063][ T29] audit: type=1326 audit(388.904:25681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 389.084153][ T29] audit: type=1326 audit(388.904:25682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 389.154537][T18756] loop4: detected capacity change from 0 to 2048 [ 389.164504][T18760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.189350][T17882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.413633][T18777] loop3: detected capacity change from 0 to 1024 [ 389.447364][T18780] FAULT_INJECTION: forcing a failure. [ 389.447364][T18780] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 389.460779][T18780] CPU: 1 UID: 0 PID: 18780 Comm: syz.1.4790 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 389.460821][T18780] Tainted: [W]=WARN [ 389.460829][T18780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.460845][T18780] Call Trace: [ 389.460890][T18780] [ 389.460899][T18780] __dump_stack+0x1d/0x30 [ 389.460925][T18780] dump_stack_lvl+0xe8/0x140 [ 389.460950][T18780] dump_stack+0x15/0x1b [ 389.460969][T18780] should_fail_ex+0x265/0x280 [ 389.461082][T18780] should_fail_alloc_page+0xf2/0x100 [ 389.461114][T18780] __alloc_frozen_pages_noprof+0xff/0x360 [ 389.461152][T18780] alloc_pages_mpol+0xb3/0x250 [ 389.461263][T18780] folio_alloc_mpol_noprof+0x39/0x80 [ 389.461303][T18780] shmem_get_folio_gfp+0x3cf/0xd60 [ 389.461344][T18780] shmem_fault+0xf6/0x250 [ 389.461423][T18780] __do_fault+0xb9/0x200 [ 389.461455][T18780] handle_mm_fault+0xd69/0x2be0 [ 389.461481][T18780] ? __rcu_read_lock+0x37/0x50 [ 389.461568][T18780] __get_user_pages+0x1036/0x1fb0 [ 389.461610][T18780] faultin_page_range+0x10f/0x5b0 [ 389.461639][T18780] madvise_do_behavior+0x120/0x1f20 [ 389.461665][T18780] ? kstrtoull+0x111/0x140 [ 389.461777][T18780] ? kstrtouint+0x76/0xc0 [ 389.461812][T18780] ? 0xffffffff81000000 [ 389.461827][T18780] ? get_pid_task+0x96/0xd0 [ 389.461867][T18780] ? proc_fail_nth_write+0x12d/0x160 [ 389.461891][T18780] ? down_read+0x77/0xe0 [ 389.461931][T18780] do_madvise+0x103/0x190 [ 389.461979][T18780] __x64_sys_madvise+0x64/0x80 [ 389.462011][T18780] x64_sys_call+0x2455/0x2fb0 [ 389.462039][T18780] do_syscall_64+0xd2/0x200 [ 389.462060][T18780] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 389.462124][T18780] ? clear_bhb_loop+0x40/0x90 [ 389.462146][T18780] ? clear_bhb_loop+0x40/0x90 [ 389.462208][T18780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.462227][T18780] RIP: 0033:0x7effbd05e929 [ 389.462244][T18780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.462330][T18780] RSP: 002b:00007effbb6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 389.462353][T18780] RAX: ffffffffffffffda RBX: 00007effbd285fa0 RCX: 00007effbd05e929 [ 389.462408][T18780] RDX: 0000000000000017 RSI: 0000000000600000 RDI: 0000200000000000 [ 389.462421][T18780] RBP: 00007effbb6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 389.462513][T18780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.462524][T18780] R13: 0000000000000000 R14: 00007effbd285fa0 R15: 00007fffc7686688 [ 389.462548][T18780] [ 389.467175][T18777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.764169][T18785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4791'. [ 389.788989][T17882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.825163][T18789] FAULT_INJECTION: forcing a failure. [ 389.825163][T18789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.838347][T18789] CPU: 1 UID: 0 PID: 18789 Comm: syz.3.4793 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 389.838444][T18789] Tainted: [W]=WARN [ 389.838450][T18789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.838463][T18789] Call Trace: [ 389.838470][T18789] [ 389.838479][T18789] __dump_stack+0x1d/0x30 [ 389.838511][T18789] dump_stack_lvl+0xe8/0x140 [ 389.838560][T18789] dump_stack+0x15/0x1b [ 389.838583][T18789] should_fail_ex+0x265/0x280 [ 389.838625][T18789] should_fail+0xb/0x20 [ 389.838670][T18789] should_fail_usercopy+0x1a/0x20 [ 389.838723][T18789] _copy_from_user+0x1c/0xb0 [ 389.838822][T18789] vmemdup_user+0x59/0xd0 [ 389.838850][T18789] path_setxattrat+0x1b6/0x310 [ 389.838986][T18789] __x64_sys_fsetxattr+0x6b/0x80 [ 389.839014][T18789] x64_sys_call+0x2f7c/0x2fb0 [ 389.839042][T18789] do_syscall_64+0xd2/0x200 [ 389.839062][T18789] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 389.839124][T18789] ? clear_bhb_loop+0x40/0x90 [ 389.839151][T18789] ? clear_bhb_loop+0x40/0x90 [ 389.839179][T18789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.839222][T18789] RIP: 0033:0x7f8b3d2ae929 [ 389.839269][T18789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.839321][T18789] RSP: 002b:00007f8b3b917038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 389.839421][T18789] RAX: ffffffffffffffda RBX: 00007f8b3d4d5fa0 RCX: 00007f8b3d2ae929 [ 389.839438][T18789] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000005 [ 389.839454][T18789] RBP: 00007f8b3b917090 R08: 0000000000000000 R09: 0000000000000000 [ 389.839470][T18789] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 389.839486][T18789] R13: 0000000000000000 R14: 00007f8b3d4d5fa0 R15: 00007fff9be5f588 [ 389.839517][T18789] [ 390.057344][T18791] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4794'. [ 390.073522][T18791] loop3: detected capacity change from 0 to 1024 [ 390.080711][T18791] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.087714][T18791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 390.098604][T18791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.152731][T17882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.308941][T18811] loop3: detected capacity change from 0 to 128 [ 390.320960][T18811] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 390.328586][T18811] FAT-fs (loop3): Filesystem has been set read-only [ 390.340928][T18811] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 390.362742][T18813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4800'. [ 390.492916][T18820] loop4: detected capacity change from 0 to 2048 [ 390.525603][T18824] loop3: detected capacity change from 0 to 1024 [ 390.581459][T18824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.626234][T17882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.669232][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.719431][T18835] netlink: 'syz.1.4810': attribute type 39 has an invalid length. [ 390.741658][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.802869][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.850127][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.859671][T18837] netlink: 'syz.4.4812': attribute type 39 has an invalid length. [ 390.980019][T18854] FAULT_INJECTION: forcing a failure. [ 390.980019][T18854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.993225][T18854] CPU: 0 UID: 0 PID: 18854 Comm: syz.4.4816 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 390.993292][T18854] Tainted: [W]=WARN [ 390.993301][T18854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.993317][T18854] Call Trace: [ 390.993326][T18854] [ 390.993336][T18854] __dump_stack+0x1d/0x30 [ 390.993442][T18854] dump_stack_lvl+0xe8/0x140 [ 390.993463][T18854] dump_stack+0x15/0x1b [ 390.993547][T18854] should_fail_ex+0x265/0x280 [ 390.993589][T18854] should_fail+0xb/0x20 [ 390.993697][T18854] should_fail_usercopy+0x1a/0x20 [ 390.993748][T18854] _copy_to_user+0x20/0xa0 [ 390.993777][T18854] simple_read_from_buffer+0xb5/0x130 [ 390.993889][T18854] proc_fail_nth_read+0x100/0x140 [ 390.993983][T18854] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.994015][T18854] vfs_read+0x19d/0x6f0 [ 390.994073][T18854] ? __rcu_read_unlock+0x4f/0x70 [ 390.994103][T18854] ? __fget_files+0x184/0x1c0 [ 390.994191][T18854] ksys_read+0xda/0x1a0 [ 390.994221][T18854] __x64_sys_read+0x40/0x50 [ 390.994257][T18854] x64_sys_call+0x2d77/0x2fb0 [ 390.994360][T18854] do_syscall_64+0xd2/0x200 [ 390.994384][T18854] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 390.994427][T18854] ? clear_bhb_loop+0x40/0x90 [ 390.994455][T18854] ? clear_bhb_loop+0x40/0x90 [ 390.994483][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.994528][T18854] RIP: 0033:0x7f03bae6d33c [ 390.994542][T18854] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 390.994561][T18854] RSP: 002b:00007f03b94d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 390.994585][T18854] RAX: ffffffffffffffda RBX: 00007f03bb095fa0 RCX: 00007f03bae6d33c [ 390.994601][T18854] RDX: 000000000000000f RSI: 00007f03b94d70a0 RDI: 0000000000000004 [ 390.994670][T18854] RBP: 00007f03b94d7090 R08: 0000000000000000 R09: 0000000000000000 [ 390.994681][T18854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.994692][T18854] R13: 0000000000000000 R14: 00007f03bb095fa0 R15: 00007ffd7c647f58 [ 390.994802][T18854] [ 391.240904][ T12] bridge_slave_1: left allmulticast mode [ 391.246604][ T12] bridge_slave_1: left promiscuous mode [ 391.252332][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.269207][T18859] loop7: detected capacity change from 0 to 16384 [ 391.285869][ T12] bridge_slave_0: left allmulticast mode [ 391.291640][ T12] bridge_slave_0: left promiscuous mode [ 391.297520][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.412281][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.423679][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.434447][ T12] bond0 (unregistering): Released all slaves [ 391.446614][T18838] chnl_net:caif_netlink_parms(): no params data found [ 391.455799][T18861] FAULT_INJECTION: forcing a failure. [ 391.455799][T18861] name failslab, interval 1, probability 0, space 0, times 0 [ 391.468462][T18861] CPU: 0 UID: 0 PID: 18861 Comm: syz.4.4818 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 391.468508][T18861] Tainted: [W]=WARN [ 391.468516][T18861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.468584][T18861] Call Trace: [ 391.468592][T18861] [ 391.468602][T18861] __dump_stack+0x1d/0x30 [ 391.468644][T18861] dump_stack_lvl+0xe8/0x140 [ 391.468762][T18861] dump_stack+0x15/0x1b [ 391.468802][T18861] should_fail_ex+0x265/0x280 [ 391.468843][T18861] should_failslab+0x8c/0xb0 [ 391.468896][T18861] __kmalloc_node_noprof+0xa9/0x410 [ 391.468927][T18861] ? x64_sys_call+0x2999/0x2fb0 [ 391.468954][T18861] ? qdisc_alloc+0x65/0x440 [ 391.469052][T18861] qdisc_alloc+0x65/0x440 [ 391.469083][T18861] qdisc_create_dflt+0x7f/0x2d0 [ 391.469150][T18861] taprio_init+0x286/0x5f0 [ 391.469175][T18861] ? __pfx_taprio_init+0x10/0x10 [ 391.469195][T18861] qdisc_create+0x591/0x9e0 [ 391.469269][T18861] tc_modify_qdisc+0xe2c/0x1380 [ 391.469315][T18861] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 391.469354][T18861] rtnetlink_rcv_msg+0x65a/0x6d0 [ 391.469391][T18861] ? rcu_report_exp_cpu_mult+0xcd/0x100 [ 391.469431][T18861] netlink_rcv_skb+0x120/0x220 [ 391.469481][T18861] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 391.469518][T18861] rtnetlink_rcv+0x1c/0x30 [ 391.469625][T18861] netlink_unicast+0x59e/0x670 [ 391.469669][T18861] netlink_sendmsg+0x58b/0x6b0 [ 391.469696][T18861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.469775][T18861] __sock_sendmsg+0x142/0x180 [ 391.469807][T18861] ____sys_sendmsg+0x31e/0x4e0 [ 391.469874][T18861] ___sys_sendmsg+0x17b/0x1d0 [ 391.469960][T18861] __x64_sys_sendmsg+0xd4/0x160 [ 391.470076][T18861] x64_sys_call+0x2999/0x2fb0 [ 391.470104][T18861] do_syscall_64+0xd2/0x200 [ 391.470123][T18861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 391.470205][T18861] ? clear_bhb_loop+0x40/0x90 [ 391.470229][T18861] ? clear_bhb_loop+0x40/0x90 [ 391.470250][T18861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.470273][T18861] RIP: 0033:0x7f03bae6e929 [ 391.470288][T18861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.470379][T18861] RSP: 002b:00007f03b94d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.470403][T18861] RAX: ffffffffffffffda RBX: 00007f03bb095fa0 RCX: 00007f03bae6e929 [ 391.470420][T18861] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007 [ 391.470435][T18861] RBP: 00007f03b94d7090 R08: 0000000000000000 R09: 0000000000000000 [ 391.470447][T18861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.470525][T18861] R13: 0000000000000000 R14: 00007f03bb095fa0 R15: 00007ffd7c647f58 [ 391.470551][T18861] [ 391.764119][ T12] hsr_slave_0: left promiscuous mode [ 391.779839][ T12] hsr_slave_1: left promiscuous mode [ 391.789317][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.796768][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.811097][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.818553][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.830581][ T12] veth1_macvtap: left promiscuous mode [ 391.836204][ T12] veth0_macvtap: left promiscuous mode [ 391.841827][ T12] veth1_vlan: left promiscuous mode [ 391.847142][ T12] veth0_vlan: left promiscuous mode [ 392.013764][T18838] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.020929][T18838] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.029709][T18838] bridge_slave_0: entered allmulticast mode [ 392.036421][T18838] bridge_slave_0: entered promiscuous mode [ 392.055972][T18838] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.063207][T18838] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.072335][T18838] bridge_slave_1: entered allmulticast mode [ 392.079682][T18838] bridge_slave_1: entered promiscuous mode [ 392.130608][T18838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.198318][T18881] loop7: detected capacity change from 0 to 164 [ 392.205458][T18838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.275738][T18838] team0: Port device team_slave_0 added [ 392.284310][T18838] team0: Port device team_slave_1 added [ 392.341310][T18838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.348320][T18838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.374348][T18838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.438884][T18838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.446014][T18838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.472075][T18838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.566857][T18838] hsr_slave_0: entered promiscuous mode [ 392.578584][T18838] hsr_slave_1: entered promiscuous mode [ 392.591955][ T12] bridge_slave_1: left allmulticast mode [ 392.597684][ T12] bridge_slave_1: left promiscuous mode [ 392.603442][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.629236][ T12] bridge_slave_0: left allmulticast mode [ 392.634940][ T12] bridge_slave_0: left promiscuous mode [ 392.640691][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.783295][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.794877][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.805100][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 392.817008][ T12] bond0 (unregistering): Released all slaves [ 392.826784][ T12] bond1 (unregistering): Released all slaves [ 392.838347][ T12] bond2 (unregistering): Released all slaves [ 392.847797][ T12] bond3 (unregistering): Released all slaves [ 392.914591][ T12] hsr_slave_0: left promiscuous mode [ 392.920522][ T12] hsr_slave_1: left promiscuous mode [ 392.926220][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.933700][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.942842][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.950441][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.960808][ T12] veth1_macvtap: left promiscuous mode [ 392.966448][ T12] veth0_macvtap: left promiscuous mode [ 392.973079][ T12] veth1_vlan: left promiscuous mode [ 392.978376][ T12] veth0_vlan: left promiscuous mode [ 393.315910][T18901] SELinux: failed to load policy [ 393.321444][T18901] netlink: 'syz.4.4831': attribute type 10 has an invalid length. [ 393.337911][T18901] team0 (unregistering): Port device team_slave_0 removed [ 393.347463][T18901] team0 (unregistering): Port device team_slave_1 removed [ 393.388172][T18838] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 393.403098][T18838] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 393.417020][T18838] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 393.433814][ T12] IPVS: stop unused estimator thread 0... [ 393.440094][T18838] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 393.488555][T18838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.506883][T18838] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.527528][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.534783][T12033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.551538][T12033] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.558704][T12033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.679760][T18838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.925284][T18838] veth0_vlan: entered promiscuous mode [ 393.942973][T18838] veth1_vlan: entered promiscuous mode [ 393.971631][T18838] veth0_macvtap: entered promiscuous mode [ 393.988118][T18838] veth1_macvtap: entered promiscuous mode [ 394.011095][T18838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.030658][T18838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.050512][T18838] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.059357][T18838] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.068136][T18838] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.076930][T18838] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.273081][T18937] loop9: detected capacity change from 0 to 1024 [ 394.319344][T18937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.360606][T18838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.400736][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 394.400753][ T29] audit: type=1326 audit(394.364:26040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18941 comm="syz.9.4837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 394.459033][ T29] audit: type=1326 audit(394.394:26041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18941 comm="syz.9.4837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 394.482044][ T29] audit: type=1326 audit(394.404:26042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18941 comm="syz.9.4837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 394.505189][ T29] audit: type=1326 audit(394.404:26043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18941 comm="syz.9.4837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 394.528211][ T29] audit: type=1326 audit(394.404:26044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18941 comm="syz.9.4837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 394.551201][ T29] audit: type=1326 audit(394.404:26045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18941 comm="syz.9.4837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 394.574256][ T29] audit: type=1326 audit(394.404:26046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18941 comm="syz.9.4837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 394.605534][ T29] audit: type=1326 audit(394.564:26047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18943 comm="syz.9.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 394.628755][ T29] audit: type=1326 audit(394.564:26048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18943 comm="syz.9.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 394.651909][ T29] audit: type=1326 audit(394.564:26049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18943 comm="syz.9.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 394.742266][T18948] FAULT_INJECTION: forcing a failure. [ 394.742266][T18948] name failslab, interval 1, probability 0, space 0, times 0 [ 394.755183][T18948] CPU: 1 UID: 0 PID: 18948 Comm: syz.4.4840 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 394.755227][T18948] Tainted: [W]=WARN [ 394.755288][T18948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.755304][T18948] Call Trace: [ 394.755313][T18948] [ 394.755322][T18948] __dump_stack+0x1d/0x30 [ 394.755373][T18948] dump_stack_lvl+0xe8/0x140 [ 394.755392][T18948] dump_stack+0x15/0x1b [ 394.755411][T18948] should_fail_ex+0x265/0x280 [ 394.755532][T18948] should_failslab+0x8c/0xb0 [ 394.755561][T18948] kmem_cache_alloc_noprof+0x50/0x310 [ 394.755650][T18948] ? audit_log_start+0x365/0x6c0 [ 394.755685][T18948] audit_log_start+0x365/0x6c0 [ 394.755803][T18948] audit_seccomp+0x48/0x100 [ 394.755837][T18948] ? __seccomp_filter+0x68c/0x10d0 [ 394.755865][T18948] __seccomp_filter+0x69d/0x10d0 [ 394.755889][T18948] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 394.755969][T18948] ? vfs_write+0x75e/0x8e0 [ 394.756008][T18948] ? __rcu_read_unlock+0x4f/0x70 [ 394.756113][T18948] ? __fget_files+0x184/0x1c0 [ 394.756141][T18948] __secure_computing+0x82/0x150 [ 394.756171][T18948] syscall_trace_enter+0xcf/0x1e0 [ 394.756202][T18948] do_syscall_64+0xac/0x200 [ 394.756221][T18948] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 394.756265][T18948] ? clear_bhb_loop+0x40/0x90 [ 394.756362][T18948] ? clear_bhb_loop+0x40/0x90 [ 394.756390][T18948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.756467][T18948] RIP: 0033:0x7f03bae6e929 [ 394.756510][T18948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.756528][T18948] RSP: 002b:00007f03b94d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.756546][T18948] RAX: ffffffffffffffda RBX: 00007f03bb095fa0 RCX: 00007f03bae6e929 [ 394.756563][T18948] RDX: 0000200000000000 RSI: 00000000c004743e RDI: 0000000000000004 [ 394.756628][T18948] RBP: 00007f03b94d7090 R08: 0000000000000000 R09: 0000000000000000 [ 394.756641][T18948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.756653][T18948] R13: 0000000000000000 R14: 00007f03bb095fa0 R15: 00007ffd7c647f58 [ 394.756672][T18948] [ 395.071067][T18960] SELinux: failed to load policy [ 395.084182][T18960] netlink: 'syz.4.4842': attribute type 10 has an invalid length. [ 395.261925][T18968] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.307133][T18958] SELinux: syz.9.4841 (18958) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 395.335940][T18968] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.404313][T18972] loop9: detected capacity change from 0 to 164 [ 395.411602][T18972] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 395.421484][T18972] FAULT_INJECTION: forcing a failure. [ 395.421484][T18972] name failslab, interval 1, probability 0, space 0, times 0 [ 395.422157][T18968] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.434206][T18972] CPU: 1 UID: 0 PID: 18972 Comm: syz.9.4846 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 395.434244][T18972] Tainted: [W]=WARN [ 395.434253][T18972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.434268][T18972] Call Trace: [ 395.434275][T18972] [ 395.434286][T18972] __dump_stack+0x1d/0x30 [ 395.434371][T18972] dump_stack_lvl+0xe8/0x140 [ 395.434400][T18972] dump_stack+0x15/0x1b [ 395.434422][T18972] should_fail_ex+0x265/0x280 [ 395.434469][T18972] should_failslab+0x8c/0xb0 [ 395.434527][T18972] __kvmalloc_node_noprof+0x123/0x4e0 [ 395.434568][T18972] ? simple_xattr_set+0x6e/0x2b0 [ 395.434796][T18972] ? avc_has_perm_noaudit+0x1b1/0x200 [ 395.434838][T18972] simple_xattr_set+0x6e/0x2b0 [ 395.434871][T18972] ? strlen+0x19/0x40 [ 395.434899][T18972] shmem_xattr_handler_set+0x12b/0x220 [ 395.434998][T18972] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 395.435028][T18972] __vfs_setxattr+0x2e6/0x310 [ 395.435078][T18972] __vfs_setxattr_noperm+0xe8/0x410 [ 395.435168][T18972] __vfs_setxattr_locked+0x1af/0x1d0 [ 395.435280][T18972] vfs_setxattr+0x132/0x270 [ 395.435362][T18972] file_setxattr+0x139/0x1b0 [ 395.435390][T18972] path_setxattrat+0x290/0x310 [ 395.435465][T18972] __x64_sys_fsetxattr+0x6b/0x80 [ 395.435494][T18972] x64_sys_call+0x2f7c/0x2fb0 [ 395.435525][T18972] do_syscall_64+0xd2/0x200 [ 395.435549][T18972] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 395.435609][T18972] ? clear_bhb_loop+0x40/0x90 [ 395.435638][T18972] ? clear_bhb_loop+0x40/0x90 [ 395.435670][T18972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.435778][T18972] RIP: 0033:0x7f428157e929 [ 395.435802][T18972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.435828][T18972] RSP: 002b:00007f427fbe7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 395.435922][T18972] RAX: ffffffffffffffda RBX: 00007f42817a5fa0 RCX: 00007f428157e929 [ 395.435941][T18972] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 395.435959][T18972] RBP: 00007f427fbe7090 R08: 0000000000000000 R09: 0000000000000000 [ 395.435983][T18972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.436001][T18972] R13: 0000000000000000 R14: 00007f42817a5fa0 R15: 00007fffe57e2de8 [ 395.436089][T18972] [ 395.458463][T18972] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 395.689215][T18972] Symlink component flag not implemented [ 395.694882][T18972] Symlink component flag not implemented [ 395.707883][T18972] Symlink component flag not implemented (7) [ 395.713970][T18972] Symlink component flag not implemented (116) [ 395.751507][T18968] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.816385][T18968] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.829750][T18968] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.842178][T18968] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.855362][T18968] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.913151][ T8415] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 395.920680][ T8415] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 395.928120][ T8415] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 395.947455][ T8415] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 396.322093][T18990] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4853'. [ 396.512206][T18997] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4856'. [ 396.694464][T19009] netlink: 'syz.9.4859': attribute type 39 has an invalid length. [ 396.852556][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4861'. [ 397.589024][T19027] loop7: detected capacity change from 0 to 128 [ 397.850974][T19033] FAULT_INJECTION: forcing a failure. [ 397.850974][T19033] name failslab, interval 1, probability 0, space 0, times 0 [ 397.863896][T19033] CPU: 1 UID: 0 PID: 19033 Comm: syz.4.4866 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 397.863930][T19033] Tainted: [W]=WARN [ 397.863984][T19033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.864000][T19033] Call Trace: [ 397.864007][T19033] [ 397.864017][T19033] __dump_stack+0x1d/0x30 [ 397.864044][T19033] dump_stack_lvl+0xe8/0x140 [ 397.864067][T19033] dump_stack+0x15/0x1b [ 397.864082][T19033] should_fail_ex+0x265/0x280 [ 397.864147][T19033] should_failslab+0x8c/0xb0 [ 397.864254][T19033] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 397.864339][T19033] ? sidtab_sid2str_get+0xa0/0x130 [ 397.864373][T19033] kmemdup_noprof+0x2b/0x70 [ 397.864405][T19033] sidtab_sid2str_get+0xa0/0x130 [ 397.864471][T19033] security_sid_to_context_core+0x1eb/0x2e0 [ 397.864566][T19033] security_sid_to_context+0x27/0x40 [ 397.864595][T19033] selinux_lsmprop_to_secctx+0x67/0xf0 [ 397.864627][T19033] security_lsmprop_to_secctx+0x43/0x80 [ 397.864739][T19033] audit_log_task_context+0x77/0x190 [ 397.864864][T19033] audit_log_task+0xf4/0x250 [ 397.864898][T19033] audit_seccomp+0x61/0x100 [ 397.864931][T19033] ? __seccomp_filter+0x68c/0x10d0 [ 397.864989][T19033] __seccomp_filter+0x69d/0x10d0 [ 397.865023][T19033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.865063][T19033] ? vfs_read+0x47f/0x6f0 [ 397.865130][T19033] __secure_computing+0x82/0x150 [ 397.865163][T19033] syscall_trace_enter+0xcf/0x1e0 [ 397.865187][T19033] do_syscall_64+0xac/0x200 [ 397.865204][T19033] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 397.865229][T19033] ? clear_bhb_loop+0x40/0x90 [ 397.865254][T19033] ? clear_bhb_loop+0x40/0x90 [ 397.865300][T19033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.865327][T19033] RIP: 0033:0x7f03bae6d3df [ 397.865384][T19033] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 397.865472][T19033] RSP: 002b:00007f03b94d7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 397.865491][T19033] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f03bae6d3df [ 397.865503][T19033] RDX: 0000000000000001 RSI: 00007f03b94d70a0 RDI: 0000000000000007 [ 397.865582][T19033] RBP: 00007f03b94d7090 R08: 0000000000000000 R09: 0000000000000000 [ 397.865599][T19033] R10: 0000000000004000 R11: 0000000000000293 R12: 0000000000000002 [ 397.865719][T19033] R13: 0000000000000000 R14: 00007f03bb095fa0 R15: 00007ffd7c647f58 [ 397.865740][T19033] [ 398.177267][T19035] FAULT_INJECTION: forcing a failure. [ 398.177267][T19035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 398.190627][T19035] CPU: 0 UID: 0 PID: 19035 Comm: syz.4.4867 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 398.190671][T19035] Tainted: [W]=WARN [ 398.190708][T19035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.190739][T19035] Call Trace: [ 398.190747][T19035] [ 398.190757][T19035] __dump_stack+0x1d/0x30 [ 398.190784][T19035] dump_stack_lvl+0xe8/0x140 [ 398.190809][T19035] dump_stack+0x15/0x1b [ 398.190837][T19035] should_fail_ex+0x265/0x280 [ 398.190938][T19035] should_fail_alloc_page+0xf2/0x100 [ 398.190971][T19035] __alloc_frozen_pages_noprof+0xff/0x360 [ 398.191056][T19035] alloc_pages_mpol+0xb3/0x250 [ 398.191145][T19035] alloc_pages_noprof+0x90/0x130 [ 398.191181][T19035] pte_alloc_one+0x2d/0x120 [ 398.191209][T19035] __pte_alloc+0x32/0x2b0 [ 398.191309][T19035] handle_mm_fault+0x1c16/0x2be0 [ 398.191346][T19035] ? __rcu_read_lock+0x37/0x50 [ 398.191386][T19035] __get_user_pages+0x1036/0x1fb0 [ 398.191430][T19035] __gup_longterm_locked+0x9c9/0x1010 [ 398.191462][T19035] ? exc_page_fault+0x62/0xa0 [ 398.191538][T19035] ? ___slab_alloc+0x11b/0x900 [ 398.191619][T19035] ? should_fail_ex+0xdb/0x280 [ 398.191662][T19035] pin_user_pages_remote+0x7e/0xb0 [ 398.191694][T19035] process_vm_rw+0x484/0x950 [ 398.191746][T19035] __x64_sys_process_vm_readv+0x78/0x90 [ 398.191828][T19035] x64_sys_call+0x2978/0x2fb0 [ 398.191856][T19035] do_syscall_64+0xd2/0x200 [ 398.191879][T19035] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 398.191961][T19035] ? clear_bhb_loop+0x40/0x90 [ 398.191984][T19035] ? clear_bhb_loop+0x40/0x90 [ 398.192013][T19035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.192041][T19035] RIP: 0033:0x7f03bae6e929 [ 398.192092][T19035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.192115][T19035] RSP: 002b:00007f03b94d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 398.192139][T19035] RAX: ffffffffffffffda RBX: 00007f03bb095fa0 RCX: 00007f03bae6e929 [ 398.192153][T19035] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000070 [ 398.192165][T19035] RBP: 00007f03b94d7090 R08: 0000000000000286 R09: 0000000000000000 [ 398.192226][T19035] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 398.192242][T19035] R13: 0000000000000000 R14: 00007f03bb095fa0 R15: 00007ffd7c647f58 [ 398.192269][T19035] [ 398.526563][T19037] netlink: 'syz.4.4868': attribute type 39 has an invalid length. [ 398.590733][T19042] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4870'. [ 398.653674][T19048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4871'. [ 398.671848][T19048] bridge_slave_1: left allmulticast mode [ 398.677628][T19048] bridge_slave_1: left promiscuous mode [ 398.683384][T19048] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.701324][T19048] bridge_slave_0: left allmulticast mode [ 398.707048][T19048] bridge_slave_0: left promiscuous mode [ 398.712833][T19048] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.770061][T19053] FAULT_INJECTION: forcing a failure. [ 398.770061][T19053] name failslab, interval 1, probability 0, space 0, times 0 [ 398.782809][T19053] CPU: 1 UID: 0 PID: 19053 Comm: syz.7.4872 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 398.782852][T19053] Tainted: [W]=WARN [ 398.782861][T19053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.782952][T19053] Call Trace: [ 398.782960][T19053] [ 398.783011][T19053] __dump_stack+0x1d/0x30 [ 398.783037][T19053] dump_stack_lvl+0xe8/0x140 [ 398.783105][T19053] dump_stack+0x15/0x1b [ 398.783127][T19053] should_fail_ex+0x265/0x280 [ 398.783168][T19053] ? tcf_action_init_1+0x11e/0x4a0 [ 398.783199][T19053] should_failslab+0x8c/0xb0 [ 398.783261][T19053] __kmalloc_cache_noprof+0x4c/0x320 [ 398.783297][T19053] tcf_action_init_1+0x11e/0x4a0 [ 398.783337][T19053] tcf_action_init+0x267/0x6d0 [ 398.783460][T19053] tc_ctl_action+0x291/0x830 [ 398.783507][T19053] ? __pfx_tc_ctl_action+0x10/0x10 [ 398.783542][T19053] rtnetlink_rcv_msg+0x65a/0x6d0 [ 398.783582][T19053] netlink_rcv_skb+0x120/0x220 [ 398.783702][T19053] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 398.783822][T19053] rtnetlink_rcv+0x1c/0x30 [ 398.783849][T19053] netlink_unicast+0x59e/0x670 [ 398.783952][T19053] netlink_sendmsg+0x58b/0x6b0 [ 398.783983][T19053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.784002][T19053] __sock_sendmsg+0x142/0x180 [ 398.784054][T19053] ____sys_sendmsg+0x31e/0x4e0 [ 398.784089][T19053] ___sys_sendmsg+0x17b/0x1d0 [ 398.784203][T19053] __x64_sys_sendmsg+0xd4/0x160 [ 398.784248][T19053] x64_sys_call+0x2999/0x2fb0 [ 398.784268][T19053] do_syscall_64+0xd2/0x200 [ 398.784285][T19053] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 398.784325][T19053] ? clear_bhb_loop+0x40/0x90 [ 398.784373][T19053] ? clear_bhb_loop+0x40/0x90 [ 398.784402][T19053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.784433][T19053] RIP: 0033:0x7f4abde2e929 [ 398.784448][T19053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.784465][T19053] RSP: 002b:00007f4abc497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.784552][T19053] RAX: ffffffffffffffda RBX: 00007f4abe055fa0 RCX: 00007f4abde2e929 [ 398.784569][T19053] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000003 [ 398.784583][T19053] RBP: 00007f4abc497090 R08: 0000000000000000 R09: 0000000000000000 [ 398.784598][T19053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.784614][T19053] R13: 0000000000000000 R14: 00007f4abe055fa0 R15: 00007ffe875021c8 [ 398.784640][T19053] [ 399.812950][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 399.812968][ T29] audit: type=1400 audit(399.774:26214): avc: denied { create } for pid=19078 comm="syz.9.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 399.856496][ T29] audit: type=1400 audit(399.774:26215): avc: denied { setopt } for pid=19078 comm="syz.9.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 400.055847][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4883'. [ 400.433363][T19120] netlink: 'syz.4.4898': attribute type 11 has an invalid length. [ 400.500210][T19124] netlink: 'syz.9.4900': attribute type 10 has an invalid length. [ 400.508114][T19124] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4900'. [ 400.552143][T19128] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4901'. [ 400.650520][ T29] audit: type=1400 audit(400.604:26216): avc: denied { create } for pid=19136 comm="syz.9.4905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 400.676405][ T29] audit: type=1400 audit(400.614:26217): avc: denied { ioctl } for pid=19136 comm="syz.9.4905" path="socket:[71127]" dev="sockfs" ino=71127 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 400.700749][ T29] audit: type=1400 audit(400.614:26218): avc: denied { write } for pid=19136 comm="syz.9.4905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 400.746864][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4909'. [ 400.772172][ T29] audit: type=1400 audit(400.734:26219): avc: denied { create } for pid=19146 comm="syz.7.4910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 400.792913][ T29] audit: type=1400 audit(400.734:26220): avc: denied { ioctl } for pid=19140 comm="syz.1.4908" path="socket:[71140]" dev="sockfs" ino=71140 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 400.817294][ T29] audit: type=1400 audit(400.754:26221): avc: denied { write } for pid=19146 comm="syz.7.4910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 401.181502][ T29] audit: type=1400 audit(401.134:26222): avc: denied { setopt } for pid=19175 comm="syz.9.4922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 401.460991][ T29] audit: type=1400 audit(401.414:26223): avc: denied { read } for pid=19184 comm="syz.1.4925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 402.148250][T19252] netlink: 'syz.7.4956': attribute type 29 has an invalid length. [ 402.171831][T19252] netlink: 'syz.7.4956': attribute type 29 has an invalid length. [ 402.329099][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.356959][T19271] netlink: 'syz.7.4961': attribute type 21 has an invalid length. [ 402.365002][T19271] netlink: 14548 bytes leftover after parsing attributes in process `syz.7.4961'. [ 402.391188][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.441702][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.600218][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.660559][T19286] netlink: 'syz.1.4967': attribute type 10 has an invalid length. [ 402.724219][ T31] bridge_slave_1: left allmulticast mode [ 402.729996][ T31] bridge_slave_1: left promiscuous mode [ 402.735721][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.759064][ T31] bridge_slave_0: left allmulticast mode [ 402.764775][ T31] bridge_slave_0: left promiscuous mode [ 402.770529][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.851890][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.867255][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.878259][ T31] bond0 (unregistering): Released all slaves [ 402.893723][T19263] chnl_net:caif_netlink_parms(): no params data found [ 402.927896][ T31] hsr_slave_0: left promiscuous mode [ 402.933740][ T31] hsr_slave_1: left promiscuous mode [ 402.941057][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.948558][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.958690][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.966260][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.976689][ T31] veth1_macvtap: left promiscuous mode [ 402.982242][ T31] veth0_macvtap: left promiscuous mode [ 402.987918][ T31] veth1_vlan: left promiscuous mode [ 402.993369][ T31] veth0_vlan: left promiscuous mode [ 403.117610][T19263] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.124779][T19263] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.137932][T19263] bridge_slave_0: entered allmulticast mode [ 403.144558][T19263] bridge_slave_0: entered promiscuous mode [ 403.155270][T19263] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.162429][T19263] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.170598][T19263] bridge_slave_1: entered allmulticast mode [ 403.177240][T19263] bridge_slave_1: entered promiscuous mode [ 403.196607][T19263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.207487][T19263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.227829][T19263] team0: Port device team_slave_0 added [ 403.234861][T19263] team0: Port device team_slave_1 added [ 403.251125][T19263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.258137][T19263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.284138][T19263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.296050][T19263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.303058][T19263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.329108][T19263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.342445][T19339] dummy0: entered allmulticast mode [ 403.376879][T19263] hsr_slave_0: entered promiscuous mode [ 403.384790][T19263] hsr_slave_1: entered promiscuous mode [ 403.392309][T19263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.400207][T19263] Cannot create hsr debugfs directory [ 403.432174][ T31] IPVS: stop unused estimator thread 0... [ 403.596025][T19366] netlink: 184 bytes leftover after parsing attributes in process `syz.9.5002'. [ 403.715140][T19263] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 403.725771][T19263] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 403.734403][T19375] netlink: 14548 bytes leftover after parsing attributes in process `syz.7.5005'. [ 403.736005][T19263] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 403.753511][T19263] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 403.791103][T19263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.821176][T19263] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.839612][ T1716] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.846825][ T1716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.860721][ T1716] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.867917][ T1716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.895509][T19392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.903146][T19392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.949351][T19392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.957149][T19392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.083952][T19263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.335219][T19263] veth0_vlan: entered promiscuous mode [ 404.369851][T19263] veth1_vlan: entered promiscuous mode [ 404.407295][T19263] veth0_macvtap: entered promiscuous mode [ 404.425360][T19476] netlink: 64535 bytes leftover after parsing attributes in process `syz.7.5044'. [ 404.439727][T19263] veth1_macvtap: entered promiscuous mode [ 404.455629][T19474] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.5042'. [ 404.500503][T19263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.536719][T19263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.552618][T19490] netlink: 'syz.1.5045': attribute type 39 has an invalid length. [ 404.570020][T19263] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.578865][T19263] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.587587][T19263] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.596423][T19263] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.610928][T19491] loop7: detected capacity change from 0 to 128 [ 404.829791][T19510] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.5056'. [ 404.930564][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 404.930582][ T29] audit: type=1326 audit(404.894:26271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19516 comm="syz.6.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c965e929 code=0x7ffc0000 [ 404.998920][ T29] audit: type=1326 audit(404.924:26272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19516 comm="syz.6.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f47c965e929 code=0x7ffc0000 [ 405.019905][T19521] loop6: detected capacity change from 0 to 128 [ 405.021982][ T29] audit: type=1326 audit(404.924:26273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19516 comm="syz.6.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c965e929 code=0x7ffc0000 [ 405.051303][ T29] audit: type=1326 audit(404.924:26274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19516 comm="syz.6.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c965e929 code=0x7ffc0000 [ 405.212272][T19525] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.233632][T19527] loop6: detected capacity change from 0 to 512 [ 405.259530][T19527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 405.290417][T19525] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.306672][T19527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.361044][T19525] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.410516][T19525] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.466642][T19525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.493734][T19525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.526664][T19525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.543424][ T29] audit: type=1326 audit(405.504:26275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19538 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 405.566541][ T29] audit: type=1326 audit(405.504:26276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19538 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 405.589524][ T29] audit: type=1326 audit(405.504:26277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19538 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 405.604504][T19525] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.612511][ T29] audit: type=1326 audit(405.504:26278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19538 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 405.612623][ T29] audit: type=1326 audit(405.504:26279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19538 comm="syz.4.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 405.767768][T19554] loop9: detected capacity change from 0 to 1024 [ 405.807008][T19554] EXT4-fs (loop9): can't mount with journal_async_commit, fs mounted w/o journal [ 405.862621][T19568] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.5081'. [ 405.911264][T19554] loop9: detected capacity change from 0 to 8192 [ 405.937513][ T29] audit: type=1326 audit(405.894:26280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19553 comm="syz.9.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 406.108323][T19575] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.157030][T19577] loop7: detected capacity change from 0 to 2048 [ 406.181516][T19575] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.260780][T19575] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.296110][T19587] netlink: 'syz.9.5089': attribute type 39 has an invalid length. [ 406.321201][T19575] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.409552][T19263] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.422439][T19603] 9pnet: p9_errstr2errno: server reported unknown error @΂0x000000000000000b [ 406.447306][T19606] loop6: detected capacity change from 0 to 1024 [ 406.454452][T19606] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 406.455270][T19608] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5096'. [ 406.465386][T19606] EXT4-fs (loop6): group descriptors corrupted! [ 406.489577][T19603] loop9: detected capacity change from 0 to 1024 [ 406.502515][T19603] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.503880][T19610] SELinux: failed to load policy [ 406.518512][T19603] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.526097][T19610] netlink: 'syz.7.5097': attribute type 10 has an invalid length. [ 406.536595][T19606] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 406.747728][T19643] loop6: detected capacity change from 0 to 1024 [ 406.772516][T19651] netlink: 65055 bytes leftover after parsing attributes in process `syz.7.5116'. [ 406.789380][T19643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.835075][T19263] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.033656][T19678] SELinux: failed to load policy [ 407.043649][T19678] netlink: 'syz.7.5129': attribute type 10 has an invalid length. [ 407.126951][T19691] loop7: detected capacity change from 0 to 128 [ 407.511953][T19709] loop9: detected capacity change from 0 to 2048 [ 407.533120][T19709] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.620470][T18838] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.944796][T12033] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.993658][T12033] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.062999][T12033] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.125727][T12033] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.225481][T12033] bridge_slave_1: left allmulticast mode [ 408.231241][T12033] bridge_slave_1: left promiscuous mode [ 408.236894][T12033] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.259766][T12033] bridge_slave_0: left allmulticast mode [ 408.265536][T12033] bridge_slave_0: left promiscuous mode [ 408.271431][T12033] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.392792][T12033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.412660][T12033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.434648][T12033] bond0 (unregistering): Released all slaves [ 408.495344][T12033] hsr_slave_0: left promiscuous mode [ 408.502948][T12033] hsr_slave_1: left promiscuous mode [ 408.509975][T12033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.517480][T12033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.525752][T12033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.533288][T12033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.544596][T12033] veth1_macvtap: left promiscuous mode [ 408.551312][T12033] veth0_macvtap: left promiscuous mode [ 408.556920][T12033] veth1_vlan: left promiscuous mode [ 408.562431][T12033] veth0_vlan: left promiscuous mode [ 408.632182][T12033] team0 (unregistering): Port device team_slave_1 removed [ 408.643944][T12033] team0 (unregistering): Port device team_slave_0 removed [ 408.677812][T19734] chnl_net:caif_netlink_parms(): no params data found [ 408.685824][T19809] netlink: 'syz.9.5181': attribute type 39 has an invalid length. [ 408.745021][T19734] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.752290][T19734] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.774940][T19734] bridge_slave_0: entered allmulticast mode [ 408.788198][T19734] bridge_slave_0: entered promiscuous mode [ 408.801659][T19734] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.809258][T19734] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.817754][T19734] bridge_slave_1: entered allmulticast mode [ 408.824996][T19734] bridge_slave_1: entered promiscuous mode [ 408.849423][T19734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.860019][T19734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.881547][T19734] team0: Port device team_slave_0 added [ 408.888515][T19734] team0: Port device team_slave_1 added [ 408.918170][T19734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.925280][T19734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.951286][T19734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.963749][T19734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.970785][T19734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.996933][T19734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.030881][T19824] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5187'. [ 409.084214][T19734] hsr_slave_0: entered promiscuous mode [ 409.092459][T19734] hsr_slave_1: entered promiscuous mode [ 409.098416][T19734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.106222][T19734] Cannot create hsr debugfs directory [ 409.125748][T19575] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.138568][T19575] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.150420][T19575] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.162123][T19575] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.670464][T19849] SELinux: failed to load policy [ 409.675987][T19849] netlink: 'syz.9.5197': attribute type 10 has an invalid length. [ 409.701479][T19849] team0 (unregistering): Port device team_slave_0 removed [ 409.711230][T19849] team0 (unregistering): Port device team_slave_1 removed [ 409.921776][ T3394] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 409.929455][ T3394] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 409.936933][ T3394] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 409.968181][ T3394] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 410.098275][T19734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.117113][T19734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.134115][T19734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.144479][T19734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.172798][T19911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5219'. [ 410.300938][T19734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.314239][T19734] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.323977][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.331180][T12033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.391878][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 410.391926][ T29] audit: type=1326 audit(410.354:26557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 410.421310][ T29] audit: type=1326 audit(410.354:26558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 410.444409][ T29] audit: type=1326 audit(410.354:26559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 410.467398][ T29] audit: type=1326 audit(410.354:26560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 410.490427][ T29] audit: type=1326 audit(410.354:26561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 410.513419][ T29] audit: type=1326 audit(410.354:26562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f03bae6e929 code=0x7ffc0000 [ 410.738001][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.745265][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.906810][ T29] audit: type=1326 audit(410.864:26563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.9.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 410.929960][ T29] audit: type=1326 audit(410.864:26564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.9.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428157e929 code=0x7ffc0000 [ 410.963742][ T29] audit: type=1326 audit(410.894:26565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbd05e929 code=0x7ffc0000 [ 410.986846][ T29] audit: type=1326 audit(410.894:26566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbd05e929 code=0x7ffc0000 [ 411.071605][T19734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.219826][T19734] veth0_vlan: entered promiscuous mode [ 411.232244][T19734] veth1_vlan: entered promiscuous mode [ 411.247609][T19948] netlink: 'syz.7.5227': attribute type 39 has an invalid length. [ 411.373160][T19734] veth0_macvtap: entered promiscuous mode [ 411.407601][T19734] veth1_macvtap: entered promiscuous mode [ 411.443563][T19734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.476529][T19734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.513011][T19734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.521972][T19734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.530793][T19734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.539530][T19734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.735499][T19997] loop0: detected capacity change from 0 to 128 [ 411.899682][T20003] netlink: 'syz.7.5248': attribute type 39 has an invalid length. [ 412.215132][T20019] SELinux: failed to load policy [ 412.224829][T20019] netlink: 'syz.1.5257': attribute type 10 has an invalid length. [ 412.260885][T20019] team0 (unregistering): Port device team_slave_0 removed [ 412.292939][T20019] team0 (unregistering): Port device team_slave_1 removed [ 412.809009][T20049] loop0: detected capacity change from 0 to 1024 [ 412.832293][T20049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.873978][T19734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.930387][T20060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5275'. [ 413.400023][T20069] netlink: 'syz.4.5277': attribute type 39 has an invalid length. [ 413.559351][T20071] SELinux: failed to load policy [ 413.564945][T20071] netlink: 'syz.9.5278': attribute type 10 has an invalid length. [ 413.676644][T20085] loop9: detected capacity change from 0 to 128 [ 413.828558][T20089] loop7: detected capacity change from 0 to 1024 [ 413.839151][T20089] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 413.885075][T20089] loop7: detected capacity change from 0 to 8192 [ 414.286554][T20085] ================================================================== [ 414.294695][T20085] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 414.301851][T20085] [ 414.304195][T20085] write to 0xffff888106bd5414 of 4 bytes by task 20086 on cpu 0: [ 414.311928][T20085] xas_set_mark+0x12b/0x140 [ 414.316472][T20085] __folio_start_writeback+0x1dd/0x440 [ 414.321968][T20085] __block_write_full_folio+0x53a/0x8f0 [ 414.327558][T20085] block_write_full_folio+0x2c2/0x2e0 [ 414.332971][T20085] mpage_writepages+0x6cf/0x1250 [ 414.337942][T20085] fat_writepages+0x24/0x30 [ 414.342488][T20085] do_writepages+0x1c3/0x310 [ 414.347119][T20085] file_write_and_wait_range+0x156/0x2c0 [ 414.352800][T20085] __generic_file_fsync+0x46/0x140 [ 414.357961][T20085] fat_file_fsync+0x49/0x100 [ 414.362582][T20085] vfs_fsync_range+0x10a/0x130 [ 414.367379][T20085] generic_file_write_iter+0x1b8/0x2f0 [ 414.372872][T20085] iter_file_splice_write+0x5ef/0x970 [ 414.378288][T20085] direct_splice_actor+0x153/0x2a0 [ 414.383442][T20085] splice_direct_to_actor+0x30f/0x680 [ 414.388873][T20085] do_splice_direct+0xda/0x150 [ 414.393666][T20085] do_sendfile+0x380/0x650 [ 414.398101][T20085] __x64_sys_sendfile64+0x105/0x150 [ 414.403316][T20085] x64_sys_call+0xb39/0x2fb0 [ 414.407926][T20085] do_syscall_64+0xd2/0x200 [ 414.412443][T20085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.418357][T20085] [ 414.420690][T20085] read to 0xffff888106bd5414 of 4 bytes by task 20085 on cpu 1: [ 414.428345][T20085] xas_find_marked+0x5dc/0x620 [ 414.433128][T20085] find_get_entry+0x5d/0x380 [ 414.437749][T20085] filemap_get_folios_tag+0x92/0x210 [ 414.443062][T20085] writeback_iter+0x4bb/0x820 [ 414.447755][T20085] mpage_writepages+0x87/0x1250 [ 414.452621][T20085] fat_writepages+0x24/0x30 [ 414.457145][T20085] do_writepages+0x1c3/0x310 [ 414.461752][T20085] file_write_and_wait_range+0x156/0x2c0 [ 414.467413][T20085] __generic_file_fsync+0x46/0x140 [ 414.472556][T20085] fat_file_fsync+0x49/0x100 [ 414.477166][T20085] vfs_fsync_range+0x10a/0x130 [ 414.481957][T20085] generic_file_write_iter+0x1b8/0x2f0 [ 414.487429][T20085] iter_file_splice_write+0x5ef/0x970 [ 414.492828][T20085] direct_splice_actor+0x153/0x2a0 [ 414.497973][T20085] splice_direct_to_actor+0x30f/0x680 [ 414.503370][T20085] do_splice_direct+0xda/0x150 [ 414.508163][T20085] do_sendfile+0x380/0x650 [ 414.512598][T20085] __x64_sys_sendfile64+0x105/0x150 [ 414.517815][T20085] x64_sys_call+0xb39/0x2fb0 [ 414.522509][T20085] do_syscall_64+0xd2/0x200 [ 414.527035][T20085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.532959][T20085] [ 414.535301][T20085] value changed: 0x0a000021 -> 0x04000021 [ 414.541040][T20085] [ 414.543375][T20085] Reported by Kernel Concurrency Sanitizer on: [ 414.549572][T20085] CPU: 1 UID: 0 PID: 20085 Comm: syz.9.5285 Tainted: G W 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 414.563681][T20085] Tainted: [W]=WARN [ 414.567581][T20085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.577647][T20085] ================================================================== [ 415.223595][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.272000][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.322147][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.382516][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.465139][ T37] bridge_slave_1: left allmulticast mode [ 415.470894][ T37] bridge_slave_1: left promiscuous mode [ 415.476562][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.485561][ T37] bridge_slave_0: left allmulticast mode [ 415.491330][ T37] bridge_slave_0: left promiscuous mode [ 415.497038][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.611582][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.623444][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.633346][ T37] bond0 (unregistering): Released all slaves [ 415.703445][ T37] hsr_slave_0: left promiscuous mode [ 415.709272][ T37] hsr_slave_1: left promiscuous mode [ 415.715027][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.722598][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.730173][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.737574][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.748599][ T37] veth1_macvtap: left promiscuous mode [ 415.754206][ T37] veth0_macvtap: left promiscuous mode [ 415.759894][ T37] veth1_vlan: left promiscuous mode [ 415.765206][ T37] veth0_vlan: left promiscuous mode [ 415.834041][ T37] team0 (unregistering): Port device team_slave_1 removed [ 415.846232][ T37] team0 (unregistering): Port device team_slave_0 removed