last executing test programs: 3m24.966845874s ago: executing program 0 (id=1): r0 = syz_io_uring_setup(0xd59, &(0x7f00000000c0)={0x0, 0x79ae, 0x3180, 0x7ffe, 0x40024e}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') fchdir(r3) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40018}) gettid() io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0xfc) r5 = gettid() r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x4, 0xe, 0x40, 0x0, 0xfffffffffffffc01, 0x4850, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000200), 0x3}, 0x100506, 0x8, 0x8, 0x4, 0x2, 0x8, 0xb, 0x0, 0x4, 0x0, 0x6}, r5, 0x2, r6, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) gettid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 3m24.381191602s ago: executing program 0 (id=13): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$eJzs3c9vG1kdAPDvOL+cbHaTXfYACNiyLBRU1Unc3Wi1B1hOCKGVEHsEqRsSN4pix1HsLJvQQ/o/IFGJExz5Azj3xJ0LghuXckDiRwRqKnHwasaT1E3tJm0SO4o/H2k08+Y5830v7rxnf934BTC0rkXEXkSMR8QnETGTn0/yLT5sb+njHu3fXT7Yv7ucRKv18b+TrD49Fx0/k3olv2YxIn7yg4ifJ8/Gbezsri9Vq5WtdnFyrlnbnGvs7N5cqy2tVlYrG+Xy4sLi/Pu33iufW1/fqo3nR199+Ke97/wybdZ0fqazH+ep3fWxozip0Yj40UUEG4CRvD/jg24IL6UQEW9ExNvZ/T8TI9mzCQBcZa3WTLRmOssAwFVXyHJgSaGU5wKmo1Aoldo5vDdjqlCtN5o37tS3N1baubLZGCvcWatW5vNc4WyMJWl5ITt+Ui4fK9+KiNcj4lcTk1m5tFyvrgzyhQ8ADLFXjs3//5toz/8AwBVXHHQDAIC+M/8DwPAx/wPA8DH/A8DwMf8DwPAx/wPA8DH/A8BQ+fFHH6Vb6yD//uuVT3e21+uf3lypNNZLte3l0nJ9a7O0Wq+vZt/ZUzvpetV6fXPh3dj+bPa7m43mXGNn93atvr3RvJ19r/ftylhfegUAPM/rbz34axIRex9MZlt0rOVgroarrTDoBgADMzLoBgADc7TalwXcYOic4T2+9ABcEV2W6H1KMSImj59stVqti2sScMGuf0n+H4ZVR/7f/wKGISP/D8NrdNANAAam1UpOu+Z/nPaBAMDlJscP9Pj8/418//v8w4GfrRx/xP2LbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbofr/5bytcCno1AolSJejYjZGEvurFUr8xHxWkT8ZWJsIi0vDLjNAMBZFf6R5Ot/XZ95Z/p47XjyeCLbR8QvfvPxrz9baja3/pye/89Ekp9v3s/PlwfSAQDgBIfzdLbveCP/aP/u8uHWz/b88/sRUWzHP9gfj4Oj+KMxmu2LMRYRU/9N8nJb0pG7OIu9exHxxW79T2I6y4G0Vz49Hj+N/Wpf4xeeil/I6tr79HfxhXNoCwybB+n482G3+68Q17J99/u/mI1QZ5ePf+mllg+yMfBJ/MPxb6TH+HfttDHe/eMP20eTz9bdi/jyaMRh7IOO8ecwftIj/junjP+3r3zt7V51rd9GXI/u8TtjzTVrm3ONnd2ba7Wl1cpqZaNcXlxYnH//1nvluSxHPdd7NvjXBzde61WX9n+qR/ziCf3/5in7/7v/f/LTrz8n/re/0S1+Id58Tvx0TvzWKeMvTf2h2Ksujb/So/8nPf83Thn/4d93n1k2HAAYnMbO7vpStVrZ6ufB4QuJvgZ18CIHI3G+F4yIvXO4Tvqv5lL8frocfK9fscbjhX6q1XqpWL1GjPPIugGXwdFNHxGPB90YAAAAAAAAAAAAAACgq378xdKg+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV9XkAAAD///ogzOo=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) unshare(0x66000080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008000100020000005dbed2d84f373f5283d98367a1384b35251b7f0b3f35a8b6975a202c3b1f0b3309536a0d8bf674e9477ede81a05dfd2bc2b2b1f5755625cef0295ef92a131b06baefb9a51a65b5edf62278e2c0df90ef39483138fe1ed05e2b287a16d9a38fec1adce6975d181bdd96623a80f1116242964a4d3068712f6eb534e4a0f25e608d8148e2efaed45d01761bd37384d5026935042e941b1efba2b1443f16e83771f9fa01f7bd5b422765389506175bf06d6f3c81283e"], 0x20}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) unshare(0x20000600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r8 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x4) openat(r9, 0x0, 0x40000, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') 3m22.768676986s ago: executing program 0 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) 3m22.551287879s ago: executing program 1 (id=30): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000172, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000006800010000000000000000000a000000000000000600070006000000080008800400010008000500", @ANYRES32=r6], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8000, 0x8, 0x40, 0xe0, r2, 0xffff, '\x00', r6, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xd}, 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000040)='./file0\x00', 0xfffffffe) 3m22.50559954s ago: executing program 1 (id=31): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000140000009500"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xabacd46f, 0x1, 0xb68, 0xee6a, 0x4}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000380)={0x8, &(0x7f0000000180)=[{0xfffa, 0xff, 0x7, 0x1a1c}, {0xb, 0x5, 0x5, 0x8}, {0x9, 0x5, 0xc, 0x6}, {0x1, 0x3, 0x7b, 0x1ff}, {0x5, 0x7, 0x3, 0x3}, {0x1, 0x7, 0xc, 0x3}, {0x4, 0x8, 0x88, 0xffff0001}, {0x3, 0x0, 0x0, 0x9}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r5], 0x2c}}, 0x0) (fail_nth: 1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r8, 0xffffffff) r9 = syz_io_uring_setup(0xcd0, &(0x7f0000000dc0)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x152}, &(0x7f00000005c0)=0x0, &(0x7f0000000e40)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0xa3d, 0x0, 0x0, 0x0, 0xff39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="a183000000000000000005"], 0x78}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17b9310400876c1d0000007ea60864160af36514001ac00400020004000400eab556a705251e61aae5f66f8294ff0051f60a84c9f4d4938037e786a6d0001004000e4509c57f74ff24185499020000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24008880) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @void}, 0x10) 3m22.322516103s ago: executing program 1 (id=36): r0 = syz_io_uring_setup(0xd59, &(0x7f00000000c0)={0x0, 0x79ae, 0x3180, 0x7ffe, 0x40024e}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') fchdir(r3) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40018}) gettid() io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0xfc) r5 = gettid() r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x4, 0xe, 0x40, 0x0, 0xfffffffffffffc01, 0x4850, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000200), 0x3}, 0x100506, 0x8, 0x8, 0x4, 0x2, 0x8, 0xb, 0x0, 0x4, 0x0, 0x6}, r5, 0x2, r6, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) gettid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 3m22.119994295s ago: executing program 1 (id=39): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 3m21.966514778s ago: executing program 1 (id=43): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000001c0)=0x1000000002, 0x12) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_create_resource$binfmt(&(0x7f0000000380)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000300)={r5, r6+10000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000580)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) close(r2) (async) close(r2) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000015143dcf"], 0x28}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000015143dcf"], 0x28}}, 0x0) mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1a0000000a000000090000000400000004000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000400000000000000000000008f0a02ae00000000"], 0x50) stat(0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3e80}], 0x1}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3e80}], 0x1}, 0x0) 3m21.12309887s ago: executing program 1 (id=63): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 3m20.993395672s ago: executing program 0 (id=66): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") signalfd(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x8ba, 0x696d, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0xa3f8, 0x1000, 0x0, 0x7, 0x8, 0x0, [{0x9, 0x101, 0x5, '\x00', 0x4}, {0x7, 0x9, 0x7fff, '\x00', 0x4}, {0x0, 0x1, 0x7fff, '\x00', 0x1002}, {0x6f01, 0x8, 0x3, '\x00', 0x84}, {0x6, 0x1, 0x9, '\x00', 0x1280}, {0x3, 0x7, 0x4, '\x00', 0x86}, {0x1, 0x3, 0x9, '\x00', 0x1000}, {0x42d5, 0xd32a, 0x10000, '\x00', 0x2498}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) 3m20.992080772s ago: executing program 32 (id=66): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") signalfd(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x8ba, 0x696d, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0xa3f8, 0x1000, 0x0, 0x7, 0x8, 0x0, [{0x9, 0x101, 0x5, '\x00', 0x4}, {0x7, 0x9, 0x7fff, '\x00', 0x4}, {0x0, 0x1, 0x7fff, '\x00', 0x1002}, {0x6f01, 0x8, 0x3, '\x00', 0x84}, {0x6, 0x1, 0x9, '\x00', 0x1280}, {0x3, 0x7, 0x4, '\x00', 0x86}, {0x1, 0x3, 0x9, '\x00', 0x1000}, {0x42d5, 0xd32a, 0x10000, '\x00', 0x2498}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) 3m8.98386481s ago: executing program 3 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x5609, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2000000, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xfffb, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m8.895257561s ago: executing program 3 (id=211): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000200)="cf", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfa82, @loopback, 0xffffffff}, 0x1c) (fail_nth: 14) 3m8.572061565s ago: executing program 3 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) 3m8.498062147s ago: executing program 3 (id=215): unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r3) openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000005000000c5670000000000000400000000000000d500000000000000fafffffeffffffff0000000000000000000000000000000000000000000000001a05000006000000000001000000000063040000002c4fcffdffffffffffffff0b0000000000000000000000000000000000000000000000000000000000d8c34cca00004cf568f05982d11001566d35bc44113907eeadb6faae5b5cf430db2845cfbf360c8af87fdd3c64214833a9"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0xe}, 0x18) socket$key(0xf, 0x3, 0x2) mount(&(0x7f0000000240)=@rnullb, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='selinuxfs\x00', 0x1, &(0x7f0000000380)='kmem_cache_free\x00') syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') sendmsg$key(r5, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a000000000000000000000038af16d4bb012fda70cb00001a3cb800000000000000000000aa4b"], 0x110}, 0x1, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) 3m8.197420161s ago: executing program 3 (id=217): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 3m7.999515444s ago: executing program 3 (id=221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x74) fchdir(r2) futex_waitv(&(0x7f0000001800)=[{0x2, &(0x7f0000001680)=0x73bd, 0x86}], 0x1, 0x0, 0x0, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x121140, 0x1) r4 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) shutdown(r4, 0x1) mkdirat(r3, &(0x7f0000000240)='\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') socket$kcm(0x2, 0xa, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = fcntl$dupfd(r7, 0x408, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)='ramfs\x00', 0x0) shutdown(r6, 0x0) open_tree(r2, 0x0, 0x9800) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'dvmrp0\x00', @broadcast}) listen(0xffffffffffffffff, 0x314e) 3m7.998852164s ago: executing program 33 (id=221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x74) fchdir(r2) futex_waitv(&(0x7f0000001800)=[{0x2, &(0x7f0000001680)=0x73bd, 0x86}], 0x1, 0x0, 0x0, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x121140, 0x1) r4 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) shutdown(r4, 0x1) mkdirat(r3, &(0x7f0000000240)='\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') socket$kcm(0x2, 0xa, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = fcntl$dupfd(r7, 0x408, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)='ramfs\x00', 0x0) shutdown(r6, 0x0) open_tree(r2, 0x0, 0x9800) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'dvmrp0\x00', @broadcast}) listen(0xffffffffffffffff, 0x314e) 3m7.032293698s ago: executing program 2 (id=234): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000880), 0x0, 0x570, &(0x7f0000001380)="$eJzs3c1rHOUfAPDvbF76+vs1hVJURAI9WNFumsSXCh7qUbRY0HtdkjGUbLoluylNLLQ92IsXKYKIBfHgTe8ei/+Af0VBi0VK0IOXyGxm022zm2zTbXbrfj4w4XlmZvM835l5nn1mn1k2gIE1nv0pRDwfEV8mEYciIsm3DUe+cXx9v9X7V2ayJYm1tY/+TOr7ZfnG/2q87kCeeS4ifvk84tXC5nKryyvzpXI5XczzE7WFixPV5ZUT5xdKc+lcemFqevrUG9NTb7/1ZtdifeXs3998ePu9U18cW/36p7uHbyZxOg7m25rjeALXmjPjMZ4fk5E4/ciOk10orJ8kva4AOzKUt/ORyPqAQzGUt3rgv+9qRKwBAyrR/mFANcYBjXv7Lt0HPzPuvbt+A7Q5/uH1z0Zib/3eaP9q8tCdUXa/O9aF8rMyfv791s1sie59DgGwrWvXI+Lk8PDm/i/J+7+dO9nBPo+Wof+D3XM7G/+81mr8U9gY/0SL8c+BFm13J7Zv/4W7XSimrWz8907L8e/GpNXYUJ77X33MN5J8er6cZn3b/yPieIzsyfJbzeecWr2z1m5b8/gvW7LyG2PBvB53h/c8/JrZUq30JDE3u3c94oWW499k4/wnLc5/djzOdljG0fTWS+22bR//07X2fcTLLc//gxmtZOv5yYn69TDRuCo2++vG0V/blb85/tHYzfiz879/6/jHkub52urjl/Hd3n/Sdtseij86v/5Hk4/r6dF83eVSrbY4GTGafLB5/dSD1zbyjf2z+I8f27r/a3X974uITzqM/8aRH1/sKP4eXP9Z/LOPdf4fP3Hn/c++bVd+Z/3f6/XU8XxNJ/1fpxV8kmMHAAAAAAAA/aYQEQcjKRQ30oVCsbj+fMeR2F8oj60//xGzUf+u7FiMFBoz3YeanoeYzJ+HbeSnHslPR8ThiPhqaF89X5yplGd7HTwAAAAAAAAAAAAAAAAAAAD0iQNtvv+f+W2o17UDnjo/+Q2Da9v2341fegL6kvd/GFzaPwwu7R8Gl/YPg6up/e/pZT2A3ef9HwaX9g+DS/sHAAAAAAAAAAAAAAAAAAAAAAAAAACArjp75ky2rK3evzKT5WcvLS/NVy6dmE2r88WFpZniTGXxYnGuUpkrp8WZysJ2/69cqVycnIqlyxO1tFqbqC6vnFuoLF2onTu/UJpLz6UjuxIVAAAAAAAAAAAAAAAAAAAAPFuqyyvzpXI5XZSQ2FFiuD+qsZ7ILummNVd7XZ+tEn/80BfVaJfodc8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8GwAA//9ITzKe") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x381, 0x2) 3m6.656464774s ago: executing program 2 (id=236): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x500000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) 3m6.294778769s ago: executing program 2 (id=239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) shutdown(r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000140)='neigh_update\x00', r0, 0x0, 0x2}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008050}, 0x20004044) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m6.094335842s ago: executing program 34 (id=63): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 3m5.236868125s ago: executing program 2 (id=251): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080), 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r8}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r9, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r9, r1, 0x0, 0x3ffff) sendfile(r9, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket(0x25, 0x1, 0x0) 3m4.16678441s ago: executing program 2 (id=260): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000, 0x0, 0x6000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 3m3.599105449s ago: executing program 2 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x23}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000000)="00050002", 0x4) connect$inet6(r2, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b1c3e80e61ce0f0bb4b39ede5ad4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dc7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900"/203], 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000080), 0x1, 0x597, &(0x7f0000000b80)="$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") llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) 3m3.585144199s ago: executing program 35 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x23}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000000)="00050002", 0x4) connect$inet6(r2, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b1c3e80e61ce0f0bb4b39ede5ad4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dc7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900"/203], 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000080), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd") llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) 25.319452406s ago: executing program 7 (id=3125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{&(0x7f0000000000)=@in={0x2, 0xfff0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000002c0)="b4661fd3", 0x4}], 0x1, &(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="18000000000000008400000000000000ff0f9c6102002b0b20000000000000008400000008000000fe8000000000000000000000000000bb18"], 0x88, 0x24000010}], 0x1, 0x40) 25.229375417s ago: executing program 7 (id=3127): mknod$loop(0x0, 0x100000000000600d, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) write$sndseq(r3, 0x0, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4) read$snapshot(r3, 0x0, 0xffffffbf) read$snapshot(r3, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'geneve1\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x0, 0x29}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x47, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'veth1_to_bridge\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x4, 0xa5a, 0x160a, 0x800, 0x81, 0x3, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) syz_usbip_server_init(0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='f2fs_background_gc\x00', r3, 0x0, 0x1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 23.862044357s ago: executing program 7 (id=3154): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x0, 0x40}, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0xff, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000020101040000000000000000020001014400028006000340000400041400018008000100ac14142a08000200ac1e0001060003400003000014000180080001"], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000b886", @ANYRES16=0x0, @ANYBLOB="0c042bbd7000fddbdf250400000014000500ff02000000000000000000000000000106000b002b000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0xffe0}, {}, {0xa, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4000151}, 0x40004) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) 23.726892679s ago: executing program 7 (id=3156): prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000180)={0x9, 0x3c}, &(0x7f00000001c0)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@local, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x23, 0x1000000, 0x7e, 0x6b}, 0x3c) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1008002, &(0x7f00000003c0)={[{@errors_remount}, {@sysvgroups}, {@resuid}, {@jqfmt_vfsold}, {@data_ordered}, {@resuid={'resuid', 0x3d, 0xee00}}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x0, 0x5ee, &(0x7f0000000600)="$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") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000700", @ANYRES32=0x0, @ANYBLOB="100005000000000020"], 0x2c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='system.sockprotoname\x00', &(0x7f00000002c0)=':%\xcc\x00', 0x4, 0x1) nanosleep(&(0x7f0000000180)={0x77359400}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095", @ANYRESOCT=r3], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x178}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) removexattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x100, 0xfffffffffffffeff, 0x3}, 0x2}, 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r8, 0x4, 0x13, &(0x7f0000000000), 0x0) io_submit(r8, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) 22.835365322s ago: executing program 7 (id=3168): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x12, &(0x7f0000000200), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x2) ioctl$EVIOCGABS20(r2, 0x80184560, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@ipv4_newroute={0xb4, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8c, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x88, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x84, 0x3, "8fd498249133df36da6ee26a0cb5e066cc93ceb97a0a6b2de0bd82ffa9cbedc9120835e49ed02221ad4f0227c6a5891da80000000000000000afb3733aca71f72d9a5a1ba439e355a0a184e3cb8256125a995964771b66f17cf2284697e095dbc322d0df13e673132e2542a4f9b34c29123004ea8acc955eacde969eb114a603"}}}}]}, 0xb4}}, 0xa890) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x408000, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TCSETSW2(r10, 0x5453, 0x0) ioctl$KDSIGACCEPT(r10, 0x541b, 0x100000001ffffffd) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00'}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={0x0, 0x10}}, 0x24000000) sendto$packet(r6, &(0x7f0000000140)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x1a, 0x2, &(0x7f0000000280)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @random}, 0x14) 22.723629964s ago: executing program 7 (id=3169): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_clone(0xc0001480, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000010c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000001100)=@newtclass={0x9f0, 0x28, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0x1}, {0x5, 0xffe0}, {0x8, 0xfff2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x6}}}, @c_cbq={{0x8}, {0x448, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x5045d4d8, 0x3ff, 0x2804, 0x356, 0x5, 0x7f, 0xf, 0xfff, 0xfffffff7, 0x8, 0xd3a, 0x0, 0x1, 0x9, 0x4, 0xc5, 0x8001, 0x6, 0x81, 0x80000001, 0x0, 0x7, 0xe, 0x9, 0x80000001, 0x401, 0x7, 0xf8bb, 0x3, 0x400, 0x3, 0x4, 0x1, 0x7, 0x7, 0xdf, 0x5, 0x6, 0x9, 0x9, 0x9, 0x400, 0x4, 0x4, 0x6, 0x7, 0x401, 0x5, 0x4, 0x5, 0x7, 0xc6, 0x6, 0x6, 0x0, 0x80000001, 0xffffffff, 0x7ce2, 0x5, 0x7, 0x3, 0x4, 0x0, 0xf27, 0x2, 0x3, 0x7, 0x4, 0xa3, 0x0, 0x3ff, 0x0, 0x200, 0x0, 0x8, 0x8, 0x0, 0x5, 0xf36, 0x2, 0x80, 0x6, 0x9, 0xa66e, 0x5, 0x6, 0x1, 0x8, 0x26f6, 0x7ff, 0x81, 0x1, 0x58b1, 0x1, 0xa74a, 0x22, 0x6, 0xffffffff, 0x8, 0x39, 0x4, 0x2, 0x3, 0x2, 0x101, 0x817c, 0xffffff7f, 0x731c, 0x5, 0x8, 0x7, 0xffffff01, 0x5, 0x0, 0x6, 0x3, 0x3, 0x4, 0x4, 0x6, 0x3, 0x5, 0x4, 0x6, 0x80000000, 0x6, 0x8001, 0x4, 0xfffffffd, 0x401, 0x2, 0x8000, 0x2, 0x4, 0xffff, 0x75c, 0x7, 0xfffffffa, 0x8, 0x7, 0xfff, 0x10, 0x6, 0x9, 0x8, 0x5, 0xfffff641, 0xffffffff, 0xf, 0xc, 0x5, 0x1, 0x9, 0xff, 0xab30, 0xfffffff7, 0x1ff, 0x1ff, 0x4, 0x6, 0x7, 0x279f, 0x7, 0x8, 0x2, 0x7, 0x4, 0x3, 0xfffffff5, 0x2, 0x5, 0x5, 0x10, 0x3, 0xff, 0xd61, 0xf, 0x366b, 0x6, 0x1, 0x2e, 0x7, 0x6, 0xc, 0x180, 0x7, 0x8, 0x8, 0x4, 0x3, 0x2, 0x5, 0x4, 0x3, 0x80000000, 0x7, 0x3, 0x9, 0x2066, 0x1, 0xc, 0x2, 0x1, 0xec, 0x18, 0x5, 0x4, 0x8001, 0x9000, 0x3, 0x4, 0x3ff, 0x7, 0x8, 0x2, 0x9, 0x32, 0x7fffffff, 0x5, 0x7, 0x5, 0x3, 0xffff, 0x7, 0x0, 0x0, 0x10001, 0xff, 0x400, 0x9, 0x7, 0x5, 0xfff, 0x2, 0x9, 0x6aed, 0x8, 0x1, 0x9752, 0x2, 0x9, 0x800, 0x9, 0x7, 0x301, 0x1, 0x65, 0x7ff, 0x6f53, 0x7a2b, 0x9, 0xffff5221, 0x0, 0x6d, 0x7ff]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x6, 0x0, 0xe, 0x0, 0xb5, 0xff, 0x7, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0xc}, 0x2, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x8, 0x0, 0x8, 0x80, 0x1, 0x3, 0x7, 0x5}}]}}, @c_cbq={{0x8}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x32, 0x0, 0x1b, 0xbd, 0x80000001, 0x10001, 0x8, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x0, 0xe6, 0xfc, 0xfa59, 0x3}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xfa}}}, @c_cbq={{0x8}, {0x44, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x52, 0x7, 0xffff, 0xa6}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x2, 0xb1, 0x5e, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0xfff2}, 0xe2, 0x7ff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x60, 0x7, 0x51, 0x88, 0x6, 0x3ff}}]}}, @c_cbq={{0x8}, {0x498, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xc6, 0x2, 0xfff, 0xd8, 0x9, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x40, 0x3, 0x4, 0x6, 0x5d, 0x10001, 0x6, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x2, 0x1, 0xeb5b, 0x7, 0x7fff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4b, 0x6, 0x9, 0x10, 0x101, 0xd889}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x2, 0x4, 0x9, 0x1, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x3cd, 0x0, 0x4, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x0, 0x2, 0xd, 0x9, 0x3, 0x9, 0x73, 0xfffffffb}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x7, 0x3, 0x6, 0x9, 0x5, 0xa3, 0x2, 0x8, 0x4, 0x401, 0x3ff, 0x4, 0x8, 0x2b2, 0x3ff, 0x1, 0xb5, 0x9, 0xfffffff9, 0x800, 0x5, 0x4, 0x8001, 0x5, 0x401, 0x80, 0x1, 0x4, 0xfffffffb, 0x8, 0xffffffff, 0x1, 0x1ff, 0x1ff, 0x1c23, 0x2, 0x7c19, 0xfffffe00, 0x3, 0x101, 0x0, 0x2, 0xfffffffe, 0x4, 0x7, 0x401, 0x7, 0x100, 0x5, 0x4, 0x3, 0x7, 0x2, 0x2, 0x7, 0x8, 0xfffffffb, 0x5, 0x80000001, 0xffff, 0x5, 0x2, 0x8, 0xa6, 0x7ff, 0xfffffff8, 0x9, 0x9, 0x6, 0x6, 0x4, 0x8, 0x8, 0x7, 0x4, 0x6, 0x5, 0x80000001, 0x4, 0x2ac1, 0x829c, 0x5747, 0x7, 0x9, 0x5, 0xfffffbff, 0x6, 0x6, 0x1, 0x5, 0xd, 0x6, 0xa, 0x9, 0x80000001, 0x2, 0x9, 0x8, 0x100, 0x0, 0x50000, 0x100, 0xfffffff7, 0x7, 0x3, 0x6, 0x2, 0xe, 0x2, 0xfffffffa, 0x5, 0x100, 0x10001, 0x7, 0x5, 0x9, 0x6, 0x100, 0x2, 0x2, 0x3, 0x4, 0xffffffff, 0x3, 0x80000000, 0xa28, 0x58, 0x1, 0xf, 0x10, 0x6, 0x8c9, 0x100, 0x1, 0x7, 0x9, 0x673a, 0x1, 0x5, 0x2, 0x9, 0x2, 0x80, 0xfffffbff, 0x300, 0x8, 0xfffffff9, 0x8000, 0x9, 0x8000, 0x0, 0xffffffff, 0x5, 0xb, 0x5, 0xe1, 0x1000, 0x1, 0x0, 0x7, 0x5a9, 0x3, 0x7ff, 0x10, 0x1af, 0x1, 0x8, 0x2, 0xe, 0x9, 0x6, 0x1701, 0x1, 0xa, 0x7, 0x10, 0x7b77, 0x4, 0x7fff, 0x9, 0x0, 0x7, 0x6, 0xc0000, 0x80000001, 0x4a, 0xba, 0x7, 0xbfd, 0x0, 0x10, 0x200, 0xffff, 0x10, 0x1, 0x868f, 0x6, 0x10000, 0x7, 0x4, 0xc3a, 0x0, 0x4, 0xa, 0x9, 0x7, 0x4, 0x6, 0x8, 0x14, 0x401, 0xfffffffc, 0x9, 0x2ed, 0x7, 0x10000, 0x5, 0x10000, 0x1, 0x9, 0xfff, 0x800, 0xfffffff9, 0x2, 0x1, 0x8000, 0x0, 0x57ab, 0x4, 0x6, 0x2, 0x9, 0x9, 0x8f, 0x6, 0x5, 0x3, 0x100, 0x3ff, 0x8, 0x0, 0x1, 0x8, 0x9, 0x9, 0x9, 0x4, 0x9, 0x0, 0x483, 0x8, 0x3, 0x1, 0xfff, 0xc1]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x80, 0x5, 0x2, 0xe0, 0x5, 0x28f}}]}}, @c_atm={{0x8}, {0x24, 0x2, [@TCA_ATM_HDR={0x17, 0x3, "2c1809f6561c6a6698a19fdd2b8a5473269480"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xb}}]}}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x20000100}, 0x0) bind$packet(r8, &(0x7f0000000080)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0xf0bd30, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004810}, 0x40000) 7.752847385s ago: executing program 36 (id=3169): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_clone(0xc0001480, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000010c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000001100)=@newtclass={0x9f0, 0x28, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0x1}, {0x5, 0xffe0}, {0x8, 0xfff2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x6}}}, @c_cbq={{0x8}, {0x448, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x5045d4d8, 0x3ff, 0x2804, 0x356, 0x5, 0x7f, 0xf, 0xfff, 0xfffffff7, 0x8, 0xd3a, 0x0, 0x1, 0x9, 0x4, 0xc5, 0x8001, 0x6, 0x81, 0x80000001, 0x0, 0x7, 0xe, 0x9, 0x80000001, 0x401, 0x7, 0xf8bb, 0x3, 0x400, 0x3, 0x4, 0x1, 0x7, 0x7, 0xdf, 0x5, 0x6, 0x9, 0x9, 0x9, 0x400, 0x4, 0x4, 0x6, 0x7, 0x401, 0x5, 0x4, 0x5, 0x7, 0xc6, 0x6, 0x6, 0x0, 0x80000001, 0xffffffff, 0x7ce2, 0x5, 0x7, 0x3, 0x4, 0x0, 0xf27, 0x2, 0x3, 0x7, 0x4, 0xa3, 0x0, 0x3ff, 0x0, 0x200, 0x0, 0x8, 0x8, 0x0, 0x5, 0xf36, 0x2, 0x80, 0x6, 0x9, 0xa66e, 0x5, 0x6, 0x1, 0x8, 0x26f6, 0x7ff, 0x81, 0x1, 0x58b1, 0x1, 0xa74a, 0x22, 0x6, 0xffffffff, 0x8, 0x39, 0x4, 0x2, 0x3, 0x2, 0x101, 0x817c, 0xffffff7f, 0x731c, 0x5, 0x8, 0x7, 0xffffff01, 0x5, 0x0, 0x6, 0x3, 0x3, 0x4, 0x4, 0x6, 0x3, 0x5, 0x4, 0x6, 0x80000000, 0x6, 0x8001, 0x4, 0xfffffffd, 0x401, 0x2, 0x8000, 0x2, 0x4, 0xffff, 0x75c, 0x7, 0xfffffffa, 0x8, 0x7, 0xfff, 0x10, 0x6, 0x9, 0x8, 0x5, 0xfffff641, 0xffffffff, 0xf, 0xc, 0x5, 0x1, 0x9, 0xff, 0xab30, 0xfffffff7, 0x1ff, 0x1ff, 0x4, 0x6, 0x7, 0x279f, 0x7, 0x8, 0x2, 0x7, 0x4, 0x3, 0xfffffff5, 0x2, 0x5, 0x5, 0x10, 0x3, 0xff, 0xd61, 0xf, 0x366b, 0x6, 0x1, 0x2e, 0x7, 0x6, 0xc, 0x180, 0x7, 0x8, 0x8, 0x4, 0x3, 0x2, 0x5, 0x4, 0x3, 0x80000000, 0x7, 0x3, 0x9, 0x2066, 0x1, 0xc, 0x2, 0x1, 0xec, 0x18, 0x5, 0x4, 0x8001, 0x9000, 0x3, 0x4, 0x3ff, 0x7, 0x8, 0x2, 0x9, 0x32, 0x7fffffff, 0x5, 0x7, 0x5, 0x3, 0xffff, 0x7, 0x0, 0x0, 0x10001, 0xff, 0x400, 0x9, 0x7, 0x5, 0xfff, 0x2, 0x9, 0x6aed, 0x8, 0x1, 0x9752, 0x2, 0x9, 0x800, 0x9, 0x7, 0x301, 0x1, 0x65, 0x7ff, 0x6f53, 0x7a2b, 0x9, 0xffff5221, 0x0, 0x6d, 0x7ff]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x6, 0x0, 0xe, 0x0, 0xb5, 0xff, 0x7, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0xc}, 0x2, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x8, 0x0, 0x8, 0x80, 0x1, 0x3, 0x7, 0x5}}]}}, @c_cbq={{0x8}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x32, 0x0, 0x1b, 0xbd, 0x80000001, 0x10001, 0x8, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x0, 0xe6, 0xfc, 0xfa59, 0x3}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xfa}}}, @c_cbq={{0x8}, {0x44, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x52, 0x7, 0xffff, 0xa6}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x2, 0xb1, 0x5e, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0xfff2}, 0xe2, 0x7ff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x60, 0x7, 0x51, 0x88, 0x6, 0x3ff}}]}}, @c_cbq={{0x8}, {0x498, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xc6, 0x2, 0xfff, 0xd8, 0x9, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x40, 0x3, 0x4, 0x6, 0x5d, 0x10001, 0x6, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x2, 0x1, 0xeb5b, 0x7, 0x7fff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4b, 0x6, 0x9, 0x10, 0x101, 0xd889}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x2, 0x4, 0x9, 0x1, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x3cd, 0x0, 0x4, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x0, 0x2, 0xd, 0x9, 0x3, 0x9, 0x73, 0xfffffffb}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x7, 0x3, 0x6, 0x9, 0x5, 0xa3, 0x2, 0x8, 0x4, 0x401, 0x3ff, 0x4, 0x8, 0x2b2, 0x3ff, 0x1, 0xb5, 0x9, 0xfffffff9, 0x800, 0x5, 0x4, 0x8001, 0x5, 0x401, 0x80, 0x1, 0x4, 0xfffffffb, 0x8, 0xffffffff, 0x1, 0x1ff, 0x1ff, 0x1c23, 0x2, 0x7c19, 0xfffffe00, 0x3, 0x101, 0x0, 0x2, 0xfffffffe, 0x4, 0x7, 0x401, 0x7, 0x100, 0x5, 0x4, 0x3, 0x7, 0x2, 0x2, 0x7, 0x8, 0xfffffffb, 0x5, 0x80000001, 0xffff, 0x5, 0x2, 0x8, 0xa6, 0x7ff, 0xfffffff8, 0x9, 0x9, 0x6, 0x6, 0x4, 0x8, 0x8, 0x7, 0x4, 0x6, 0x5, 0x80000001, 0x4, 0x2ac1, 0x829c, 0x5747, 0x7, 0x9, 0x5, 0xfffffbff, 0x6, 0x6, 0x1, 0x5, 0xd, 0x6, 0xa, 0x9, 0x80000001, 0x2, 0x9, 0x8, 0x100, 0x0, 0x50000, 0x100, 0xfffffff7, 0x7, 0x3, 0x6, 0x2, 0xe, 0x2, 0xfffffffa, 0x5, 0x100, 0x10001, 0x7, 0x5, 0x9, 0x6, 0x100, 0x2, 0x2, 0x3, 0x4, 0xffffffff, 0x3, 0x80000000, 0xa28, 0x58, 0x1, 0xf, 0x10, 0x6, 0x8c9, 0x100, 0x1, 0x7, 0x9, 0x673a, 0x1, 0x5, 0x2, 0x9, 0x2, 0x80, 0xfffffbff, 0x300, 0x8, 0xfffffff9, 0x8000, 0x9, 0x8000, 0x0, 0xffffffff, 0x5, 0xb, 0x5, 0xe1, 0x1000, 0x1, 0x0, 0x7, 0x5a9, 0x3, 0x7ff, 0x10, 0x1af, 0x1, 0x8, 0x2, 0xe, 0x9, 0x6, 0x1701, 0x1, 0xa, 0x7, 0x10, 0x7b77, 0x4, 0x7fff, 0x9, 0x0, 0x7, 0x6, 0xc0000, 0x80000001, 0x4a, 0xba, 0x7, 0xbfd, 0x0, 0x10, 0x200, 0xffff, 0x10, 0x1, 0x868f, 0x6, 0x10000, 0x7, 0x4, 0xc3a, 0x0, 0x4, 0xa, 0x9, 0x7, 0x4, 0x6, 0x8, 0x14, 0x401, 0xfffffffc, 0x9, 0x2ed, 0x7, 0x10000, 0x5, 0x10000, 0x1, 0x9, 0xfff, 0x800, 0xfffffff9, 0x2, 0x1, 0x8000, 0x0, 0x57ab, 0x4, 0x6, 0x2, 0x9, 0x9, 0x8f, 0x6, 0x5, 0x3, 0x100, 0x3ff, 0x8, 0x0, 0x1, 0x8, 0x9, 0x9, 0x9, 0x4, 0x9, 0x0, 0x483, 0x8, 0x3, 0x1, 0xfff, 0xc1]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x80, 0x5, 0x2, 0xe0, 0x5, 0x28f}}]}}, @c_atm={{0x8}, {0x24, 0x2, [@TCA_ATM_HDR={0x17, 0x3, "2c1809f6561c6a6698a19fdd2b8a5473269480"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xb}}]}}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x20000100}, 0x0) bind$packet(r8, &(0x7f0000000080)={0x11, 0x4, r9, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0xf0bd30, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004810}, 0x40000) 5.024855875s ago: executing program 6 (id=3322): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x400, 0x9, 0x527, 0x2dd8, 0x16, "e23d91d0028f27d46374a1f34e2af5599f9f0d"}) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000827bd7000fcdbdf254c000000080201007063690011000200303030303a30303a31302e300000000008000300010000000f0008007365636f82646e616d650000"], 0x48}, 0x1, 0x0, 0x0, 0x4014}, 0x20044040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 4.882857067s ago: executing program 6 (id=3323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f00000043c0)={0x4000080, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f0000000300)=""/103, 0x67) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0xf, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0xfffffffe, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e00"], 0x78) close(r3) io_uring_setup(0x699a, &(0x7f00000001c0)={0x0, 0xb86c, 0x4, 0x0, 0x16d, 0x0, r3}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file1\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240), 0x3af4701e) sendfile(r9, r7, 0x0, 0x10000a007) setreuid(r4, r5) socket$nl_route(0x10, 0x3, 0x0) 4.787869928s ago: executing program 6 (id=3324): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x400, 0x9, 0x527, 0x2dd8, 0x16, "e23d91d0028f27d46374a1f34e2af5599f9f0d"}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 4.70197232s ago: executing program 6 (id=3325): prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000180)={0x9, 0x3c}, &(0x7f00000001c0)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@local, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x23, 0x1000000, 0x7e, 0x6b}, 0x3c) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1008002, &(0x7f00000003c0)={[{@errors_remount}, {@sysvgroups}, {@resuid}, {@jqfmt_vfsold}, {@data_ordered}, {@resuid={'resuid', 0x3d, 0xee00}}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x0, 0x5ee, &(0x7f0000000600)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkysHoyYMXT4aEqOFo4prZzpRuO9sfS7sLnc8nWfrmvRnem06/OzNv35sNoLQG038qEXsjYjqJ6E/mF8s6IyscXFjv3j+fnE5fSVSrb/yVRJLl5esn2c++bOOeiPjlpyT2dKysd2buyvnxqanJy9ny8OyF6eGZuSsHz10YPzt5dvLi6Eujx44eOXps5FBT+3W1IO/k9fc/7P9s7O3vvvk3Gfn+97Ekjser2YpL92OzDMZg7XeSrCzqO7bZlbVJR/Z3svQQJ51Fa3a1rlGsW3780qPzVPRHR9w/eP3x6WttbRywpapJRHW5HXkhsL0lwhxKKr8OyO/tl98HV1p+RQK0yt0TCx0AK+O/c6FvMHpqfQM77yWxtFsniYjmeubq7YqI27fGrp+5NXY9tqgfDig2fy0ini6K/6QW/wPREwO1+K/UxX96XXAq+5nmv95k/cu7isU/tM5C/PesGv/RIP7fWRL/7zZZ/+D95Hu9dfHf2+wuAQAAAAAAQGndPBERLxZ9/l9ZHP8TBeN/+iLi+CbUP7hseeXn/5U7m1ANUODuiYhXCsf/VvLRvwMdWeqx2niAruTMuanJQxHxeEQciK4d6fLIKnUc/HzP143KBrPxf/krrf92NhYwa8edzh3120yMz44/6H4DEXevRTxTOP43WTz/J7XhvvNLpwvU3g+m11nHnudvnGpUtnb8A1ul+m3E/sLz//2nViSrP59juHY9MJxfFaz07Mdf/NCo/mbjv/ARE8CGpOf/navH/0Cy9Hk9Mxuv4/BcZ7VBUXez1//dyZu1R850Z3kfjc/OXh6J6E5OdqS5dfmjG28zbEd5POTxksb/gedW7/9LCvr/eiNiftn/nfxdP6c49+R/fX80ao/rf2ifNP4nNnT+33hi9MbAj43qX9/5/0jtXH8gy9H/Bwu+ysO0uz6/IBw7i4pa3V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A4qEbErksrQYrpSGRqK6IuIJ2JnZerSzOwLZy59cHEiLat9/38l/6bf/oXlJP/+/4Ely6PLlg9HxO6I+LKjt7Y8dPrS1ES7dx4AAAAAAAAAAAAAAAAAAAAeEn0N5v+n/uxod+uALdfZ7gYAbVMQ/7+2ox1A6zn/Q3mJfygv8Q/lJf6hvMQ/lJf4h/IS/1Be4h8AAAAAALaV3ftu/pZExPzLvbVXqjsr62pry4CtVml3A4C28YgfKC9Df6C83OMDyRrlPQ03WmvL1UyffoCNAQAAAAAAAAAAAKB09u81/x/Kyvx/KC/z/6G88vn/+9rcDqD13OMDscZM/sL5/2tuBQAAAAAAAAAAAABsppm5K+fHp6YmLz8KiZ+3tIq32r+DrU5Uq9Wr6V/Bw9KeRzyRD4V/WNqzLJHP9VvfVu17TwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr9HwAA//87QSCw") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000700", @ANYRES32=0x0, @ANYBLOB="100005000000000020"], 0x2c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='system.sockprotoname\x00', &(0x7f00000002c0)=':%\xcc\x00', 0x4, 0x1) nanosleep(&(0x7f0000000180)={0x77359400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095", @ANYRESOCT=r3], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) removexattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xffff}, 0x18) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x100, 0xfffffffffffffeff, 0x3}, 0x2}, 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r8, 0x4, 0x13, &(0x7f0000000000), 0x0) io_submit(r8, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) 4.01191616s ago: executing program 5 (id=3331): io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r0, 0x4, 0x13, &(0x7f0000000000), 0x0) io_destroy(r0) 3.831020023s ago: executing program 5 (id=3336): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000800000000000000000009e3a0bcacf6d7a391f316082c13888b7142fa7e46819605b2099bef47b9946ba6db602cf549b126010cae8f46fb276f44cbc70c90db7205bf197c6ca56e67e191210ee7e6f5631b267b0cc3c442c6759b2"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x23, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x1, 0x2, 0x7, 0x7, 0x2, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x5, 0x27, &(0x7f00000005c0)=""/39, 0x40f00, 0xa, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xc, 0x9bb2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000880)=[{0x0, 0x3, 0xc, 0x8}, {0x0, 0x3, 0x9, 0x1}], 0x10, 0x37d9}, 0x94) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r4], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sched_switch\x00', r6, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) 2.534056882s ago: executing program 5 (id=3351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) creat(&(0x7f0000000040)='./bus\x00', 0x23) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x205, 0x88441) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r4, 0x5412, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) quotactl$Q_SETINFO(0xffffffff80000602, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x1) write$UHID_INPUT(r5, 0x0, 0x0) 2.060108759s ago: executing program 8 (id=3345): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x400, 0x9, 0x527, 0x2dd8, 0x16, "e23d91d0028f27d46374a1f34e2af5599f9f0d"}) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000827bd7000fcdbdf254c000000080201007063690011000200303030303a30303a31302e300000000008000300010000000f0008007365636f82646e616d650000"], 0x48}, 0x1, 0x0, 0x0, 0x4014}, 0x20044040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 1.94718416s ago: executing program 8 (id=3347): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0x8}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) (fail_nth: 8) 1.94657116s ago: executing program 8 (id=3348): mknod$loop(0x0, 0x100000000000600d, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) write$sndseq(r3, 0x0, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4) read$snapshot(r3, 0x0, 0xffffffbf) read$snapshot(r3, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'geneve1\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x0, 0x29}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x47, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'veth1_to_bridge\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x4, 0xa5a, 0x160a, 0x800, 0x81, 0x3, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) syz_usbip_server_init(0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='f2fs_background_gc\x00', r3, 0x0, 0x1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.509625347s ago: executing program 5 (id=3349): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 1.490662197s ago: executing program 5 (id=3352): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000800000000000000000009e3a0bcacf6d7a391f316082c13888b7142fa7e46819605b2099bef47b9946ba6db602cf549b126010cae8f46fb276f44cbc70c90db7205bf197c6ca56e67e191210ee7e6f5631b267b0cc3c442c6759b2"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x23, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x1, 0x2, 0x7, 0x7, 0x2, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x5, 0x27, &(0x7f00000005c0)=""/39, 0x40f00, 0xa, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xc, 0x9bb2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000880)=[{0x0, 0x3, 0xc, 0x8}, {0x0, 0x3, 0x9, 0x1}], 0x10, 0x37d9}, 0x94) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r4], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sched_switch\x00', r6, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) 897.169736ms ago: executing program 4 (id=3358): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x1, 0x0, 0x3}) fchmodat(r1, &(0x7f0000000280)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@oldalloc}, {@orlov}, {@oldalloc}, {@auto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x580, &(0x7f0000001b40)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000002c0)=""/8, 0x1000000, 0x800, 0x2, 0x1}, 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x2f, 0x62, 0x6, 0x401, 0x42, @dev={0xfe, 0x80, '\x00', 0x30}, @mcast2, 0x80, 0x700, 0x8, 0xb3b6}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000900}, 0xc, &(0x7f0000000700)={&(0x7f0000004880)={0x1788, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x2a4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xde, 0x5, "3417491448b5ea5544e8ec4142bc52c8a6376d1a927f44fff5f7b92a306d13dcda4b449f91c6e529dc4cded39d25e05a4d55db80f1ba2cea09f85a0e9c1103e048f9c5493e6d3640defdacb3b55315dddebdc716d626502fd09269ec0b8dabd4b0dcd8027f4667a9010d157708c85b4c4c4b72129d522ba5b330ff177cf3da583aa4936f832adc9c5aafa672febad8879b65cccc44afa2b1935aceeb1742bd09996e5ca76b84bd54959e00f732582db71a55031df55e0eeddeefdce576162437eb72ad3d8c4bc5120ae242425f0f09fa5a2a9d296c2ed2652046"}, @ETHTOOL_A_BITSET_MASK={0xe5, 0x5, "67f4a433800ef547c06ebecd99a03e94363ae0203da516e9eee936d3a3259118b2b380ace4e4d9f2173dadefde5e3b392703c411a6a4716358b8fb675f050f4a221256e8d43b0f1719c767a862649159507f265687f1337bbe5f1dd4a479c644bf9a77c9161617331d1a118d887aa933113a5129f2824cddee616fd97988e546376a4d65bd60256615ce4bf08f2ab376cdf1328bdd1f1d2575307e57ad5d8c6fdb438a80407127e19535bb2c32bf2c5d4678507843330aef5fcb760217ec19170768e47924407475c7c487c3fa4e5692fa043907565b3b61c155be59cda67d7ba6"}, @ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "c69acace0c89a5a53321ba9e95038bd9a31b0a88d06c68454b6d75aefb446deefdd2294db42685c7be8e8617bc38692b59082275589d1c5edcb197c9acad47c34ee00c38a2871db676d9187f4c7ce005ff753d18bc1373e71aa3e6ed90daaacfc5490de81ac7f75b357bd752298238f7da174d6cca566edb21ffb4d215785ba92785f00d289b54dcae19622e5fdb3c76321b087b99986354dd4b5a4e9adfdcd791c5dba3b295cc518c7ea484dfe401601a5ecef87c5ea2078dc11290c452c349f97254031c7c8db7dac5b6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x111c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&Z^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4cec}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'orlov'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ')\xb2!!@\\%\\$^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'oldalloc'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '[$%+\\g$\\.#}@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff80}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'auto_da_alloc'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x358, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "bc1a18f74c73418997c0b08af1186decbadc3f64f040c17c8acd7805cf393a463a6658a9682e86add6b72550fc89ba6e59c9ce11516b89d9816ca7cd39c6d89ef2158d4920e3abf6b358b997df1fc24fa2e67c4c7fcf9aa93b73056e977f94dcf0025f548aabf8b2117f716548d45e9af0d6e10d09a939b28c79b5df9374ae515cbc7919dfe72cfa3cb0c5473c63f6f77e701ed6457c373eaf8fa8e28a82eb"}, @ETHTOOL_A_BITSET_MASK={0xc2, 0x5, "198f3c144a5f70cddfb67c2be88aa11779d337e653c2a828f40ebf09c895402731eaef0d863b95074c5d2a60e42644d88ad529e8bbf77a358e0b18033818fb04a0a20bd45c38151be5f1904ffb316ee9cf2693cdbc0903cd8f6d85de9d04ae57b66a119ee80e87c7ac87cd4ed799595a7fb16daf9a41a2e2bf02728b9143e85e02ff41d28b6ead663ea6ab7dcabfea058ab1c1ba1d33b26d5ab7569d4160ff39e6b902b991de056a1caba9a6f0776efa2b8cce94e63021fcb7530b357cd9"}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "3a0d767d4ae82e1d10ec4ea33d161a326ff26fe24e1e6a8266cf5b2e5c81645942328d8e7353921546ba82769e9d15f98ca57d41e0be1f24c59f8ee8dbac848c1e796f02cc203fc5f886279e25b1e8c9cd6ad6e58b59ca565f4ede879901bc933980daad97deb59c911807b82e7794fe45529c7b39b1d7e204834d132431e0969a3040053173166c07b48b03e4abf0547f754814d68ff7c9e8ea9724ae6d0e62f58f44bf7a1850710c4c92df94c3b9fa45f4c0b2f16c9ac16c2bbe5d51eacac4b245b081be05966f6e7902a87481c2a7d5fcf9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_MASK={0x15, 0x5, "d816527fded231584ee4952f4ae6aa6f77"}, @ETHTOOL_A_BITSET_VALUE={0xec, 0x4, "c3e23cb4248f4570223a6aa30de774e1cae831124df64c40ddafb790229475b9557c29eaecd258bfeef99dbc7833507721c6b83502d0010f6b53671246a8a38fdb652295516eb224859d04306006a1121f5d8384e7f8928d11ef97a91042254d10d297d8c3683b33b3aa432549a1376c5887c04c8e364819144e5be83b7116aaf7efe429b344c38c8e007130304800dbc9c94a62e1703f7cbbc3f0698405567172a59221c03ab4f04227ca52bbe0548a0211f7e65362259db839cd392118074c73c3c983d03f36dafc0d0f1ccd7ee7b00348337ad285bc2c7b3e8cd708cf886a7ea24a80561edfeb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x46}]}]}, 0x1788}, 0x1, 0x0, 0x0, 0x4000800}, 0x40088) r10 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r11, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r11, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1d, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 627.06146ms ago: executing program 4 (id=3361): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=0x0, @ANYBLOB="0002"], 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x20000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r1, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="3ca952b3867059c718050000000000000000e534a45afbc4a3af66eaa07b5a", @ANYRES32=r0, @ANYBLOB="0000000000000000b702004014000000b7030000000000008500000083000000bf0900000000000055090100000010009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) rename(0x0, 0x0) 598.3893ms ago: executing program 8 (id=3362): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 539.977971ms ago: executing program 8 (id=3363): io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r0, 0x4, 0x13, &(0x7f0000000000), 0x0) io_destroy(r0) 539.391961ms ago: executing program 4 (id=3364): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (fail_nth: 4) 358.748364ms ago: executing program 9 (id=3365): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 344.652734ms ago: executing program 9 (id=3366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_FADVISE={0x18, 0x60, 0x0, @fd, 0x4, 0x0, 0x8, 0x1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{&(0x7f0000000000)=@in={0x2, 0xfff0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0x924}, {0x0}, {0x0}], 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000084000000000000000800ee01a46bfd2720000000000000008400000002000000090002009af664a2ef99c68b", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000000000000ff0f9c6102002b0b20000000000000008400000008000000fe8000000000000000000000000000bb18000000000000008400000007000000e000000100000000"], 0x88, 0x24000010}], 0x1, 0x40) 344.351104ms ago: executing program 4 (id=3368): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x32) writev(r1, &(0x7f0000000380)=[{0x0, 0x2}, {&(0x7f0000000080)="7e8340f264fa1a", 0x7}], 0x2) 276.821125ms ago: executing program 4 (id=3369): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x400, 0x9, 0x527, 0x2dd8, 0x16, "e23d91d0028f27d46374a1f34e2af5599f9f0d"}) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000827bd7000fcdbdf254c000000080201007063690011000200303030303a30303a31302e300000000008000300010000000f0008007365636f82646e616d650000"], 0x48}, 0x1, 0x0, 0x0, 0x4014}, 0x20044040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 238.284656ms ago: executing program 9 (id=3370): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000000c0)='./file0\x00', 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd']) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="71cb31fb95148046e6ff9c533d1d090e4d302878276ba0f02768e2d652f9567d4c7ee0b9ca39a3", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 236.468696ms ago: executing program 5 (id=3371): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4000005) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@jqfmt_vfsv1}]}, 0x1, 0x604, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaWPTiogtigEPLUjTpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtmIIHBQURryK9+A94l969iaDePAtVpKKg0pXZnW02yW4a0+xOmvl8YLPvvZnd9747eZk3M3k7AZTWaPYjjdgdcfd0EjHSsmw4GgtH8/Xu/H79TPZIolZ747ckBvKy5vpJ/rw9zwxGxHfHIh6rrKx37uq1c5PVWsP7EQfmz186MHf12v7Z85Nnp89OX5g4+OKhw+MvTRya2JA4t+fPx0+8/tQnH7zzwsz31f1JHIlT/e9NxbI4NspojMbdPMTW8r6IOJwl2nwuD5v7hLCjV+1gfSr572N/RDwRI1Gp5xpGYvbjQhsHdFWtElEDSirR/6GkmuOA5rH92o6DT3V5VNI7t482DoBWxt/XODcSg/Vjo213kpYjo8a5jZ0bUH9Wx7/X93yRPWLJeYi/7m2dvg2op5OFGxHxZLv4k3rbdtYjzeJPl7QjiYjxiPo5oKz81QdoQ9KS7sZ5mNWsN/40Io7kz1n5sXXWP7os3+v4ASinW0fzHflCllvc/2Vjj+b4J9qMf4bb7LvWo+j9X+fxX3N/P1g/R54ujsMGm6892f4t+5cX/PzR8c861d86/sseWf3NsWAv3L4RsWdZ/B9mwebjnyzcpM32z1Y5fWRtdbz2w6/HOy0rOv7azYi9bY9/FkelWWqV65MHZmar0+ONn23r+Obbt7/qVH/R8Wfbf1uH+Fu2f7r8ddlncmmNdXx98ub5TsuGV8SfJBGt8ae/DCSN482BvOTdyfn5yxMRA8mJfJWW8oOrt6W5TvM9svj3Pdu+/y/5/b+x9H2Gmn8y1+DSm+fudFq2nu3fcjH5bm2Nbegki3/q/tt/Rf/Pyj5dYx1/vnXl6U7LVot/6EECAwAAAAAAgBJK69dgk3TsXjpNx8Ya82Ufj21p9eLc/HMzF69cmIrYV/9/yP60eaV7pJFPsvxE/v+wzfzBZfnnI2JXRHxeGarnx85crE4VHTwAAAAAAAAAAAAAAAAAAABsEtvz+f/N+1T/UWnM/wdKops3mAM2N/0fyqve/1fc4gkoA/t/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/4fy0v8BAAAAYEva9cytn5KIWHh5qP7IDOTLzAiCra2/6AYAhakU3QCgMPcu/RvsQ+msafz/d/7lgN1vDlCApF1hfXBQW73z32r7SgAAAAAAAAAAAACgC/bu7jz/39xg2NpM+4PyeoD5/746AB5yvvofyssxPnC/WfyDnRaY/w8AAAAAAAAAAAAAPTNcfyTpWD4XeDjSdGws4tGI2Bn9ycxsdXo8InZExI+V/key/ETRjQYAAAAAAAAAAAAAAAAAAIAtZu7qtXOT1er05dbEPytKtnaieRfUHtT1SvzPV0XS+49lKCIK3yhdS/S1lCQRC9mW3xQNuzwXm6MZ9UTBf5gAAAAAAAAAAAAAAAAAAKCEWuYet7fnyx63CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6b/H+/91LFB0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBw+i8AAP//B/w98Q==") r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014081280090001007663616e0000000004000280080025000000000008001f0003000000791e3ce5674e10ce4811821b658d6c5a5bb4ea6c20f99db9050d5baa9ffd96e37ca6ee1e2bf17a158f10878df1462e3e8036b8fa8fdc560118258e87eb8292f30ed60fb22e5ef404b22f660f93e5a4a6018a056a"], 0x44}}, 0x0) 204.332446ms ago: executing program 8 (id=3372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, &(0x7f0000000300), 0x52) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000001030101000002000000000000000000"], 0x20}}, 0x0) acct(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x18) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x0, 0xfffffffd}}, 0x10) gettid() pipe2(&(0x7f0000000040), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 145.903037ms ago: executing program 4 (id=3373): mknod$loop(0x0, 0x100000000000600d, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) write$sndseq(r3, 0x0, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4) read$snapshot(r3, 0x0, 0xffffffbf) read$snapshot(r3, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'geneve1\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x0, 0x29}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x47, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'veth1_to_bridge\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x4, 0xa5a, 0x160a, 0x800, 0x81, 0x3, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) syz_usbip_server_init(0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='f2fs_background_gc\x00', r3, 0x0, 0x1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 145.567957ms ago: executing program 6 (id=3339): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 100.116878ms ago: executing program 9 (id=3374): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0xfef4, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 65.654298ms ago: executing program 6 (id=3375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x1, 0x0, 0x3}) fchmodat(r1, &(0x7f0000000280)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@oldalloc}, {@orlov}, {@oldalloc}, {@auto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x580, &(0x7f0000001b40)="$eJzs3U1rVFcfAPD/nUx8fx4jiLRdlICLWqwTk/TFQkG7LK1UaPd2SK5BMnEkMxGTCuqibropUiilQukH6L5L6RfopxBaQYqEdtFNyp3c0TGTmcQ4dkbn94Or59xzJ+eee+45+Z+5EyaAoTWe/VOIeDUivkkiDraUFSMvHF8/bvXhtZlsS2Jt7bM/k0jyfc3jk/z//XnmlYj49auI44X2emvLK/PlSiVdzPMT9YXLE7XllRMXF8pz6Vx6aWp6+tQ701Pvv/duz9r65rm/v//07kenvj66+t3P9w/dTuJMHMjLWtvxDG60ZsZjPL8mo3Fmw4GTPahskCT9PgF2ZCQf56ORzQEHYyQf9cDL73pErAFDKjH+YUg144Dm2r5H6+AXxoMP1xdA7e0vrr83Ensaa6N9q8kTK6NsvTvWg/qzOn75487tbIst3oe43oP6AJpu3IyIk8Vi+/yX5PPfzp1svHnc3cY6hu33D/TT3Sz+eWuz+KfwKP6JTeKf/ZuM3Z3YevwX7vegmo6y+O+DTePfR1PX2Eie+18j5htNLlyspCcj4v8RcSxGd2f5bs9zTq3eW+tU1hr/ZVtWfzMWzM/jfnH3k6+ZLdfLz9LmVg9uRrz2OP5Nom3+39OIdTf2f3Y9zm2zjiPpndc7lW3d/mhZqvQ+Al77KeKNTfv/8ROtpPvzyYnG/TDRvCva/XXryG+d6t9G+5+rrP/3dW//WNL6vLb29HX8uOeftFPZTu//XcnnjfSufN/Vcr2+OBmxK/mkff/U49c2883js/YfO9p9/tvs/t8bEV9ss/23Dt/qeOgg9P/sU/X/0yfuffzlD53q317/v91IHcv3bGf+2+4JPsu1AwAAAAAAgEFTiIgDEWOlR+lCoVRa/3zH4dhXqFRr9eMXqkuXZhvHxViMFppPug+2fB5iMv88bDM/tSE/HRGHIuLbkb2NfGmmWpntd+MBAAAAAAAAAAAAAAAAAABgQOxv/M1/Utj49/+Z30f6fXbAc+crv2F4bTn+e/FNT8BA8vsfhpfxD8PL+IfhZfzD8DL+YXh1Gf+mBnjJGeQwvIx/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KlzZ89m29rqw2szWX72yvLSfPXKidm0Nl9aWJopzVQXL5fmqtW5SlqaqS5s9fMq1erlyalYujpRT2v1idryyvmF6tKl+vmLC+W59Hw6+p+0CgAAAAAAAAAAAAAAAAAAAF4steWV+XKlki5KdEycjoE4jR0nkq16+XR+M7QVFfKCbi8v9r+BL22i2PXKP99EHyclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjg3wAAAP//IAU3iQ==") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000002c0)=""/8, 0x1000000, 0x800, 0x2, 0x1}, 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5de00987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b68090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}]}]}, 0x34}}, 0x0) 36.417489ms ago: executing program 9 (id=3376): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 0s ago: executing program 9 (id=3377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, &(0x7f0000000300), 0x52) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000001030101000002000000000000000000"], 0x20}}, 0x0) acct(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x18) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x0, 0xfffffffd}}, 0x10) gettid() pipe2(&(0x7f0000000040), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) kernel console output (not intermixed with test programs): n, defaulting to 1000 [ 202.460328][T11931] netlink: 'syz.4.2995': attribute type 4 has an invalid length. [ 202.620056][T11934] pimreg: entered allmulticast mode [ 202.620646][T11934] pimreg: left allmulticast mode [ 202.700820][T11939] lo speed is unknown, defaulting to 1000 [ 202.783263][T11951] loop5: detected capacity change from 0 to 1024 [ 202.790072][T11951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.800257][T11951] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.812112][T11954] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 202.818735][T11954] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 202.827145][T11954] vhci_hcd vhci_hcd.0: Device attached [ 202.832351][T11959] sd 0:0:1:0: device reset [ 202.834076][T11951] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 202.846559][T11951] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.2999: lblock 2 mapped to illegal pblock 2 (length 1) [ 202.861353][T11951] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.2999: lblock 0 mapped to illegal pblock 48 (length 1) [ 202.877045][T11951] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2999: Failed to acquire dquot type 0 [ 202.888581][T11951] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 202.898708][T11951] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2999: mark_inode_dirty error [ 202.910279][T11951] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 202.910310][T11951] EXT4-fs (loop5): 1 orphan inode deleted [ 202.914766][ T8896] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.947366][ T8896] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 0 [ 202.948180][T11951] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.2999: Invalid inode table block 1 in block_group 0 [ 202.948284][T11951] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 202.948358][T11951] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.2999: mark_inode_dirty error [ 203.021130][ T1038] vhci_hcd: vhci_device speed not set [ 203.081199][ T1038] usb 13-1: new full-speed USB device number 8 using vhci_hcd [ 203.173225][T11964] lo speed is unknown, defaulting to 1000 [ 203.513912][T11976] loop7: detected capacity change from 0 to 2048 [ 203.571440][T11976] loop7: p1 < > p4 [ 203.575598][T11978] FAULT_INJECTION: forcing a failure. [ 203.575598][T11978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.575630][T11978] CPU: 1 UID: 0 PID: 11978 Comm: syz.5.3008 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 203.575687][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.575702][T11978] Call Trace: [ 203.575710][T11978] [ 203.575718][T11978] __dump_stack+0x1d/0x30 [ 203.575770][T11978] dump_stack_lvl+0xe8/0x140 [ 203.575788][T11978] dump_stack+0x15/0x1b [ 203.575803][T11978] should_fail_ex+0x265/0x280 [ 203.575906][T11978] should_fail+0xb/0x20 [ 203.575955][T11978] should_fail_usercopy+0x1a/0x20 [ 203.575996][T11978] _copy_from_iter+0xcf/0xe40 [ 203.576091][T11978] ? __build_skb_around+0x1a0/0x200 [ 203.576138][T11978] ? __alloc_skb+0x223/0x320 [ 203.576220][T11978] netlink_sendmsg+0x471/0x6b0 [ 203.576248][T11978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.576269][T11978] __sock_sendmsg+0x145/0x180 [ 203.576317][T11978] ____sys_sendmsg+0x31e/0x4e0 [ 203.576366][T11978] ___sys_sendmsg+0x17b/0x1d0 [ 203.576429][T11978] __x64_sys_sendmsg+0xd4/0x160 [ 203.576502][T11978] x64_sys_call+0x2999/0x2fb0 [ 203.576530][T11978] do_syscall_64+0xd2/0x200 [ 203.576550][T11978] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.576644][T11978] ? clear_bhb_loop+0x40/0x90 [ 203.576718][T11978] ? clear_bhb_loop+0x40/0x90 [ 203.576754][T11978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.576866][T11978] RIP: 0033:0x7fba365ce929 [ 203.576887][T11978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.576914][T11978] RSP: 002b:00007fba34c37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.576941][T11978] RAX: ffffffffffffffda RBX: 00007fba367f5fa0 RCX: 00007fba365ce929 [ 203.576960][T11978] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 203.577030][T11978] RBP: 00007fba34c37090 R08: 0000000000000000 R09: 0000000000000000 [ 203.577058][T11978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.577125][T11978] R13: 0000000000000000 R14: 00007fba367f5fa0 R15: 00007ffe4e579d78 [ 203.577165][T11978] [ 203.589750][T11976] loop7: p4 size 8388608 extends beyond EOD, truncated [ 203.590094][T11955] vhci_hcd: connection reset by peer [ 203.590807][ T51] vhci_hcd: stop threads [ 203.673461][T11982] loop5: detected capacity change from 0 to 1024 [ 203.677776][ T51] vhci_hcd: release socket [ 203.677792][ T51] vhci_hcd: disconnect device [ 203.830769][T11982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.833392][T11982] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.989595][T11990] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 204.005660][T11990] ip6erspan0: entered allmulticast mode [ 204.057797][T11996] sd 0:0:1:0: device reset [ 204.084930][T11998] loop4: detected capacity change from 0 to 1024 [ 204.091788][T11998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.098813][T11998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.142021][T12003] __nla_validate_parse: 10 callbacks suppressed [ 204.142039][T12003] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3017'. [ 204.560767][T12025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3025'. [ 204.560797][T12025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3025'. [ 204.603824][T12030] sd 0:0:1:0: device reset [ 204.619330][T12032] FAULT_INJECTION: forcing a failure. [ 204.619330][T12032] name failslab, interval 1, probability 0, space 0, times 0 [ 204.619360][T12032] CPU: 0 UID: 0 PID: 12032 Comm: syz.7.3028 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 204.619390][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.619404][T12032] Call Trace: [ 204.619411][T12032] [ 204.619419][T12032] __dump_stack+0x1d/0x30 [ 204.619478][T12032] dump_stack_lvl+0xe8/0x140 [ 204.619563][T12032] dump_stack+0x15/0x1b [ 204.619582][T12032] should_fail_ex+0x265/0x280 [ 204.619674][T12032] should_failslab+0x8c/0xb0 [ 204.619694][T12032] __kmalloc_noprof+0xa5/0x3e0 [ 204.619802][T12032] ? nla_strdup+0x78/0xc0 [ 204.619824][T12032] nla_strdup+0x78/0xc0 [ 204.619844][T12032] nf_tables_newchain+0x1145/0x17d0 [ 204.619954][T12032] ? __account_obj_stock+0x211/0x350 [ 204.619982][T12032] ? should_fail_ex+0xdb/0x280 [ 204.620085][T12032] ? __nla_parse+0x40/0x60 [ 204.620111][T12032] nfnetlink_rcv+0xb99/0x1690 [ 204.620226][T12032] netlink_unicast+0x5a1/0x670 [ 204.620267][T12032] netlink_sendmsg+0x58b/0x6b0 [ 204.620292][T12032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.620326][T12032] __sock_sendmsg+0x145/0x180 [ 204.620425][T12032] ____sys_sendmsg+0x31e/0x4e0 [ 204.620518][T12032] ___sys_sendmsg+0x17b/0x1d0 [ 204.620578][T12032] __x64_sys_sendmsg+0xd4/0x160 [ 204.620627][T12032] x64_sys_call+0x2999/0x2fb0 [ 204.620669][T12032] do_syscall_64+0xd2/0x200 [ 204.620693][T12032] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 204.620780][T12032] ? clear_bhb_loop+0x40/0x90 [ 204.620799][T12032] ? clear_bhb_loop+0x40/0x90 [ 204.620818][T12032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.620854][T12032] RIP: 0033:0x7fc5e5dae929 [ 204.620875][T12032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.620899][T12032] RSP: 002b:00007fc5e4417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.620922][T12032] RAX: ffffffffffffffda RBX: 00007fc5e5fd5fa0 RCX: 00007fc5e5dae929 [ 204.620939][T12032] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 204.620961][T12032] RBP: 00007fc5e4417090 R08: 0000000000000000 R09: 0000000000000000 [ 204.620983][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.620999][T12032] R13: 0000000000000000 R14: 00007fc5e5fd5fa0 R15: 00007ffc9847f2b8 [ 204.621024][T12032] [ 204.717416][T12035] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 204.871186][T12035] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 204.871483][T12035] vhci_hcd vhci_hcd.0: Device attached [ 205.025287][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 205.025381][ T29] audit: type=1400 audit(2000000106.490:20670): avc: denied { name_connect } for pid=12043 comm="syz.4.3032" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 205.046498][ T29] audit: type=1400 audit(2000000106.510:20671): avc: denied { shutdown } for pid=12043 comm="syz.4.3032" laddr=fe80::17 lport=56870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.081529][ T1029] vhci_hcd: vhci_device speed not set [ 205.141393][ T1029] usb 15-1: new full-speed USB device number 9 using vhci_hcd [ 205.185074][T12049] loop8: detected capacity change from 0 to 1024 [ 205.185502][T12049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.199770][T12049] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.263668][ T29] audit: type=1326 audit(2000000106.730:20672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.8.3033" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ce017e929 code=0x0 [ 205.287410][ T29] audit: type=1400 audit(2000000106.730:20673): avc: denied { setopt } for pid=12054 comm="syz.4.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.416726][ T29] audit: type=1400 audit(2000000106.880:20674): avc: denied { bind } for pid=12060 comm="syz.5.3037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.437085][ T29] audit: type=1400 audit(2000000106.880:20675): avc: denied { name_bind } for pid=12060 comm="syz.5.3037" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 205.459227][ T29] audit: type=1400 audit(2000000106.880:20676): avc: denied { node_bind } for pid=12060 comm="syz.5.3037" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 205.494455][T12036] vhci_hcd: connection reset by peer [ 205.500031][ T51] vhci_hcd: stop threads [ 205.504433][ T51] vhci_hcd: release socket [ 205.504520][ T51] vhci_hcd: disconnect device [ 205.506491][ T29] audit: type=1400 audit(2000000106.970:20677): avc: denied { relabelfrom } for pid=12060 comm="syz.5.3037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 205.534303][ T29] audit: type=1400 audit(2000000106.970:20678): avc: denied { relabelto } for pid=12060 comm="syz.5.3037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 205.571671][T12066] sd 0:0:1:0: device reset [ 205.626211][ T29] audit: type=1400 audit(2000000107.090:20679): avc: denied { create } for pid=12069 comm="syz.5.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.628251][T12070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=12070 comm=syz.5.3041 [ 205.649723][T12071] : renamed from bridge_slave_0 (while UP) [ 205.659162][T12070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=12070 comm=syz.5.3041 [ 205.681916][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3041'. [ 205.703655][T12070] netlink: 396 bytes leftover after parsing attributes in process `syz.5.3041'. [ 205.839118][T12077] pimreg: entered allmulticast mode [ 205.845176][T12077] pimreg: left allmulticast mode [ 206.022134][T12089] loop7: detected capacity change from 0 to 1024 [ 206.022622][T12089] EXT4-fs: Ignoring removed nobh option [ 206.034900][T12089] EXT4-fs: inline encryption not supported [ 206.034997][T12089] ext4: Unknown parameter 'smackfsroot' [ 206.065210][T12089] FAULT_INJECTION: forcing a failure. [ 206.065210][T12089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.065244][T12089] CPU: 1 UID: 0 PID: 12089 Comm: syz.7.3049 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 206.065341][T12089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.065358][T12089] Call Trace: [ 206.065366][T12089] [ 206.065375][T12089] __dump_stack+0x1d/0x30 [ 206.065402][T12089] dump_stack_lvl+0xe8/0x140 [ 206.065485][T12089] dump_stack+0x15/0x1b [ 206.065503][T12089] should_fail_ex+0x265/0x280 [ 206.065537][T12089] should_fail+0xb/0x20 [ 206.065567][T12089] should_fail_usercopy+0x1a/0x20 [ 206.065626][T12089] _copy_to_user+0x20/0xa0 [ 206.065649][T12089] simple_read_from_buffer+0xb5/0x130 [ 206.065684][T12089] proc_fail_nth_read+0x100/0x140 [ 206.065749][T12089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.065786][T12089] vfs_read+0x1a0/0x6f0 [ 206.065873][T12089] ? __rcu_read_unlock+0x4f/0x70 [ 206.065897][T12089] ? __fget_files+0x184/0x1c0 [ 206.065916][T12089] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 206.066045][T12089] ksys_read+0xda/0x1a0 [ 206.066081][T12089] __x64_sys_read+0x40/0x50 [ 206.066165][T12089] x64_sys_call+0x2d77/0x2fb0 [ 206.066188][T12089] do_syscall_64+0xd2/0x200 [ 206.066207][T12089] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.066235][T12089] ? clear_bhb_loop+0x40/0x90 [ 206.066315][T12089] ? clear_bhb_loop+0x40/0x90 [ 206.066339][T12089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.066362][T12089] RIP: 0033:0x7fc5e5dad33c [ 206.066378][T12089] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.066397][T12089] RSP: 002b:00007fc5e4417030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.066417][T12089] RAX: ffffffffffffffda RBX: 00007fc5e5fd5fa0 RCX: 00007fc5e5dad33c [ 206.066471][T12089] RDX: 000000000000000f RSI: 00007fc5e44170a0 RDI: 0000000000000009 [ 206.066484][T12089] RBP: 00007fc5e4417090 R08: 0000000000000000 R09: 0000000000000000 [ 206.066497][T12089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.066532][T12089] R13: 0000000000000000 R14: 00007fc5e5fd5fa0 R15: 00007ffc9847f2b8 [ 206.066553][T12089] [ 206.075775][T12093] sd 0:0:1:0: device reset [ 206.131372][T12095] FAULT_INJECTION: forcing a failure. [ 206.131372][T12095] name failslab, interval 1, probability 0, space 0, times 0 [ 206.131406][T12095] CPU: 1 UID: 0 PID: 12095 Comm: syz.5.3052 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 206.131518][T12095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.131571][T12095] Call Trace: [ 206.131579][T12095] [ 206.131590][T12095] __dump_stack+0x1d/0x30 [ 206.131676][T12095] dump_stack_lvl+0xe8/0x140 [ 206.131733][T12095] dump_stack+0x15/0x1b [ 206.131755][T12095] should_fail_ex+0x265/0x280 [ 206.131816][T12095] ? sctp_add_bind_addr+0x71/0x1e0 [ 206.131884][T12095] should_failslab+0x8c/0xb0 [ 206.131909][T12095] __kmalloc_cache_noprof+0x4c/0x320 [ 206.131952][T12095] sctp_add_bind_addr+0x71/0x1e0 [ 206.131975][T12095] sctp_copy_local_addr_list+0x199/0x220 [ 206.132033][T12095] sctp_copy_one_addr+0x7f/0x280 [ 206.132055][T12095] sctp_bind_addr_copy+0x79/0x290 [ 206.132078][T12095] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 206.132125][T12095] sctp_connect_new_asoc+0x1c3/0x3a0 [ 206.132157][T12095] sctp_sendmsg+0xf10/0x18d0 [ 206.132185][T12095] ? selinux_socket_sendmsg+0x141/0x1b0 [ 206.132219][T12095] ? __pfx_sctp_sendmsg+0x10/0x10 [ 206.132259][T12095] inet_sendmsg+0xc2/0xd0 [ 206.132416][T12095] __sock_sendmsg+0x102/0x180 [ 206.132440][T12095] __sys_sendto+0x268/0x330 [ 206.132479][T12095] __x64_sys_sendto+0x76/0x90 [ 206.132508][T12095] x64_sys_call+0x2eb6/0x2fb0 [ 206.132629][T12095] do_syscall_64+0xd2/0x200 [ 206.132647][T12095] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.132716][T12095] ? clear_bhb_loop+0x40/0x90 [ 206.132754][T12095] ? clear_bhb_loop+0x40/0x90 [ 206.132776][T12095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.132819][T12095] RIP: 0033:0x7fba365ce929 [ 206.132833][T12095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.132852][T12095] RSP: 002b:00007fba34c37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 206.132870][T12095] RAX: ffffffffffffffda RBX: 00007fba367f5fa0 RCX: 00007fba365ce929 [ 206.132882][T12095] RDX: 000000000001a000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 206.132894][T12095] RBP: 00007fba34c37090 R08: 0000200000000200 R09: 000000000000001c [ 206.132935][T12095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.132947][T12095] R13: 0000000000000000 R14: 00007fba367f5fa0 R15: 00007ffe4e579d78 [ 206.132965][T12095] [ 206.234673][T12103] loop5: detected capacity change from 0 to 128 [ 206.466625][T12106] loop4: detected capacity change from 0 to 1024 [ 206.585467][T12106] EXT4-fs: Ignoring removed nobh option [ 206.585493][T12106] EXT4-fs: inline encryption not supported [ 206.585637][T12106] ext4: Unknown parameter 'smackfsroot' [ 206.765224][T12115] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 206.771868][T12115] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 206.779579][T12115] vhci_hcd vhci_hcd.0: Device attached [ 206.794727][T12119] loop6: detected capacity change from 0 to 1024 [ 206.801931][T12119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.808863][T12119] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.971114][ T3413] vhci_hcd: vhci_device speed not set [ 207.031123][ T3413] usb 9-1: new full-speed USB device number 6 using vhci_hcd [ 207.060749][T12132] sd 0:0:1:0: device reset [ 207.102325][T12134] loop5: detected capacity change from 0 to 2048 [ 207.161096][T12139] loop5: detected capacity change from 0 to 1024 [ 207.168817][T12139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.178675][T12139] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.536338][T12116] vhci_hcd: connection reset by peer [ 207.541919][ T8886] vhci_hcd: stop threads [ 207.541929][ T8886] vhci_hcd: release socket [ 207.541950][ T8886] vhci_hcd: disconnect device [ 207.728610][T12161] lo speed is unknown, defaulting to 1000 [ 207.737537][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3073'. [ 207.737566][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3073'. [ 207.785070][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3073'. [ 207.808293][T12169] sd 0:0:1:0: device reset [ 207.958506][T12172] sd 0:0:1:0: device reset [ 207.970883][T12173] pimreg: entered allmulticast mode [ 207.975385][T12173] pimreg: left allmulticast mode [ 208.121493][ T1038] usb 13-1: enqueue for inactive port 0 [ 208.121560][ T1038] usb 13-1: enqueue for inactive port 0 [ 208.129330][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3078'. [ 208.191934][ T1038] vhci_hcd: vhci_device speed not set [ 208.195416][T12186] bridge2: left allmulticast mode [ 208.215977][T12185] loop4: detected capacity change from 0 to 1024 [ 208.216357][T12185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.232831][T12185] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.469960][T12199] netlink: 596 bytes leftover after parsing attributes in process `'. [ 208.622434][T12211] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 208.629127][T12211] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 208.636822][T12211] vhci_hcd vhci_hcd.0: Device attached [ 209.043080][T12216] loop6: detected capacity change from 0 to 1024 [ 209.050053][T12216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.057574][T12216] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.085831][T12218] pimreg: entered allmulticast mode [ 209.094120][T12218] pimreg: left allmulticast mode [ 209.153527][T12222] loop4: detected capacity change from 0 to 1024 [ 209.160500][T12222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.167512][T12222] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.303804][T12230] lo speed is unknown, defaulting to 1000 [ 209.316831][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3095'. [ 209.325834][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3095'. [ 209.358553][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3095'. [ 209.402266][T12212] vhci_hcd: connection closed [ 209.402370][ T9048] vhci_hcd: stop threads [ 209.411621][ T9048] vhci_hcd: release socket [ 209.416126][ T9048] vhci_hcd: disconnect device [ 209.635258][T12255] sd 0:0:1:0: device reset [ 209.647301][T12257] lo speed is unknown, defaulting to 1000 [ 209.653225][T12257] lo speed is unknown, defaulting to 1000 [ 209.659148][T12257] lo speed is unknown, defaulting to 1000 [ 209.668424][T12257] infiniband qyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 209.680598][T12257] lo speed is unknown, defaulting to 1000 [ 209.686844][T12257] lo speed is unknown, defaulting to 1000 [ 209.693518][T12257] lo speed is unknown, defaulting to 1000 [ 209.699716][T12257] lo speed is unknown, defaulting to 1000 [ 209.705978][T12257] lo speed is unknown, defaulting to 1000 [ 209.712855][T12260] loop5: detected capacity change from 0 to 128 [ 209.722485][T12190] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 171: padding at end of block bitmap is not set [ 209.737185][T12190] EXT4-fs (loop4): Remounting filesystem read-only [ 209.795047][T12263] lo speed is unknown, defaulting to 1000 [ 209.801168][T12263] lo speed is unknown, defaulting to 1000 [ 209.808402][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3108'. [ 209.818552][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3108'. [ 209.862396][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3108'. [ 209.977027][T12288] sd 0:0:1:0: device reset [ 209.997610][T12290] tipc: Started in network mode [ 210.002559][T12290] tipc: Node identity ac14140f, cluster identity 4711 [ 210.017215][T12290] tipc: New replicast peer: 0.0.255.255 [ 210.023697][T12290] tipc: Enabled bearer , priority 10 [ 210.041009][T12292] loop8: detected capacity change from 0 to 1024 [ 210.053646][T12292] EXT4-fs (loop8): bad geometry: first data block 0 is beyond end of filesystem (0) [ 210.083026][T12296] FAULT_INJECTION: forcing a failure. [ 210.083026][T12296] name failslab, interval 1, probability 0, space 0, times 0 [ 210.095935][T12296] CPU: 1 UID: 0 PID: 12296 Comm: syz.7.3121 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 210.095973][T12296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.096007][T12296] Call Trace: [ 210.096016][T12296] [ 210.096026][T12296] __dump_stack+0x1d/0x30 [ 210.096053][T12296] dump_stack_lvl+0xe8/0x140 [ 210.096079][T12296] dump_stack+0x15/0x1b [ 210.096100][T12296] should_fail_ex+0x265/0x280 [ 210.096175][T12296] ? alloc_netdev_mqs+0x829/0xab0 [ 210.096271][T12296] should_failslab+0x8c/0xb0 [ 210.096298][T12296] __kmalloc_cache_noprof+0x4c/0x320 [ 210.096334][T12296] alloc_netdev_mqs+0x829/0xab0 [ 210.096410][T12296] rtnl_create_link+0x239/0x710 [ 210.096454][T12296] rtnl_newlink_create+0x14c/0x620 [ 210.096483][T12296] ? security_capable+0x83/0x90 [ 210.096546][T12296] ? netlink_ns_capable+0x86/0xa0 [ 210.096577][T12296] rtnl_newlink+0xf29/0x12d0 [ 210.096679][T12296] ? rb_next+0x5c/0x80 [ 210.096713][T12296] ? visit_groups_merge+0xf7e/0xfd0 [ 210.096803][T12296] ? __rcu_read_unlock+0x4f/0x70 [ 210.096829][T12296] ? avc_has_perm_noaudit+0x1b1/0x200 [ 210.096862][T12296] ? selinux_capable+0x1f9/0x270 [ 210.096920][T12296] ? security_capable+0x83/0x90 [ 210.096951][T12296] ? ns_capable+0x7d/0xb0 [ 210.096972][T12296] ? __pfx_rtnl_newlink+0x10/0x10 [ 210.096998][T12296] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 210.097120][T12296] ? avc_has_perm_noaudit+0x1b1/0x200 [ 210.097154][T12296] netlink_rcv_skb+0x120/0x220 [ 210.097189][T12296] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.097227][T12296] rtnetlink_rcv+0x1c/0x30 [ 210.097246][T12296] netlink_unicast+0x5a1/0x670 [ 210.097359][T12296] netlink_sendmsg+0x58b/0x6b0 [ 210.097398][T12296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.097426][T12296] __sock_sendmsg+0x145/0x180 [ 210.097481][T12296] ____sys_sendmsg+0x31e/0x4e0 [ 210.097589][T12296] ___sys_sendmsg+0x17b/0x1d0 [ 210.097643][T12296] __x64_sys_sendmsg+0xd4/0x160 [ 210.097711][T12296] x64_sys_call+0x2999/0x2fb0 [ 210.097734][T12296] do_syscall_64+0xd2/0x200 [ 210.097752][T12296] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.097857][T12296] ? clear_bhb_loop+0x40/0x90 [ 210.097901][T12296] ? clear_bhb_loop+0x40/0x90 [ 210.097927][T12296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.098025][T12296] RIP: 0033:0x7fc5e5dae929 [ 210.098042][T12296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.098063][T12296] RSP: 002b:00007fc5e4417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.098084][T12296] RAX: ffffffffffffffda RBX: 00007fc5e5fd5fa0 RCX: 00007fc5e5dae929 [ 210.098145][T12296] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 210.098157][T12296] RBP: 00007fc5e4417090 R08: 0000000000000000 R09: 0000000000000000 [ 210.098170][T12296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.098235][T12296] R13: 0000000000000000 R14: 00007fc5e5fd5fa0 R15: 00007ffc9847f2b8 [ 210.098301][T12296] [ 210.398142][ T1029] usb 15-1: enqueue for inactive port 0 [ 210.403789][ T1029] usb 15-1: enqueue for inactive port 0 [ 210.409854][T12298] loop8: detected capacity change from 0 to 1024 [ 210.419445][T12298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.427798][T12298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 210.481181][ T1029] vhci_hcd: vhci_device speed not set [ 210.499758][T12301] lo speed is unknown, defaulting to 1000 [ 210.510309][T12301] lo speed is unknown, defaulting to 1000 [ 210.538460][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 210.538477][ T29] audit: type=1326 audit(2000000112.000:20812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.8.3123" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ce017e929 code=0x0 [ 210.573880][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3122'. [ 210.582873][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3122'. [ 210.632410][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'. [ 210.715976][T12322] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 210.722687][T12322] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 210.730345][T12322] vhci_hcd vhci_hcd.0: Device attached [ 210.776750][T12329] sd 0:0:1:0: device reset [ 210.798619][T12331] loop4: detected capacity change from 0 to 1024 [ 210.805582][T12331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.814603][T12331] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 210.875388][ T29] audit: type=1400 audit(2000000112.340:20813): avc: denied { bind } for pid=12337 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.903395][ T29] audit: type=1400 audit(2000000112.360:20814): avc: denied { connect } for pid=12337 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.923303][ T29] audit: type=1400 audit(2000000112.360:20815): avc: denied { write } for pid=12337 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.942881][ T29] audit: type=1400 audit(2000000112.360:20816): avc: denied { ioctl } for pid=12337 comm="syz.6.3135" path="socket:[35080]" dev="sockfs" ino=35080 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.967783][ T29] audit: type=1400 audit(2000000112.360:20817): avc: denied { read write } for pid=12337 comm="syz.6.3135" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.991464][ T29] audit: type=1400 audit(2000000112.360:20818): avc: denied { open } for pid=12337 comm="syz.6.3135" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.015287][ T29] audit: type=1400 audit(2000000112.370:20819): avc: denied { ioctl } for pid=12337 comm="syz.6.3135" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.040986][ T1029] vhci_hcd: vhci_device speed not set [ 211.046585][ T29] audit: type=1326 audit(2000000112.430:20820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.4.3132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1f465e929 code=0x0 [ 211.074310][ T4471] EXT4-fs unmount: 24 callbacks suppressed [ 211.074325][ T4471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.091131][ T36] tipc: Node number set to 2886997007 [ 211.120438][T12347] loop8: detected capacity change from 0 to 1024 [ 211.127365][T12347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.135441][T12347] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 211.150512][T12347] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.223262][ T29] audit: type=1326 audit(2000000112.690:20821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.8.3146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ce017e929 code=0x0 [ 211.465912][T12323] vhci_hcd: connection reset by peer [ 211.475617][ T51] vhci_hcd: stop threads [ 211.479904][ T51] vhci_hcd: release socket [ 211.484490][ T51] vhci_hcd: disconnect device [ 211.578191][T12360] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3140'. [ 211.639078][T12362] lo speed is unknown, defaulting to 1000 [ 211.645230][T12362] lo speed is unknown, defaulting to 1000 [ 211.717081][T10686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.726814][T12370] sd 0:0:1:0: device reset [ 211.961812][ T4471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.994455][T12395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.016065][T12395] netlink: 'syz.7.3154': attribute type 13 has an invalid length. [ 212.065735][T12393] lo speed is unknown, defaulting to 1000 [ 212.072056][T12393] lo speed is unknown, defaulting to 1000 [ 212.109156][T12406] sd 0:0:1:0: device reset [ 212.112312][T12404] loop7: detected capacity change from 0 to 1024 [ 212.120614][T12404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.129797][ T3413] usb 9-1: enqueue for inactive port 0 [ 212.142353][ T3413] usb 9-1: enqueue for inactive port 0 [ 212.149104][T12404] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 212.167406][T12412] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 212.173918][T12404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.222123][ T3413] vhci_hcd: vhci_device speed not set [ 212.266242][T12425] loop8: detected capacity change from 0 to 1024 [ 212.272998][T12425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.279850][T12425] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 212.291312][T12425] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.314374][T12429] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 212.320992][T12429] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 212.328669][T12429] vhci_hcd vhci_hcd.0: Device attached [ 212.511181][ T36] vhci_hcd: vhci_device speed not set [ 212.571122][ T36] usb 13-1: new full-speed USB device number 9 using vhci_hcd [ 213.012844][ T4346] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.081462][T12190] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 171: padding at end of block bitmap is not set [ 213.098735][T12430] vhci_hcd: connection reset by peer [ 213.104517][ T8886] vhci_hcd: stop threads [ 213.108824][ T8886] vhci_hcd: release socket [ 213.113286][ T8886] vhci_hcd: disconnect device [ 213.117992][T12190] EXT4-fs (loop8): Remounting filesystem read-only [ 213.129821][ T4471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.212735][T12456] netlink: 'syz.8.3173': attribute type 21 has an invalid length. [ 213.249451][T12458] loop8: detected capacity change from 0 to 512 [ 213.258794][T12458] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 213.268072][T12458] netlink: 'syz.8.3174': attribute type 10 has an invalid length. [ 213.280329][T12458] dummy0: entered promiscuous mode [ 213.287050][T12458] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 213.360455][T12460] FAULT_INJECTION: forcing a failure. [ 213.360455][T12460] name failslab, interval 1, probability 0, space 0, times 0 [ 213.373874][T12460] CPU: 1 UID: 0 PID: 12460 Comm: +}[@ Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 213.373910][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.373946][T12460] Call Trace: [ 213.373954][T12460] [ 213.373963][T12460] __dump_stack+0x1d/0x30 [ 213.373990][T12460] dump_stack_lvl+0xe8/0x140 [ 213.374009][T12460] dump_stack+0x15/0x1b [ 213.374025][T12460] should_fail_ex+0x265/0x280 [ 213.374143][T12460] should_failslab+0x8c/0xb0 [ 213.374168][T12460] __kmalloc_noprof+0xa5/0x3e0 [ 213.374278][T12460] ? tcf_idr_create+0x41/0x4a0 [ 213.374302][T12460] tcf_idr_create+0x41/0x4a0 [ 213.374326][T12460] tcf_idr_create_from_flags+0x60/0x80 [ 213.374419][T12460] tcf_pedit_init+0x27b/0x970 [ 213.374496][T12460] ? should_fail_ex+0xdb/0x280 [ 213.374531][T12460] tcf_action_init_1+0x367/0x4a0 [ 213.374613][T12460] tcf_action_init+0x267/0x6d0 [ 213.374645][T12460] ? __pfx_cmp_ex_search+0x10/0x10 [ 213.374671][T12460] ? search_extable+0x53/0x80 [ 213.374725][T12460] tc_ctl_action+0x291/0x830 [ 213.374844][T12460] ? __pfx_tc_ctl_action+0x10/0x10 [ 213.374874][T12460] rtnetlink_rcv_msg+0x657/0x6d0 [ 213.374973][T12460] netlink_rcv_skb+0x120/0x220 [ 213.375091][T12460] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 213.375193][T12460] rtnetlink_rcv+0x1c/0x30 [ 213.375212][T12460] netlink_unicast+0x5a1/0x670 [ 213.375253][T12460] netlink_sendmsg+0x58b/0x6b0 [ 213.375357][T12460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.375381][T12460] __sock_sendmsg+0x145/0x180 [ 213.375407][T12460] ____sys_sendmsg+0x31e/0x4e0 [ 213.375454][T12460] ___sys_sendmsg+0x17b/0x1d0 [ 213.375583][T12460] __x64_sys_sendmsg+0xd4/0x160 [ 213.375723][T12460] x64_sys_call+0x2999/0x2fb0 [ 213.375750][T12460] do_syscall_64+0xd2/0x200 [ 213.375767][T12460] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.375832][T12460] ? clear_bhb_loop+0x40/0x90 [ 213.375865][T12460] ? clear_bhb_loop+0x40/0x90 [ 213.375912][T12460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.375987][T12460] RIP: 0033:0x7f4ce017e929 [ 213.376008][T12460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.376113][T12460] RSP: 002b:00007f4cde7e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.376139][T12460] RAX: ffffffffffffffda RBX: 00007f4ce03a5fa0 RCX: 00007f4ce017e929 [ 213.376154][T12460] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 213.376167][T12460] RBP: 00007f4cde7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.376179][T12460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.376238][T12460] R13: 0000000000000000 R14: 00007f4ce03a5fa0 R15: 00007fff1f054c08 [ 213.376265][T12460] [ 213.718774][T12464] loop4: detected capacity change from 0 to 1024 [ 213.753400][T12464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.753443][T12477] loop6: detected capacity change from 0 to 1024 [ 213.754088][T12477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.763187][T12464] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.777571][T12477] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.797947][T12464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.832883][T12477] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 213.835341][T12469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.851830][T12478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.956475][T12477] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.3176: lblock 2 mapped to illegal pblock 2 (length 1) [ 214.025890][T12477] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.3176: lblock 0 mapped to illegal pblock 48 (length 1) [ 214.058518][T12534] loop5: detected capacity change from 0 to 1024 [ 214.066407][T12477] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3176: Failed to acquire dquot type 0 [ 214.067005][T12534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.111377][T12477] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 214.116044][T12534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 214.131636][T12477] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3176: mark_inode_dirty error [ 214.145213][T12534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.163888][T12477] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 214.175930][T12477] EXT4-fs (loop6): 1 orphan inode deleted [ 214.183182][T12477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.195381][ T9036] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 214.216085][ T9036] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 0 [ 214.238355][T12477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.250530][T12477] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz.6.3176: Invalid inode table block 1 in block_group 0 [ 214.268696][T12477] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 214.282311][T12477] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz.6.3176: mark_inode_dirty error [ 214.356954][ T9036] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.378353][T12477] __nla_validate_parse: 12 callbacks suppressed [ 214.378372][T12477] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3176'. [ 214.429731][T12543] lo speed is unknown, defaulting to 1000 [ 214.439083][ T9036] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.450771][T12543] lo speed is unknown, defaulting to 1000 [ 214.486035][ T9036] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.521217][T12480] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 171: padding at end of block bitmap is not set [ 214.542978][T12480] EXT4-fs (loop4): Remounting filesystem read-only [ 214.543775][ T9036] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.572587][T12543] chnl_net:caif_netlink_parms(): no params data found [ 214.627450][T12543] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.634659][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.665197][T10686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.667094][T12543] bridge_slave_0: entered allmulticast mode [ 214.684347][T12543] bridge_slave_0: entered promiscuous mode [ 214.715507][T12568] loop4: detected capacity change from 0 to 128 [ 214.725097][T12568] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61417200 (sector = 1) [ 214.751853][T12569] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 214.758490][T12569] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 214.766225][T12569] vhci_hcd vhci_hcd.0: Device attached [ 214.853632][ T9036] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 214.863255][ T9036] dummy0: left promiscuous mode [ 214.868955][ T9036] $Hÿ (unregistering): Released all slaves [ 214.878560][ T9036] bond0 (unregistering): Released all slaves [ 214.889532][T12543] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.896746][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.906495][T12543] bridge_slave_1: entered allmulticast mode [ 214.913222][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.922999][T12543] bridge_slave_1: entered promiscuous mode [ 214.938789][T12572] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 214.962699][T12543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.983474][T12543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.995338][ T9036] hsr_slave_1: left promiscuous mode [ 215.002644][ T9036] veth1_macvtap: left promiscuous mode [ 215.097376][T12543] team0: Port device team_slave_0 added [ 215.104184][T12543] team0: Port device team_slave_1 added [ 215.123974][T12543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.130942][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.157196][T12543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.170626][T12543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.177660][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.203638][T12543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.230670][T12543] hsr_slave_0: entered promiscuous mode [ 215.236943][T12543] hsr_slave_1: entered promiscuous mode [ 215.243023][T12543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.250588][T12543] Cannot create hsr debugfs directory [ 215.488147][T12543] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 215.498416][T12543] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 215.507289][T12543] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 215.517634][T12543] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 215.526253][T12570] vhci_hcd: connection closed [ 215.526444][ T9036] vhci_hcd: stop threads [ 215.535410][ T9036] vhci_hcd: release socket [ 215.539848][ T9036] vhci_hcd: disconnect device [ 215.576761][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.602788][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.618381][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.625470][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.639693][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.646833][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.710251][T12588] loop4: detected capacity change from 0 to 1024 [ 215.743255][T12588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.773165][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 215.773181][ T29] audit: type=1400 audit(2000000117.240:20843): avc: denied { add_name } for pid=12587 comm="syz.4.3191" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.811194][ T29] audit: type=1400 audit(2000000117.240:20844): avc: denied { create } for pid=12587 comm="syz.4.3191" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 215.832379][ T29] audit: type=1400 audit(2000000117.240:20845): avc: denied { read write } for pid=12587 comm="syz.4.3191" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.855237][ T29] audit: type=1400 audit(2000000117.240:20846): avc: denied { open } for pid=12587 comm="syz.4.3191" path="/97/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.879392][ T29] audit: type=1400 audit(2000000117.300:20847): avc: denied { ioctl } for pid=12587 comm="syz.4.3191" path="socket:[35810]" dev="sockfs" ino=35810 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.910360][T12599] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3191: Allocating blocks 497-513 which overlap fs metadata [ 215.922308][T12543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.101800][T12543] veth0_vlan: entered promiscuous mode [ 216.110273][T12543] veth1_vlan: entered promiscuous mode [ 216.131654][T12543] veth0_macvtap: entered promiscuous mode [ 216.148440][T12543] veth1_macvtap: entered promiscuous mode [ 216.184374][T12543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.197235][T12543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.209267][T12543] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.218071][T12543] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.226929][T12543] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.236489][T12543] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.245846][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3193'. [ 216.291253][ T1029] usb 15-1: enqueue for inactive port 0 [ 216.297039][ T1029] usb 15-1: enqueue for inactive port 0 [ 216.313586][T12621] pimreg: entered allmulticast mode [ 216.331343][ T29] audit: type=1400 audit(2000000117.790:20848): avc: denied { mounton } for pid=12543 comm="syz-executor" path="/root/syzkaller.gfBhx4/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 216.358047][T12621] pimreg: left allmulticast mode [ 216.373174][ T29] audit: type=1400 audit(2000000117.800:20849): avc: denied { mount } for pid=12543 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 216.381148][ T1029] vhci_hcd: vhci_device speed not set [ 216.396332][ T29] audit: type=1400 audit(2000000117.800:20850): avc: denied { mount } for pid=12543 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 216.423624][ T29] audit: type=1400 audit(2000000117.800:20851): avc: denied { mounton } for pid=12543 comm="syz-executor" path="/root/syzkaller.gfBhx4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 216.450532][ T29] audit: type=1400 audit(2000000117.800:20852): avc: denied { mounton } for pid=12543 comm="syz-executor" path="/root/syzkaller.gfBhx4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 216.534363][T12587] EXT4-fs (loop4): pa ffff8881072ba7e0: logic 128, phys. 273, len 15 [ 216.542630][T12587] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 216.583055][T10686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.757406][T12631] loop4: detected capacity change from 0 to 1024 [ 216.769442][T12631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.777821][T12631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 216.788978][T12631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.930172][T12641] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3196'. [ 216.973240][T12644] sd 0:0:1:0: device reset [ 217.439380][T12657] loop6: detected capacity change from 0 to 1024 [ 217.446268][T12657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.455528][T12657] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.466202][T12657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.512949][T12661] loop8: detected capacity change from 0 to 1024 [ 217.519834][T12661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.529140][T12661] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 217.544161][T12661] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 217.553571][T12661] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.3203: lblock 2 mapped to illegal pblock 2 (length 1) [ 217.571022][T12661] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.3203: lblock 0 mapped to illegal pblock 48 (length 1) [ 217.587456][T12661] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3203: Failed to acquire dquot type 0 [ 217.606402][T12661] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 217.616674][T12661] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.3203: mark_inode_dirty error [ 217.629175][T12661] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 217.640764][T12661] EXT4-fs (loop8): 1 orphan inode deleted [ 217.665585][ T8973] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1) [ 217.689269][ T36] usb 13-1: enqueue for inactive port 0 [ 217.696531][T12667] FAULT_INJECTION: forcing a failure. [ 217.696531][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 217.709914][T12667] CPU: 1 UID: 0 PID: 12667 Comm: syz.5.3205 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 217.709951][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.709966][T12667] Call Trace: [ 217.709974][T12667] [ 217.709984][T12667] __dump_stack+0x1d/0x30 [ 217.710030][T12667] dump_stack_lvl+0xe8/0x140 [ 217.710049][T12667] dump_stack+0x15/0x1b [ 217.710065][T12667] should_fail_ex+0x265/0x280 [ 217.710100][T12667] ? audit_log_d_path+0x8d/0x150 [ 217.710155][T12667] should_failslab+0x8c/0xb0 [ 217.710186][T12667] __kmalloc_cache_noprof+0x4c/0x320 [ 217.710216][T12667] audit_log_d_path+0x8d/0x150 [ 217.710260][T12667] audit_log_d_path_exe+0x42/0x70 [ 217.710375][T12667] audit_log_task+0x1e9/0x250 [ 217.710409][T12667] audit_seccomp+0x61/0x100 [ 217.710534][T12667] ? __seccomp_filter+0x68c/0x10d0 [ 217.710562][T12667] __seccomp_filter+0x69d/0x10d0 [ 217.710660][T12667] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 217.710704][T12667] ? vfs_write+0x75e/0x8e0 [ 217.710744][T12667] ? __rcu_read_unlock+0x4f/0x70 [ 217.710812][T12667] ? __fget_files+0x184/0x1c0 [ 217.710886][T12667] __secure_computing+0x82/0x150 [ 217.710915][T12667] syscall_trace_enter+0xcf/0x1e0 [ 217.710967][T12667] do_syscall_64+0xac/0x200 [ 217.710990][T12667] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 217.711034][T12667] ? clear_bhb_loop+0x40/0x90 [ 217.711064][T12667] ? clear_bhb_loop+0x40/0x90 [ 217.711090][T12667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.711161][T12667] RIP: 0033:0x7fba365ce929 [ 217.711175][T12667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.711192][T12667] RSP: 002b:00007fba34c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 217.711210][T12667] RAX: ffffffffffffffda RBX: 00007fba367f5fa0 RCX: 00007fba365ce929 [ 217.711221][T12667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 217.711234][T12667] RBP: 00007fba34c37090 R08: 0000000000000000 R09: 0000000000000000 [ 217.711248][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.711333][T12667] R13: 0000000000000000 R14: 00007fba367f5fa0 R15: 00007ffe4e579d78 [ 217.711355][T12667] [ 217.771832][T12661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.778663][ T36] usb 13-1: enqueue for inactive port 0 [ 217.782579][ T8973] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 0 [ 217.851096][ T36] vhci_hcd: vhci_device speed not set [ 217.857561][T12661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.956741][T10686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.002611][T12661] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz.8.3203: Invalid inode table block 1 in block_group 0 [ 218.021266][T12661] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 218.030873][T12671] loop5: detected capacity change from 0 to 1024 [ 218.037779][T12671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.046606][T12671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 218.057979][T12661] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz.8.3203: mark_inode_dirty error [ 218.083080][T12671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.129430][T12661] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3203'. [ 218.354647][ T4283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.383200][T12688] loop6: detected capacity change from 0 to 128 [ 218.875246][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.414174][T12700] loop6: detected capacity change from 0 to 128 [ 219.457528][T12700] FAULT_INJECTION: forcing a failure. [ 219.457528][T12700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.470667][T12700] CPU: 0 UID: 0 PID: 12700 Comm: syz.6.3215 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 219.470737][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.470749][T12700] Call Trace: [ 219.470757][T12700] [ 219.470766][T12700] __dump_stack+0x1d/0x30 [ 219.470791][T12700] dump_stack_lvl+0xe8/0x140 [ 219.470815][T12700] dump_stack+0x15/0x1b [ 219.470901][T12700] should_fail_ex+0x265/0x280 [ 219.470952][T12700] should_fail+0xb/0x20 [ 219.470995][T12700] should_fail_usercopy+0x1a/0x20 [ 219.471068][T12700] strncpy_from_user+0x25/0x230 [ 219.471116][T12700] ? kmem_cache_alloc_noprof+0x186/0x310 [ 219.471146][T12700] ? getname_flags+0x80/0x3b0 [ 219.471174][T12700] getname_flags+0xae/0x3b0 [ 219.471276][T12700] __x64_sys_renameat2+0x5f/0x90 [ 219.471301][T12700] x64_sys_call+0x2bf6/0x2fb0 [ 219.471327][T12700] do_syscall_64+0xd2/0x200 [ 219.471379][T12700] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 219.471464][T12700] ? clear_bhb_loop+0x40/0x90 [ 219.471485][T12700] ? clear_bhb_loop+0x40/0x90 [ 219.471512][T12700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.471537][T12700] RIP: 0033:0x7f6da1f0e929 [ 219.471554][T12700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.471576][T12700] RSP: 002b:00007f6da0577038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 219.471625][T12700] RAX: ffffffffffffffda RBX: 00007f6da2135fa0 RCX: 00007f6da1f0e929 [ 219.471640][T12700] RDX: 0000000000000006 RSI: 0000200000000380 RDI: 0000000000000006 [ 219.471655][T12700] RBP: 00007f6da0577090 R08: 0000000000000000 R09: 0000000000000000 [ 219.471676][T12700] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 219.471691][T12700] R13: 0000000000000000 R14: 00007f6da2135fa0 R15: 00007ffda0573188 [ 219.471729][T12700] [ 219.767702][T12702] loop5: detected capacity change from 0 to 512 [ 219.780344][T12706] loop8: detected capacity change from 0 to 128 [ 219.788294][T12706] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61417200 (sector = 1) [ 219.852966][T12702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.891986][T12706] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 219.902822][T12702] ext4 filesystem being mounted at /593/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.925266][T12702] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.3216: iget: bad i_size value: 2533274857506816 [ 219.938290][T12702] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.3216: iget: bad i_size value: 2533274857506816 [ 220.005651][T12715] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.3216: iget: bad i_size value: 2533274857506816 [ 220.044418][T12702] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.3216: iget: bad i_size value: 2533274857506816 [ 220.080667][T12702] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.3216: iget: bad i_size value: 2533274857506816 [ 220.098522][T12702] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.3216: iget: bad i_size value: 2533274857506816 [ 220.128297][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.169521][T12722] loop4: detected capacity change from 0 to 1024 [ 220.185713][T12724] loop5: detected capacity change from 0 to 1024 [ 220.193809][T12724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.201906][T12722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.210509][T12722] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 220.215117][T12724] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 220.243834][T12722] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 220.253251][T12722] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.3223: lblock 2 mapped to illegal pblock 2 (length 1) [ 220.258124][T12724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.271492][T12722] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.3223: lblock 0 mapped to illegal pblock 48 (length 1) [ 220.299330][T12722] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3223: Failed to acquire dquot type 0 [ 220.310891][T12722] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 220.322339][T12722] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3223: mark_inode_dirty error [ 220.334167][T12722] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 220.345860][T12722] EXT4-fs (loop4): 1 orphan inode deleted [ 220.353462][T12722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.369510][ T8973] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1) [ 220.385739][ T8973] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 0 [ 220.398732][T12722] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.408582][T12722] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.3223: Invalid inode table block 1 in block_group 0 [ 220.422160][T12722] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 220.432932][T12722] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.3223: mark_inode_dirty error [ 220.459650][T12722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3223'. [ 220.703926][T12734] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 220.710592][T12734] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 220.718319][T12734] vhci_hcd vhci_hcd.0: Device attached [ 220.921426][ T3572] vhci_hcd: vhci_device speed not set [ 220.943559][T12740] loop6: detected capacity change from 0 to 1024 [ 220.963394][T12740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.982768][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 220.982785][ T29] audit: type=1326 audit(2000000122.450:20875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.4.3229" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1f465e929 code=0x0 [ 221.021154][ T3572] usb 17-1: new low-speed USB device number 3 using vhci_hcd [ 221.032559][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.086891][ T29] audit: type=1326 audit(2000000122.550:20876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba365ce929 code=0x7ffc0000 [ 221.131845][ T29] audit: type=1326 audit(2000000122.580:20877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba365ce929 code=0x7ffc0000 [ 221.156403][ T29] audit: type=1326 audit(2000000122.580:20878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba365ce929 code=0x7ffc0000 [ 221.180130][ T29] audit: type=1326 audit(2000000122.580:20879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba365ce929 code=0x7ffc0000 [ 221.204486][ T29] audit: type=1326 audit(2000000122.580:20880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba365ce929 code=0x7ffc0000 [ 221.211258][T12747] 9pnet: Could not find request transport: fd [ 221.228132][ T29] audit: type=1326 audit(2000000122.580:20881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba365ce929 code=0x7ffc0000 [ 221.258843][ T29] audit: type=1400 audit(2000000122.580:20882): avc: denied { ioctl } for pid=12748 comm="syz.5.3230" path="socket:[36479]" dev="sockfs" ino=36479 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 221.316417][ T29] audit: type=1326 audit(2000000122.760:20883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba365ce929 code=0x7ffc0000 [ 221.340126][ T29] audit: type=1326 audit(2000000122.760:20884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.5.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba365ce929 code=0x7ffc0000 [ 221.479579][T12735] vhci_hcd: connection reset by peer [ 221.485706][ T9081] vhci_hcd: stop threads [ 221.490023][ T9081] vhci_hcd: release socket [ 221.494589][ T9081] vhci_hcd: disconnect device [ 221.777480][ T4283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.409908][T12786] loop8: detected capacity change from 0 to 1024 [ 222.437477][T12786] EXT4-fs: Ignoring removed nobh option [ 222.443806][T12786] EXT4-fs: inline encryption not supported [ 222.451167][T12786] ext4: Unknown parameter 'smackfsroot' [ 222.606516][T12789] lo speed is unknown, defaulting to 1000 [ 222.615591][T12789] lo speed is unknown, defaulting to 1000 [ 222.667085][ T8882] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.703403][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3242'. [ 222.723734][ T8882] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.739453][T12789] chnl_net:caif_netlink_parms(): no params data found [ 222.822755][ T8882] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.866057][T12789] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.873269][T12789] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.896062][T12817] IPv4: Oversized IP packet from 127.202.26.0 [ 222.950528][T12789] bridge_slave_0: entered allmulticast mode [ 222.966109][T12789] bridge_slave_0: entered promiscuous mode [ 222.976575][T12819] loop6: detected capacity change from 0 to 128 [ 222.986098][T12808] pimreg: entered allmulticast mode [ 222.995820][ T8882] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.015741][T12804] pimreg: left allmulticast mode [ 223.032825][T12789] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.040120][T12789] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.050650][T12789] bridge_slave_1: entered allmulticast mode [ 223.058168][T12789] bridge_slave_1: entered promiscuous mode [ 223.130510][T12789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.149453][ T8882] bridge_slave_1: left allmulticast mode [ 223.155151][ T8882] bridge_slave_1: left promiscuous mode [ 223.160869][ T8882] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.180249][ T8882] bridge_slave_0: left allmulticast mode [ 223.186008][ T8882] bridge_slave_0: left promiscuous mode [ 223.191779][ T8882] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.450112][ T8882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.480542][ T8882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.521150][ T8882] bond0 (unregistering): Released all slaves [ 223.551970][ T8882] bond1 (unregistering): Released all slaves [ 223.631784][ T8882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.639306][ T8882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.668739][ T8882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.676308][ T8882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.703315][ T8882] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 223.710141][ T8882] batman_adv: batadv0: Removing interface: ipvlan2 [ 223.731161][ T8882] veth0_macvtap: left promiscuous mode [ 223.848339][ T8882] team0 (unregistering): Port device team_slave_1 removed [ 223.868765][ T8882] team0 (unregistering): Port device team_slave_0 removed [ 223.888631][ T9036] smc: removing ib device syz! [ 223.944818][T12789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.955624][T12837] loop8: detected capacity change from 0 to 1024 [ 223.963259][ T3412] lo speed is unknown, defaulting to 1000 [ 223.969037][ T3412] infiniband qyz2: ib_query_port failed (-19) [ 223.991597][T12837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.011393][T12837] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 224.021115][T12841] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 224.027791][T12841] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 224.036225][T12841] vhci_hcd vhci_hcd.0: Device attached [ 224.064035][T12846] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 224.070704][T12846] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 224.078334][T12846] vhci_hcd vhci_hcd.0: Device attached [ 224.092384][T12789] team0: Port device team_slave_0 added [ 224.098453][T12837] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.132105][T12789] team0: Port device team_slave_1 added [ 224.165583][T12789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.172609][T12789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.199866][T12789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.232878][ T36] vhci_hcd: vhci_device speed not set [ 224.264112][T12789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.271915][T12789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.298550][T12789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.309173][ T36] usb 13-1: new full-speed USB device number 10 using vhci_hcd [ 224.316821][ T1038] vhci_hcd: vhci_device speed not set [ 224.347669][T12789] hsr_slave_0: entered promiscuous mode [ 224.353976][T12789] hsr_slave_1: entered promiscuous mode [ 224.359786][T12789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.367505][T12789] Cannot create hsr debugfs directory [ 224.382302][ T1038] usb 9-1: new full-speed USB device number 7 using vhci_hcd [ 224.398784][ T8882] IPVS: stop unused estimator thread 0... [ 224.712353][T12789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.721360][T12789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.730355][T12789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.740553][T12789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.777170][T12789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.786160][T12842] vhci_hcd: connection reset by peer [ 224.791938][ T8892] vhci_hcd: stop threads [ 224.796248][ T8892] vhci_hcd: release socket [ 224.800718][ T8892] vhci_hcd: disconnect device [ 224.807685][T12789] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.816115][T12543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.835046][T12847] vhci_hcd: connection reset by peer [ 224.840500][ T9036] vhci_hcd: stop threads [ 224.844799][ T9036] vhci_hcd: release socket [ 224.849227][ T9036] vhci_hcd: disconnect device [ 224.859250][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.866329][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.879767][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.886869][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.997589][T12789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.121951][T12789] veth0_vlan: entered promiscuous mode [ 225.130698][T12789] veth1_vlan: entered promiscuous mode [ 225.149371][T12789] veth0_macvtap: entered promiscuous mode [ 225.158144][T12789] veth1_macvtap: entered promiscuous mode [ 225.170885][T12789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.183261][T12789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.193303][T12789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.202155][T12789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.210915][T12789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.219819][T12789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.285196][T12887] loop5: detected capacity change from 0 to 128 [ 225.296416][T12887] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61417200 (sector = 1) [ 225.401240][T12896] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 225.407947][T12896] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.415530][T12896] vhci_hcd vhci_hcd.0: Device attached [ 225.437371][T12896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12896 comm=syz.6.3261 [ 225.488948][T12899] vhci_hcd: connection closed [ 225.489090][ T8892] vhci_hcd: stop threads [ 225.498768][ T8892] vhci_hcd: release socket [ 225.503292][ T8892] vhci_hcd: disconnect device [ 225.559518][T12910] loop8: detected capacity change from 0 to 1024 [ 225.571983][T12910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.591440][T12910] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 225.619745][T12910] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.752462][T12922] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 225.759093][T12922] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 225.766824][T12922] vhci_hcd vhci_hcd.0: Device attached [ 225.971179][ T10] vhci_hcd: vhci_device speed not set [ 226.041135][ T10] usb 11-1: new full-speed USB device number 6 using vhci_hcd [ 226.052461][ T3572] usb 17-1: enqueue for inactive port 0 [ 226.066769][ T3572] usb 17-1: enqueue for inactive port 0 [ 226.162650][ T3572] vhci_hcd: vhci_device speed not set [ 226.389949][T12543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.494156][T12935] FAULT_INJECTION: forcing a failure. [ 226.494156][T12935] name failslab, interval 1, probability 0, space 0, times 0 [ 226.494207][T12935] CPU: 0 UID: 0 PID: 12935 Comm: syz.8.3277 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 226.494241][T12935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.494257][T12935] Call Trace: [ 226.494265][T12935] [ 226.494274][T12935] __dump_stack+0x1d/0x30 [ 226.494299][T12935] dump_stack_lvl+0xe8/0x140 [ 226.494324][T12935] dump_stack+0x15/0x1b [ 226.494419][T12935] should_fail_ex+0x265/0x280 [ 226.494453][T12935] should_failslab+0x8c/0xb0 [ 226.494478][T12935] __kmalloc_noprof+0xa5/0x3e0 [ 226.494565][T12935] ? fib6_info_alloc+0x2e/0x90 [ 226.494600][T12935] fib6_info_alloc+0x2e/0x90 [ 226.494637][T12935] ip6_route_info_create+0xe7/0x390 [ 226.494695][T12935] ip6_route_add+0x49/0x170 [ 226.494737][T12935] ipv6_route_ioctl+0x251/0x280 [ 226.494775][T12935] inet6_ioctl+0x152/0x190 [ 226.494801][T12935] sock_do_ioctl+0x73/0x220 [ 226.494827][T12935] sock_ioctl+0x41b/0x610 [ 226.494847][T12935] ? __pfx_sock_ioctl+0x10/0x10 [ 226.494926][T12935] __se_sys_ioctl+0xce/0x140 [ 226.494963][T12935] __x64_sys_ioctl+0x43/0x50 [ 226.495018][T12935] x64_sys_call+0x19a8/0x2fb0 [ 226.495046][T12935] do_syscall_64+0xd2/0x200 [ 226.495122][T12935] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 226.495156][T12935] ? clear_bhb_loop+0x40/0x90 [ 226.495177][T12935] ? clear_bhb_loop+0x40/0x90 [ 226.495213][T12935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.495238][T12935] RIP: 0033:0x7fa9eca5e929 [ 226.495256][T12935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.495278][T12935] RSP: 002b:00007fa9eb0c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.495368][T12935] RAX: ffffffffffffffda RBX: 00007fa9ecc85fa0 RCX: 00007fa9eca5e929 [ 226.495382][T12935] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000003 [ 226.495397][T12935] RBP: 00007fa9eb0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.495410][T12935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.495421][T12935] R13: 0000000000000000 R14: 00007fa9ecc85fa0 R15: 00007ffdef8c08a8 [ 226.495438][T12935] [ 226.529228][T12923] vhci_hcd: connection reset by peer [ 226.529462][ T9036] vhci_hcd: stop threads [ 226.529471][ T9036] vhci_hcd: release socket [ 226.529485][ T9036] vhci_hcd: disconnect device [ 226.591617][T12939] loop8: detected capacity change from 0 to 512 [ 226.621250][T12939] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -13 [ 226.811847][T12939] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #13: comm syz.8.3279: iget: bad i_size value: 12154757448730 [ 226.812421][T12939] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.3279: couldn't read orphan inode 13 (err -117) [ 226.837551][T12939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.841176][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 226.841245][ T29] audit: type=1400 audit(2000000128.310:20932): avc: denied { mac_admin } for pid=12938 comm="syz.8.3279" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.841273][ T29] audit: type=1400 audit(2000000128.310:20933): avc: denied { relabelto } for pid=12938 comm="syz.8.3279" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 226.842427][T12939] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 226.874395][T12543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.007194][T12946] loop6: detected capacity change from 0 to 128 [ 227.022359][T12946] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61417200 (sector = 1) [ 227.109054][T12951] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 227.196335][ T29] audit: type=1326 audit(2000000128.660:20934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ce25e929 code=0x7ffc0000 [ 227.214806][T12958] loop4: detected capacity change from 0 to 1024 [ 227.220013][ T29] audit: type=1326 audit(2000000128.660:20935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f14ce25e929 code=0x7ffc0000 [ 227.242401][T12958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.249861][ T29] audit: type=1326 audit(2000000128.660:20936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ce25e929 code=0x7ffc0000 [ 227.249908][ T29] audit: type=1326 audit(2000000128.660:20937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14ce25e929 code=0x7ffc0000 [ 227.303723][ T29] audit: type=1326 audit(2000000128.660:20938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ce25e929 code=0x7ffc0000 [ 227.318247][T12958] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 227.327471][ T29] audit: type=1326 audit(2000000128.660:20939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f14ce26087a code=0x7ffc0000 [ 227.327505][ T29] audit: type=1326 audit(2000000128.660:20940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14ce25d290 code=0x7ffc0000 [ 227.327538][ T29] audit: type=1326 audit(2000000128.660:20941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.5.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f14ce25d3df code=0x7ffc0000 [ 227.411889][T12959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12959 comm=syz.5.3286 [ 227.431192][T12955] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 227.437846][T12955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.445491][T12955] vhci_hcd vhci_hcd.0: Device attached [ 227.453514][T12957] vhci_hcd: connection closed [ 227.453742][ T9036] vhci_hcd: stop threads [ 227.463439][ T9036] vhci_hcd: release socket [ 227.467864][ T9036] vhci_hcd: disconnect device [ 227.474565][T12958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.626371][T12966] loop6: detected capacity change from 0 to 1024 [ 227.633461][T12966] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.642972][T12966] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 227.654648][T12966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.858879][T12963] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 171: padding at end of block bitmap is not set [ 227.881953][T12963] EXT4-fs (loop6): Remounting filesystem read-only [ 228.124276][T12977] FAULT_INJECTION: forcing a failure. [ 228.124276][T12977] name failslab, interval 1, probability 0, space 0, times 0 [ 228.136980][T12977] CPU: 1 UID: 0 PID: 12977 Comm: syz.8.3289 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 228.137016][T12977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.137033][T12977] Call Trace: [ 228.137070][T12977] [ 228.137079][T12977] __dump_stack+0x1d/0x30 [ 228.137118][T12977] dump_stack_lvl+0xe8/0x140 [ 228.137142][T12977] dump_stack+0x15/0x1b [ 228.137164][T12977] should_fail_ex+0x265/0x280 [ 228.137279][T12977] should_failslab+0x8c/0xb0 [ 228.137309][T12977] kmem_cache_alloc_node_noprof+0x57/0x320 [ 228.137354][T12977] ? __alloc_skb+0x101/0x320 [ 228.137431][T12977] __alloc_skb+0x101/0x320 [ 228.137476][T12977] netlink_alloc_large_skb+0xba/0xf0 [ 228.137516][T12977] netlink_sendmsg+0x3cf/0x6b0 [ 228.137543][T12977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.137636][T12977] __sock_sendmsg+0x145/0x180 [ 228.137668][T12977] ____sys_sendmsg+0x31e/0x4e0 [ 228.137714][T12977] ___sys_sendmsg+0x17b/0x1d0 [ 228.137795][T12977] __x64_sys_sendmsg+0xd4/0x160 [ 228.137843][T12977] x64_sys_call+0x2999/0x2fb0 [ 228.137935][T12977] do_syscall_64+0xd2/0x200 [ 228.138004][T12977] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 228.138036][T12977] ? clear_bhb_loop+0x40/0x90 [ 228.138063][T12977] ? clear_bhb_loop+0x40/0x90 [ 228.138091][T12977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.138162][T12977] RIP: 0033:0x7fa9eca5e929 [ 228.138181][T12977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.138230][T12977] RSP: 002b:00007fa9eb0c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.138253][T12977] RAX: ffffffffffffffda RBX: 00007fa9ecc85fa0 RCX: 00007fa9eca5e929 [ 228.138333][T12977] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 228.138349][T12977] RBP: 00007fa9eb0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 228.138365][T12977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.138380][T12977] R13: 0000000000000000 R14: 00007fa9ecc85fa0 R15: 00007ffdef8c08a8 [ 228.138404][T12977] [ 228.139156][T10686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.368435][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3291'. [ 228.433040][ T4283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.488336][T12998] pimreg: entered allmulticast mode [ 228.502563][T12998] pimreg: left allmulticast mode [ 228.526170][T12978] lo speed is unknown, defaulting to 1000 [ 228.530647][T13003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13003 comm=syz.8.3297 [ 228.547090][T13004] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 228.553727][T13004] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 228.553795][T13004] vhci_hcd vhci_hcd.0: Device attached [ 228.620874][ T8892] bridge_slave_1: left allmulticast mode [ 228.626837][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.637705][ T8892] bridge_slave_0: left allmulticast mode [ 228.637799][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.783457][ T8892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.784106][ T8892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.784690][ T8892] bond0 (unregistering): Released all slaves [ 228.852328][ T8892] tipc: Disabling bearer [ 228.852349][ T8892] tipc: Left network mode [ 228.863343][ T8892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.863778][ T8892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.897332][ T8892] team0 (unregistering): Port device team_slave_1 removed [ 228.911448][ T8892] team0 (unregistering): Port device team_slave_0 removed [ 228.977710][T12978] chnl_net:caif_netlink_parms(): no params data found [ 229.039249][T12978] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.039284][T12978] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.039403][T12978] bridge_slave_0: entered allmulticast mode [ 229.040059][T12978] bridge_slave_0: entered promiscuous mode [ 229.066647][T12978] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.066752][T12978] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.081175][T12978] bridge_slave_1: entered allmulticast mode [ 229.082008][T12978] bridge_slave_1: entered promiscuous mode [ 229.101754][T12978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.103186][T12978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.132430][T12978] team0: Port device team_slave_0 added [ 229.133573][T12978] team0: Port device team_slave_1 added [ 229.155620][T12978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.155633][T12978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.155704][T12978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.156349][T12978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.156364][T12978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.156438][T12978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.174859][T12978] hsr_slave_0: entered promiscuous mode [ 229.175459][T12978] hsr_slave_1: entered promiscuous mode [ 229.286904][T12978] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 229.291796][T12978] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 229.294201][T12978] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 229.307248][T12978] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 229.358657][T13005] vhci_hcd: connection closed [ 229.401193][ T1038] usb 9-1: enqueue for inactive port 0 [ 229.401214][ T1038] usb 9-1: enqueue for inactive port 0 [ 229.403121][T13006] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 229.440933][ T9081] vhci_hcd: stop threads [ 229.445250][ T9081] vhci_hcd: release socket [ 229.449702][ T9081] vhci_hcd: disconnect device [ 229.471863][ T1038] vhci_hcd: vhci_device speed not set [ 229.555120][T13032] loop4: detected capacity change from 0 to 1024 [ 229.566807][T13032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.584644][T12978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.598650][T13032] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 229.608882][T12978] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.619368][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.626511][ T8892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.645881][T13032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.661032][T12978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.671528][T12978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.688263][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.695453][ T8892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.764534][T12978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.806455][T13050] loop8: detected capacity change from 0 to 1024 [ 229.813678][T13050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.820632][T13050] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 229.833442][T13035] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 171: padding at end of block bitmap is not set [ 229.848874][T13035] EXT4-fs (loop4): Remounting filesystem read-only [ 229.851438][T13050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.902744][T13064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13064 comm=syz.6.3308 [ 229.919575][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3309'. [ 229.987401][T13074] pimreg: entered allmulticast mode [ 230.004105][T12978] veth0_vlan: entered promiscuous mode [ 230.009917][T13066] pimreg: left allmulticast mode [ 230.019473][T12978] veth1_vlan: entered promiscuous mode [ 230.036503][T12978] veth0_macvtap: entered promiscuous mode [ 230.042800][T13077] loop6: detected capacity change from 0 to 1024 [ 230.045284][T12978] veth1_macvtap: entered promiscuous mode [ 230.060473][T12978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.074248][T12978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.083160][T13077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.084382][T12978] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.100431][T12978] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.109925][T12978] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.118776][T12978] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.128214][T13077] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 230.143868][T13077] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 230.156547][T13077] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.3310: lblock 2 mapped to illegal pblock 2 (length 1) [ 230.171615][T13077] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.3310: lblock 0 mapped to illegal pblock 48 (length 1) [ 230.190913][T13077] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3310: Failed to acquire dquot type 0 [ 230.203119][T13077] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 230.215617][T13077] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3310: mark_inode_dirty error [ 230.229946][T13077] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 230.240507][T13077] EXT4-fs (loop6): 1 orphan inode deleted [ 230.247157][T13077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.259529][ T8892] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 230.274140][ T8892] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:17: Failed to release dquot type 0 [ 230.286778][T13077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.296142][T13077] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz.6.3310: Invalid inode table block 1 in block_group 0 [ 230.309223][T13077] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 230.319083][T13077] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz.6.3310: mark_inode_dirty error [ 230.362905][T13077] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3310'. [ 230.456185][T10686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.570393][T13102] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3317'. [ 230.600594][T13105] loop9: detected capacity change from 0 to 128 [ 230.609446][T13105] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.634559][T13105] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 230.682582][T12543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.729117][T13105] EXT4-fs (loop9): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.761984][T13111] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 230.768636][T13111] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 230.776342][T13111] vhci_hcd vhci_hcd.0: Device attached [ 230.797781][T12978] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.817909][T13114] loop8: detected capacity change from 0 to 1024 [ 230.825230][T13114] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.838559][T13114] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 230.839910][T13116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13116 comm=syz.6.3322 [ 230.864400][T13114] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 230.874753][T13114] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.3320: lblock 2 mapped to illegal pblock 2 (length 1) [ 230.899952][T13114] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.3320: lblock 0 mapped to illegal pblock 48 (length 1) [ 230.919532][T13120] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3321'. [ 230.924010][T13114] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3320: Failed to acquire dquot type 0 [ 230.943060][T13114] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 230.954739][T13114] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.3320: mark_inode_dirty error [ 230.966291][ T3413] vhci_hcd: vhci_device speed not set [ 230.974337][T13114] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 230.984769][T13114] EXT4-fs (loop8): 1 orphan inode deleted [ 230.992267][T13114] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.005258][ T9036] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 231.014232][T13124] pimreg: entered allmulticast mode [ 231.026237][ T9036] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 0 [ 231.038597][ T3413] usb 9-1: new full-speed USB device number 8 using vhci_hcd [ 231.067731][T13126] pimreg: left allmulticast mode [ 231.079821][T13114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.089227][ T10] usb 11-1: enqueue for inactive port 0 [ 231.095113][ T10] usb 11-1: enqueue for inactive port 0 [ 231.101557][T13114] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz.8.3320: Invalid inode table block 1 in block_group 0 [ 231.116830][T13114] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 231.154354][T13130] loop6: detected capacity change from 0 to 1024 [ 231.160957][T13114] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz.8.3320: mark_inode_dirty error [ 231.175299][T13130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.191780][ T10] vhci_hcd: vhci_device speed not set [ 231.199488][T13130] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 231.224392][T13114] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3320'. [ 231.234939][T13130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.353287][T13134] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 231.489553][T13112] vhci_hcd: connection reset by peer [ 231.489916][ T8892] vhci_hcd: stop threads [ 231.489924][ T8892] vhci_hcd: release socket [ 231.489937][ T8892] vhci_hcd: disconnect device [ 231.555483][T13144] loop5: detected capacity change from 0 to 1024 [ 231.557796][T13144] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3328: Failed to acquire dquot type 0 [ 231.573719][T13144] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 231.573907][T13144] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.3328: corrupted inode contents [ 231.574069][T13144] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #13: comm syz.5.3328: mark_inode_dirty error [ 231.574144][T13144] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.3328: corrupted inode contents [ 231.574243][T13144] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.3328: mark_inode_dirty error [ 231.574308][T13144] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.3328: corrupted inode contents [ 231.574410][T13144] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 231.574472][T13144] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.3328: corrupted inode contents [ 231.574543][T13144] EXT4-fs error (device loop5): ext4_truncate:4597: inode #13: comm syz.5.3328: mark_inode_dirty error [ 231.679080][T13144] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 231.679569][T13144] EXT4-fs (loop5): 1 truncate cleaned up [ 231.679973][T13144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.771611][T13148] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3329'. [ 231.785924][T12789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.808300][T13150] FAULT_INJECTION: forcing a failure. [ 231.808300][T13150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.808368][T13150] CPU: 1 UID: 0 PID: 13150 Comm: syz.5.3330 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 231.808401][T13150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.808417][T13150] Call Trace: [ 231.808485][T13150] [ 231.808493][T13150] __dump_stack+0x1d/0x30 [ 231.808538][T13150] dump_stack_lvl+0xe8/0x140 [ 231.808562][T13150] dump_stack+0x15/0x1b [ 231.808583][T13150] should_fail_ex+0x265/0x280 [ 231.808617][T13150] should_fail+0xb/0x20 [ 231.808658][T13150] should_fail_usercopy+0x1a/0x20 [ 231.808716][T13150] _copy_from_iter+0xcf/0xe40 [ 231.808768][T13150] ? skb_set_owner_w+0x16a/0x1c0 [ 231.808870][T13150] ? sock_alloc_send_pskb+0x456/0x4f0 [ 231.808905][T13150] skb_copy_datagram_from_iter+0xb1/0x490 [ 231.808936][T13150] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 231.808974][T13150] ? skb_put+0xa9/0xf0 [ 231.809025][T13150] unix_stream_sendmsg+0x45e/0x8e0 [ 231.809057][T13150] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 231.809091][T13150] __sock_sendmsg+0x145/0x180 [ 231.809159][T13150] ____sys_sendmsg+0x31e/0x4e0 [ 231.809265][T13150] ___sys_sendmsg+0x17b/0x1d0 [ 231.809336][T13150] __x64_sys_sendmsg+0xd4/0x160 [ 231.809388][T13150] x64_sys_call+0x2999/0x2fb0 [ 231.809449][T13150] do_syscall_64+0xd2/0x200 [ 231.809474][T13150] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 231.809511][T13150] ? clear_bhb_loop+0x40/0x90 [ 231.809542][T13150] ? clear_bhb_loop+0x40/0x90 [ 231.809572][T13150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.809654][T13150] RIP: 0033:0x7f14ce25e929 [ 231.809675][T13150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.809701][T13150] RSP: 002b:00007f14cc8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.809741][T13150] RAX: ffffffffffffffda RBX: 00007f14ce485fa0 RCX: 00007f14ce25e929 [ 231.809761][T13150] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 231.809778][T13150] RBP: 00007f14cc8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.809795][T13150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.809838][T13150] R13: 0000000000000000 R14: 00007f14ce485fa0 R15: 00007fff16a66688 [ 231.809865][T13150] [ 231.868010][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 231.868025][ T29] audit: type=1400 audit(2000000133.330:21092): avc: denied { create } for pid=13153 comm="syz.8.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 231.887926][T13154] SELinux: failed to load policy [ 231.888077][ T29] audit: type=1400 audit(2000000133.350:21093): avc: denied { load_policy } for pid=13153 comm="syz.8.3332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 231.888137][ T29] audit: type=1400 audit(2000000133.350:21094): avc: denied { block_suspend } for pid=13153 comm="syz.8.3332" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.960438][T13161] loop8: detected capacity change from 0 to 1024 [ 232.138645][T13161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.139510][T13161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 232.163295][T13161] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.223136][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3337'. [ 232.223388][ T29] audit: type=1326 audit(2000000133.690:21095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.8.3335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9eca5e929 code=0x0 [ 232.311565][ T4283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.347716][T13176] pimreg: entered allmulticast mode [ 232.421162][T13171] pimreg: left allmulticast mode [ 232.778629][T13178] chnl_net:caif_netlink_parms(): no params data found [ 232.817057][T12543] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.917493][T13178] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.917552][T13178] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.917711][T13178] bridge_slave_0: entered allmulticast mode [ 232.918258][T13178] bridge_slave_0: entered promiscuous mode [ 233.059619][T13196] FAULT_INJECTION: forcing a failure. [ 233.059619][T13196] name failslab, interval 1, probability 0, space 0, times 0 [ 233.072317][T13196] CPU: 1 UID: 0 PID: 13196 Comm: syz.4.3341 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 233.072350][T13196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.072402][T13196] Call Trace: [ 233.072408][T13196] [ 233.072414][T13196] __dump_stack+0x1d/0x30 [ 233.072433][T13196] dump_stack_lvl+0xe8/0x140 [ 233.072451][T13196] dump_stack+0x15/0x1b [ 233.072466][T13196] should_fail_ex+0x265/0x280 [ 233.072578][T13196] should_failslab+0x8c/0xb0 [ 233.072606][T13196] kmem_cache_alloc_noprof+0x50/0x310 [ 233.072633][T13196] ? __anon_vma_prepare+0x70/0x2f0 [ 233.072703][T13196] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 233.072736][T13196] __anon_vma_prepare+0x70/0x2f0 [ 233.072768][T13196] do_wp_page+0x1838/0x2400 [ 233.072787][T13196] ? __rcu_read_lock+0x37/0x50 [ 233.072869][T13196] handle_mm_fault+0x77d/0x2be0 [ 233.072894][T13196] ? mas_walk+0xf2/0x120 [ 233.072958][T13196] do_user_addr_fault+0x636/0x1090 [ 233.072995][T13196] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 233.073157][T13196] exc_page_fault+0x62/0xa0 [ 233.073188][T13196] asm_exc_page_fault+0x26/0x30 [ 233.073239][T13196] RIP: 0033:0x7fd1f4520ca3 [ 233.073253][T13196] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 233.073270][T13196] RSP: 002b:00007fd1f2cc64a0 EFLAGS: 00010202 [ 233.073286][T13196] RAX: 0000000000000400 RBX: 00007fd1f2cc6540 RCX: 00007fd1ea8a7000 [ 233.073301][T13196] RDX: 00007fd1f2cc66e0 RSI: 0000000000000001 RDI: 00007fd1f2cc65e0 [ 233.073316][T13196] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001b9 [ 233.073336][T13196] R10: 00000000000001cc R11: 00007fd1f2cc6540 R12: 0000000000000001 [ 233.073351][T13196] R13: 00007fd1f46fc3a0 R14: 0000000000000020 R15: 00007fd1f2cc65e0 [ 233.073371][T13196] [ 233.073382][T13196] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 233.267953][ T8892] bond1 (unregistering): Released all slaves [ 233.274440][T13178] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.275368][T13196] loop4: detected capacity change from 0 to 512 [ 233.281528][T13178] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.294963][T13178] bridge_slave_1: entered allmulticast mode [ 233.301434][T13178] bridge_slave_1: entered promiscuous mode [ 233.318674][T13196] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 233.327630][T13196] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 233.342247][T13196] EXT4-fs (loop4): mount failed [ 233.348013][T13178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.357305][ T8892] tipc: Left network mode [ 233.363005][T13202] loop9: detected capacity change from 0 to 1024 [ 233.366904][T13178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.369649][T13202] EXT4-fs: Ignoring removed oldalloc option [ 233.384397][T13202] EXT4-fs: Ignoring removed orlov option [ 233.390095][T13202] EXT4-fs: Ignoring removed oldalloc option [ 233.396162][T13202] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.410259][T13178] team0: Port device team_slave_0 added [ 233.412031][T13178] team0: Port device team_slave_1 added [ 233.423553][ T8892] hsr_slave_1: left promiscuous mode [ 233.437240][T13202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.510767][T13212] loop4: detected capacity change from 0 to 1024 [ 233.528379][T13212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.529742][T13212] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.543329][T13213] EXT4-fs error (device loop9): ext4_xattr_set_entry:1660: inode #13: comm syz.9.3342: corrupted xattr entries [ 233.543912][ T29] audit: type=1400 audit(2000000135.010:21096): avc: denied { append } for pid=13201 comm="syz.9.3342" path="/6/file1/cpuacct.usage_user" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.557456][T13213] EXT4-fs (loop9): Remounting filesystem read-only [ 233.579549][ T29] audit: type=1400 audit(2000000135.010:21097): avc: denied { setattr } for pid=13201 comm="syz.9.3342" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 233.585138][T13212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.586258][T13213] EXT4-fs warning (device loop9): ext4_xattr_ibody_set:2272: inode #19: comm syz.9.3342: dec ref error=-30 [ 233.634119][T13178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.641185][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.641279][T13178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.642164][T13178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.685688][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.711683][T13178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.756361][ T29] audit: type=1326 audit(2000000135.220:21098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13211 comm="syz.4.3344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1f465e929 code=0x0 [ 233.757718][T13178] hsr_slave_0: entered promiscuous mode [ 233.791550][T13178] hsr_slave_1: entered promiscuous mode [ 233.791836][T13178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.791854][T13178] Cannot create hsr debugfs directory [ 233.805669][T12978] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.861386][T13223] netlink: 'syz.8.3347': attribute type 6 has an invalid length. [ 233.861457][T13223] FAULT_INJECTION: forcing a failure. [ 233.861457][T13223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.861537][T13223] CPU: 1 UID: 0 PID: 13223 Comm: syz.8.3347 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 233.861579][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.861618][T13223] Call Trace: [ 233.861724][T13223] [ 233.861731][T13223] __dump_stack+0x1d/0x30 [ 233.861751][T13223] dump_stack_lvl+0xe8/0x140 [ 233.861773][T13223] dump_stack+0x15/0x1b [ 233.861852][T13223] should_fail_ex+0x265/0x280 [ 233.861890][T13223] should_fail+0xb/0x20 [ 233.861927][T13223] should_fail_usercopy+0x1a/0x20 [ 233.861969][T13223] strncpy_from_user+0x25/0x230 [ 233.862071][T13223] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 233.862117][T13223] strncpy_from_user_nofault+0x68/0xf0 [ 233.862160][T13223] bpf_probe_read_compat_str+0xb4/0x130 [ 233.862268][T13223] bpf_prog_d73d3bb03d5a037f+0x3e/0x44 [ 233.862290][T13223] bpf_trace_run2+0x107/0x1c0 [ 233.862323][T13223] ? ref_tracker_free+0x28d/0x3e0 [ 233.862361][T13223] ? stack_depot_save_flags+0xa6a/0xb60 [ 233.862422][T13223] ? ref_tracker_free+0x28d/0x3e0 [ 233.862455][T13223] kfree+0x27b/0x320 [ 233.862493][T13223] ? stack_trace_save+0x5e/0x90 [ 233.862531][T13223] ref_tracker_free+0x28d/0x3e0 [ 233.862565][T13223] ? fib_nh_common_release+0x36/0x300 [ 233.862673][T13223] ? fib6_nh_release+0x247/0x260 [ 233.862697][T13223] ? fib_check_nh+0x53a/0xbe0 [ 233.862763][T13223] ? fib_create_info+0x1266/0x1980 [ 233.862787][T13223] ? fib_table_insert+0x60/0xeb0 [ 233.862821][T13223] ? inet_rtm_newroute+0xab/0x140 [ 233.862873][T13223] ? rtnetlink_rcv_msg+0x5fe/0x6d0 [ 233.862947][T13223] ? netlink_rcv_skb+0x120/0x220 [ 233.863045][T13223] ? rtnetlink_rcv+0x1c/0x30 [ 233.863070][T13223] ? netlink_unicast+0x5a1/0x670 [ 233.863185][T13223] ? netlink_sendmsg+0x58b/0x6b0 [ 233.863207][T13223] ? __sock_sendmsg+0x145/0x180 [ 233.863300][T13223] ? ____sys_sendmsg+0x31e/0x4e0 [ 233.863343][T13223] ? ___sys_sendmsg+0x17b/0x1d0 [ 233.863449][T13223] ? __x64_sys_sendmsg+0xd4/0x160 [ 233.863490][T13223] ? x64_sys_call+0x2999/0x2fb0 [ 233.863521][T13223] fib_nh_common_release+0x36/0x300 [ 233.863565][T13223] fib6_nh_release+0x247/0x260 [ 233.863670][T13223] fib_check_nh+0x53a/0xbe0 [ 233.863818][T13223] ? fib_nh_common_init+0xe1/0x2a0 [ 233.863856][T13223] fib_create_info+0x1266/0x1980 [ 233.863888][T13223] fib_table_insert+0x60/0xeb0 [ 233.863978][T13223] ? fib_trie_table+0xd0/0xf0 [ 233.864009][T13223] ? fib_new_table+0x1ac/0x1c0 [ 233.864045][T13223] inet_rtm_newroute+0xab/0x140 [ 233.864146][T13223] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 233.864186][T13223] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 233.864219][T13223] netlink_rcv_skb+0x120/0x220 [ 233.864323][T13223] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.864357][T13223] rtnetlink_rcv+0x1c/0x30 [ 233.864381][T13223] netlink_unicast+0x5a1/0x670 [ 233.864419][T13223] netlink_sendmsg+0x58b/0x6b0 [ 233.864488][T13223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.864511][T13223] __sock_sendmsg+0x145/0x180 [ 233.864621][T13223] ____sys_sendmsg+0x31e/0x4e0 [ 233.864654][T13223] ___sys_sendmsg+0x17b/0x1d0 [ 233.864743][T13223] __x64_sys_sendmsg+0xd4/0x160 [ 233.864790][T13223] x64_sys_call+0x2999/0x2fb0 [ 233.864861][T13223] do_syscall_64+0xd2/0x200 [ 233.864883][T13223] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.864918][T13223] ? clear_bhb_loop+0x40/0x90 [ 233.864944][T13223] ? clear_bhb_loop+0x40/0x90 [ 233.864979][T13223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.865005][T13223] RIP: 0033:0x7fa9eca5e929 [ 233.865022][T13223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.865045][T13223] RSP: 002b:00007fa9eb0c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.865130][T13223] RAX: ffffffffffffffda RBX: 00007fa9ecc85fa0 RCX: 00007fa9eca5e929 [ 233.865145][T13223] RDX: 0000000000000894 RSI: 0000200000000000 RDI: 0000000000000003 [ 233.865161][T13223] RBP: 00007fa9eb0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.865225][T13223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.865238][T13223] R13: 0000000000000000 R14: 00007fa9ecc85fa0 R15: 00007ffdef8c08a8 [ 233.865261][T13223] [ 233.944371][T13228] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 234.308808][T13228] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 234.309094][T13228] vhci_hcd vhci_hcd.0: Device attached [ 234.405500][T10686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.456767][ T29] audit: type=1400 audit(2000000135.920:21099): avc: denied { mount } for pid=13242 comm="syz.4.3354" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 234.483121][T13243] loop4: detected capacity change from 0 to 512 [ 234.491155][ T3399] vhci_hcd: vhci_device speed not set [ 234.494185][T13243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.509240][T13243] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.521214][ T36] usb 13-1: enqueue for inactive port 0 [ 234.529744][T13243] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3354: corrupted inode contents [ 234.544845][T13243] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.3354: mark_inode_dirty error [ 234.556378][ T3399] usb 17-1: new full-speed USB device number 4 using vhci_hcd [ 234.561184][T13243] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.3354: corrupted inode contents [ 234.576841][T13243] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.3354: mark_inode_dirty error [ 234.591205][ T36] vhci_hcd: vhci_device speed not set [ 234.605820][T13178] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 234.614915][T13178] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 234.626588][T10686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.626969][T13178] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 234.645817][T13178] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 234.728821][T13178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.740649][T13178] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.760212][T13178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.770678][T13178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.781214][T13229] vhci_hcd: connection reset by peer [ 234.789494][ T8973] vhci_hcd: stop threads [ 234.793800][ T8973] vhci_hcd: release socket [ 234.798242][ T8973] vhci_hcd: disconnect device [ 234.817212][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.824309][ T8892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.835551][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.842696][ T8892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.850618][T13261] loop4: detected capacity change from 0 to 1024 [ 234.866894][T13261] EXT4-fs: Ignoring removed nobh option [ 234.872578][T13261] EXT4-fs: Ignoring removed bh option [ 234.878267][T13261] EXT4-fs: Mount option(s) incompatible with ext2 [ 234.902178][ T29] audit: type=1326 audit(2000000136.360:21100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13260 comm="syz.4.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f465e929 code=0x7ffc0000 [ 234.950363][T13178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.990105][T13268] loop4: detected capacity change from 0 to 1024 [ 235.004002][T13268] EXT4-fs: Ignoring removed oldalloc option [ 235.010033][T13268] EXT4-fs: Ignoring removed orlov option [ 235.015882][T13268] EXT4-fs: Ignoring removed oldalloc option [ 235.021917][T13268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.043977][T13273] netlink: 'syz.9.3359': attribute type 6 has an invalid length. [ 235.128162][T13281] loop9: detected capacity change from 0 to 1024 [ 235.135470][T13268] EXT4-fs error (device loop4): ext4_xattr_set_entry:1660: inode #13: comm syz.4.3358: corrupted xattr entries [ 235.153620][T13268] EXT4-fs (loop4): Remounting filesystem read-only [ 235.171117][T13268] EXT4-fs warning (device loop4): ext4_xattr_ibody_set:2272: inode #19: comm syz.4.3358: dec ref error=-30 [ 235.273060][T13178] veth0_vlan: entered promiscuous mode [ 235.281439][T13178] veth1_vlan: entered promiscuous mode [ 235.310335][T13178] veth0_macvtap: entered promiscuous mode [ 235.324309][T13295] FAULT_INJECTION: forcing a failure. [ 235.324309][T13295] name failslab, interval 1, probability 0, space 0, times 0 [ 235.337054][T13295] CPU: 1 UID: 0 PID: 13295 Comm: syz.4.3364 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 235.337096][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.337109][T13295] Call Trace: [ 235.337114][T13295] [ 235.337121][T13295] __dump_stack+0x1d/0x30 [ 235.337172][T13295] dump_stack_lvl+0xe8/0x140 [ 235.337197][T13295] dump_stack+0x15/0x1b [ 235.337218][T13295] should_fail_ex+0x265/0x280 [ 235.337253][T13295] should_failslab+0x8c/0xb0 [ 235.337323][T13178] veth1_macvtap: entered promiscuous mode [ 235.337327][T13295] kmem_cache_alloc_node_noprof+0x57/0x320 [ 235.337362][T13295] ? __alloc_skb+0x101/0x320 [ 235.337405][T13295] __alloc_skb+0x101/0x320 [ 235.337517][T13295] send_monitor_note+0x9f/0x3c0 [ 235.337563][T13295] hci_sock_bind+0x4ec/0x990 [ 235.337658][T13295] __sys_bind+0x1ce/0x2a0 [ 235.337701][T13295] __x64_sys_bind+0x3f/0x50 [ 235.337741][T13295] x64_sys_call+0x2086/0x2fb0 [ 235.337770][T13295] do_syscall_64+0xd2/0x200 [ 235.337795][T13295] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 235.337896][T13295] ? clear_bhb_loop+0x40/0x90 [ 235.337928][T13295] ? clear_bhb_loop+0x40/0x90 [ 235.337966][T13295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.337997][T13295] RIP: 0033:0x7fd1f465e929 [ 235.338031][T13295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.338092][T13295] RSP: 002b:00007fd1f2cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 235.338118][T13295] RAX: ffffffffffffffda RBX: 00007fd1f4885fa0 RCX: 00007fd1f465e929 [ 235.338135][T13295] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000004 [ 235.338153][T13295] RBP: 00007fd1f2cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 235.338175][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.338193][T13295] R13: 0000000000000000 R14: 00007fd1f4885fa0 R15: 00007ffefec56178 [ 235.338276][T13295] [ 235.549499][T13178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.562192][T13178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.572306][T13178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.581071][T13178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.589872][T13178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.598605][T13178] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.621244][T13308] 9pnet_fd: Insufficient options for proto=fd [ 235.693640][T13316] loop5: detected capacity change from 0 to 1024 [ 235.700978][T13316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.710391][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3372'. [ 235.753406][T13319] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 235.760038][T13319] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 235.767699][T13319] vhci_hcd vhci_hcd.0: Device attached [ 235.773115][T13316] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 235.788052][T13317] pimreg: entered allmulticast mode [ 235.794031][T13317] pimreg: left allmulticast mode [ 235.810254][T13326] loop6: detected capacity change from 0 to 1024 [ 235.817251][T13316] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 235.826370][T13316] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.3371: lblock 2 mapped to illegal pblock 2 (length 1) [ 235.835445][T13326] EXT4-fs: Ignoring removed oldalloc option [ 235.842436][T13316] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.3371: lblock 0 mapped to illegal pblock 48 (length 1) [ 235.846427][T13326] EXT4-fs: Ignoring removed orlov option [ 235.862352][T13316] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3371: Failed to acquire dquot type 0 [ 235.866129][T13326] EXT4-fs: Ignoring removed oldalloc option [ 235.883299][T13326] ================================================================== [ 235.883330][T13326] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 235.892201][T13316] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 235.899076][T13326] [ 235.899084][T13326] write to 0xffffffff86a21038 of 8 bytes by task 13316 on cpu 0: [ 235.908730][T13316] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3371: mark_inode_dirty error [ 235.910764][T13326] console_flush_all+0x35a/0x730 [ 235.918914][T13316] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 235.929656][T13326] console_unlock+0xa1/0x330 [ 235.929683][T13326] vprintk_emit+0x388/0x650 [ 235.929704][T13326] vprintk_default+0x26/0x30 [ 235.958584][T13326] vprintk+0x1d/0x30 [ 235.962507][T13326] _printk+0x79/0xa0 [ 235.966423][T13326] __ext4_msg+0x18f/0x1a0 [ 235.970773][T13326] ext4_process_orphan+0x18e/0x1c0 [ 235.975906][T13326] ext4_orphan_cleanup+0x6a8/0xa00 [ 235.981037][T13326] ext4_fill_super+0x3171/0x34e0 [ 235.985996][T13326] get_tree_bdev_flags+0x291/0x300 [ 235.991139][T13326] get_tree_bdev+0x1f/0x30 [ 235.995577][T13326] ext4_get_tree+0x1c/0x30 [ 236.000012][T13326] vfs_get_tree+0x54/0x1d0 [ 236.004450][T13326] do_new_mount+0x207/0x680 [ 236.008973][T13326] path_mount+0x4a4/0xb20 [ 236.013317][T13326] __se_sys_mount+0x28f/0x2e0 [ 236.017998][T13326] __x64_sys_mount+0x67/0x80 [ 236.022594][T13326] x64_sys_call+0xd36/0x2fb0 [ 236.027195][T13326] do_syscall_64+0xd2/0x200 [ 236.031708][T13326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.037613][T13326] [ 236.039945][T13326] read to 0xffffffff86a21038 of 8 bytes by task 13326 on cpu 1: [ 236.047584][T13326] console_flush_all+0x563/0x730 [ 236.052538][T13326] console_unlock+0xa1/0x330 [ 236.057145][T13326] vprintk_emit+0x388/0x650 [ 236.061651][T13326] vprintk_default+0x26/0x30 [ 236.066249][T13326] vprintk+0x1d/0x30 [ 236.070165][T13326] _printk+0x79/0xa0 [ 236.074072][T13326] __ext4_msg+0x135/0x1a0 [ 236.078407][T13326] ext4_parse_param+0x7c1/0xf10 [ 236.083263][T13326] vfs_parse_fs_param+0x13f/0x2a0 [ 236.088297][T13326] vfs_parse_monolithic_sep+0x18a/0x200 [ 236.093860][T13326] generic_parse_monolithic+0x24/0x30 [ 236.099250][T13326] parse_monolithic_mount_data+0x46/0x60 [ 236.104907][T13326] do_new_mount+0x1da/0x680 [ 236.109434][T13326] path_mount+0x4a4/0xb20 [ 236.113781][T13326] __se_sys_mount+0x28f/0x2e0 [ 236.118480][T13326] __x64_sys_mount+0x67/0x80 [ 236.123074][T13326] x64_sys_call+0xd36/0x2fb0 [ 236.127673][T13326] do_syscall_64+0xd2/0x200 [ 236.132178][T13326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.138077][T13326] [ 236.140402][T13326] value changed: 0x00000000000026b9 -> 0x00000000000026ba [ 236.147510][T13326] [ 236.149839][T13326] Reported by Kernel Concurrency Sanitizer on: [ 236.155997][T13326] CPU: 1 UID: 0 PID: 13326 Comm: syz.6.3375 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 236.168510][T13326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.178575][T13326] ================================================================== [ 236.186941][T13326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.193932][T13316] EXT4-fs (loop5): 1 orphan inode deleted [ 236.201692][ T8892] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 236.216678][ T8892] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:17: Failed to release dquot type 0 [ 236.229567][T13316] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.3371: Invalid inode table block 1 in block_group 0 [ 236.229693][T13316] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 236.244084][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3377'. [ 236.252761][T13316] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.3371: mark_inode_dirty error [ 236.295527][T13316] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3371'. [ 236.334183][T13335] pimreg: entered allmulticast mode [ 236.365436][T13333] pimreg: left allmulticast mode [ 236.499999][T13320] vhci_hcd: connection reset by peer [ 236.505930][ T9081] vhci_hcd: stop threads [ 236.510244][ T9081] vhci_hcd: release socket [ 236.514751][ T9081] vhci_hcd: disconnect device [ 236.519606][ T3413] usb 9-1: enqueue for inactive port 0 [ 236.525211][ T3413] usb 9-1: enqueue for inactive port 0 [ 236.601671][ T3413] vhci_hcd: vhci_device speed not set [ 239.641160][ T3399] usb 17-1: enqueue for inactive port 0 [ 239.646770][ T3399] usb 17-1: enqueue for inactive port 0 [ 239.731124][ T3399] vhci_hcd: vhci_device speed not set