last executing test programs: 47.82965568s ago: executing program 4 (id=76): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711035000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:sudo_exec_t:s0\x00', 0x21, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r3, 0x26, 0x0, @val=@tracing={0x0, 0x5}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={0x1d, r6, 0x2, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x0, 0xc, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) (fail_nth: 4) 47.501398982s ago: executing program 4 (id=82): set_mempolicy(0x4005, &(0x7f0000000580)=0x7, 0x7) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x500, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0xa5d7}, 0x408, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000005, 0x13, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x20050800) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc, 0xa04, @loopback, @loopback}, "fa0d25319b7ec895"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r5, 0x4b47, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 47.163459394s ago: executing program 4 (id=85): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000220702500000000202020207b1af8ff00000000bfa1000000000065a1010000f8ffffffb702000000000000b70300000000000085000000720000009500000000000000", @ANYRES32=0x0, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000140)=ANY=[@ANYBLOB="5595e425f9c60180c200000186dd6007118200641100fc010000000000000000000000000001ff02000000000000000000000000000100000e22004d90"], 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x90) r3 = socket$inet(0x2, 0x801, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r3, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r6, 0x0, 0x7ffff000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000640)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000e17e1b2b3b0900000018e50000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 47.108166025s ago: executing program 4 (id=88): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000280)="$eJzs3T9o3FYcB/Cf7k9d16a47VIo/QOllNZg3KFQ6NIuLRhKMaUU2oJLKZ2CHXBssvkyZcmQzEnwlMWEbHEyhiwmSyCrk3hwlgwxGWIyJMMFne7C+Xwmjs93CtbnA7L09J70nkDfZ3mQHEBhjUXEDxFRjojxiKhGRNLe4LNsGWsWl4fXZiLq9d8eJ412WTnTOm4kImoR8V1EpVW3uPrX5tP1n788s1D94tLqn8ODur52W5sbv2xf/PX01alvFkvNfaPNdft1HKaky75KEvF+Pzp7QySVvEfAfkyfvHI3zf0HEfF5I//VKDUje3b+rZvV+PrCXseee3Tno0GOFTh89Xo1/R1YqwOFU2o8AyeliYjItkuliYnsGf5eOYljc/Mnxv+fW5j9L++ZCjgESS37u3fjp+tD10Y68v+wnOV/X77t80iBvkjz//v0yv10e7uc92iAgfg4W6X5H/9n6auQfygc+Yfikn8oLvmHI+CA2ZV/KC75h+KSfzjCqq2NWtdq+Yfikn8oro785/I+LpCP9vwDAMVSH8r7DWQgL3nPPwAAAAAAAAAAAAAAAAAAwG7Lw2szrWVQfd46H7H1Y0RUdvY/1KgtN/4fccTbjZ/vPEnSZi8l2WE9+fvTHk/Qo8s5v3397oN8+7/9SX/Oe2pncc9v2y3NRtTSxpOVyu77P2nefwf33ivqq//22MFrSjrK3/8x2P47PV/Jt/+p9Ygb6fwz2W3+K8WHjXX3+We0/RPLB3T8WY8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGBeBAAA//9hymrI") sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x4084) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') set_mempolicy(0x4005, &(0x7f0000000000)=0x7, 0x5) (async) set_mempolicy(0x4005, &(0x7f0000000000)=0x7, 0x5) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x10, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r5, 0x0, 0x2}, 0x18) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0), &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4b6, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000740), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000900)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000640)={0x1, &(0x7f00000005c0)=[{0x4, 0x4c, 0x7, 0x2}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r8}, 0x10) socket(0xa, 0x1, 0x0) 47.000363625s ago: executing program 4 (id=91): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731187000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x34}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000040)="76386ded0900be010000000000000f9e147583dd22c9ca904b", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x2c, 0x29, 0x0, @empty, @local, {[@srh={0x87, 0x2, 0x4, 0x1, 0x8, 0x40, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0xffffffff, 0x9752333b9a87418, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) 46.676104908s ago: executing program 4 (id=96): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x34}}, 0x0) 46.650413268s ago: executing program 32 (id=96): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x34}}, 0x0) 40.615116784s ago: executing program 5 (id=186): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 40.560496814s ago: executing program 5 (id=189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 40.522235154s ago: executing program 5 (id=191): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 40.265718216s ago: executing program 5 (id=193): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x30b}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4000040) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x40800) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000907f0000000000e509baed00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x4}, 0x18) (async) r8 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1451a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x70e0}, 0x124061, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r8, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2f9, &(0x7f00000002c0)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x3516, 0xadde, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x331bf331, 0xb, {{0x27, 0x4, 0x1, 0x37, 0x9c, 0x67, 0x0, 0x9, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp_prespec={0x44, 0x1c, 0x16, 0x3, 0x1, [{@loopback}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x4}]}, @rr={0x7, 0x13, 0x1d, [@rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast]}, @timestamp_prespec={0x44, 0x44, 0x4e, 0x3, 0xc, [{@broadcast, 0xea0}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x2}, {@broadcast, 0x5}, {@rand_addr=0x64010101}, {@local, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@loopback, 0x37}, {@private=0xa010100, 0x6}]}, @generic={0x7, 0x10, "e9b3bb0c2986a0abf5c9757515b2"}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 40.167857137s ago: executing program 5 (id=196): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r3, 0xffffffffffffffff, 0x10000000000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) 36.738570933s ago: executing program 5 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109700000000007b0ae8ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x1}, 0x19082, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r3, 0x400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 36.682898233s ago: executing program 33 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109700000000007b0ae8ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x1}, 0x19082, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r3, 0x400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 29.890941185s ago: executing program 1 (id=361): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 29.860036545s ago: executing program 1 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)={0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0xfffa}]}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000014ec8a3f86e75ca03f000000021f4800", @ANYRES32=r7, @ANYBLOB="08000200e0000001080008004c060000"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x20400) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000a00)="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", &(0x7f0000000000)=""/92, &(0x7f0000000200)="7e2e9ee6e06294303d79e38435a83531e20781aa3876dbd293c33b5d14afd88f6447df4dfd7b56fe20df44dc4e3b5a47f637efaeceb21710485c95d4c32bc94d7696b0806d2434b6d88232e9c41505eeefed43ae3adee0ca7e0bb6a5b94ecc90debe3bc876d671303efc0d70b94bc986254c102806d421da7cd78506eb2e942a7c983a75afc9905d21746e773067946df742cc1e010e1445d7c721a3e6fda07fd7c48511476e02184261b990a08c3c6b6ada4f48f510b028eaca075c05cf59ffe5cb3d765c77a7b993f97084339572b917be389e2e90fc7f8119788687444d", &(0x7f0000000740)="06938cb15e984122b4ef34487f08b14a0b60bb9dbf0dc29730976da553a4f517407a910d5c0619dfb0bf317047de7caf98067a9375266618f43e5508b9913b816d3c1d7c31ee6fbfd33b695a17bd05e7fc02e75634dd5336dc0f31df0b39b8a065", 0x4, r8}, 0x38) socket$netlink(0x10, 0x3, 0x8000000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 29.408816798s ago: executing program 1 (id=374): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 29.13510324s ago: executing program 1 (id=377): mkdir(&(0x7f0000000000)='./file0\x00', 0xc) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x1}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendto$unix(r2, &(0x7f0000000380)="6955ad2d904ae88525bb687f5ad8c9ec68b661e84b718d13eab9ea0174ede8cfd01c5368b27d405c60328847bedf2f8dd0d9a5b1b80d8e9ff2ed2b568ee29517bbda5a6f476335ba0b007ca3491705d41b9578ce8cdc604804728c12773e1583ae9a1acb88eb9e881d9155f01da3bd842ee178caead40c281412b6d9513d6e1d842eb6437a6fbcd8065779e0a638093482dd9206048452ca1928314f5c969b815dd30ae70a6072681cb4aeedfa4df81bb2409e22080919380c99c45f619bbe5187b48082e7ba83f8510a88082e1a41a2bf7a62d5c51c4b5738d1ff6b5441736325d213b2b918a8a648a272ec649d5a318e4936", 0xf3, 0x0, &(0x7f0000000080)=@file={0x0, './file0/file0\x00'}, 0x6e) 28.714570503s ago: executing program 1 (id=386): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0xffff0000, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 28.514543425s ago: executing program 1 (id=390): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 28.514153745s ago: executing program 34 (id=390): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 2.935477027s ago: executing program 3 (id=1034): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (fail_nth: 4) 2.57299063s ago: executing program 3 (id=1048): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 2.57188075s ago: executing program 3 (id=1050): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x1ff, 0x4) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff800000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x5, 0x6, 0x800002, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="3d4077e50823258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db1790111e7", 0x20}, {&(0x7f0000000240)="b28231adddba8ed6f23bf98ca8caa015ab797f57353ec4ceacbd4995a9a6", 0x1e}], 0x2, 0x0) epoll_create(0x2) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x40) r6 = epoll_create1(0x80000) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000004c0)=@ethtool_dump={0x40, 0x545ee402, 0x231}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fbdbdf252800000005002e000f0000000c002d000200aaaaaaaaaaaa05002b000300000008000200", @ANYRES32=r10], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40850) ioctl$RTC_PIE_ON(r7, 0x7005) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) epoll_pwait(r6, &(0x7f0000000140)=[{}], 0x1, 0x1, 0x0, 0x0) 2.452156422s ago: executing program 3 (id=1061): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 2.426654872s ago: executing program 3 (id=1062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 2.405497532s ago: executing program 3 (id=1064): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x200000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x0, 0x7ffc0001}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) sysfs$2(0x2, 0xfffffffffffffffc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'ip6gre0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x25, &(0x7f0000000200)={@local, @empty, @private=0xa110101}, 0xc) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 1.759087217s ago: executing program 2 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000"], 0x48) mbind(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0xad5, 0x0) close(r1) clock_nanosleep(0x2, 0x1, 0x0, 0xfffffffffffffffe) r2 = syz_clone(0x24261080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") prctl$PR_SET_CHILD_SUBREAPER(0x24, 0xffffffffffffffff) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x2a020400) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000dc0)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x24, 0x0, @fd_index=0x8, 0x400, {}, 0x4, 0x4, 0x1, {0x0, 0x0, r0}}) io_uring_enter(0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x1000000) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xc8, &(0x7f0000010140), &(0x7f00000001c0)=0x4) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001b40)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0x100000000000}, 0x18) 1.594648118s ago: executing program 7 (id=1079): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000181401000000000003000000080001000000000008000300"], 0x20}, 0x1, 0xf00, 0x0, 0x40000}, 0x4000004) rt_sigaction(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, {[0x16]}}, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000200)=0x4, 0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2}}}}]}, 0x4c}}, 0x0) 1.551266699s ago: executing program 7 (id=1080): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfffff92a, @loopback, 0xfffffffa}}, 0x8, 0x0, 0x7, 0x9, 0x1}, &(0x7f0000000140)=0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x1d, 0xff, 0x1, 0xa, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7, 0xfffffffd, 0x9}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000007c0)={r0, 0x9, 0x1, 0x8000000000000000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x61a, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, &(0x7f0000000000), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_clone(0x82004000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 1.294720451s ago: executing program 2 (id=1082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 1.214348291s ago: executing program 2 (id=1086): openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x62, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x2c, 0x29, 0x0, @empty, @local, {[@srh={0x87, 0x2, 0x4, 0x1, 0x8, 0x40, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) unlink(0x0) 1.213042701s ago: executing program 6 (id=1087): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731187000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x34}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000040)="76386ded0900be010000000000000f9e147583dd22c9ca904b", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x2c, 0x29, 0x0, @empty, @local, {[@srh={0x87, 0x2, 0x4, 0x1, 0x8, 0x40, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0xffffffff, 0x9752333b9a87418, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) 1.154778871s ago: executing program 7 (id=1088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 1.133316951s ago: executing program 7 (id=1090): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write(r2, 0x0, 0x0) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[], 0x18}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) readlink(0x0, &(0x7f0000001580)=""/84, 0x54) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = io_uring_setup(0x5ef3, &(0x7f00000002c0)={0x0, 0xe69, 0x0, 0x1, 0x1}) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xe5000067) close_range(r5, 0xffffffffffffffff, 0x0) 1.123734752s ago: executing program 0 (id=1091): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="00000004000000ff0f000005"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xffffffffffffffff, 0x800800000003}, 0x1100, 0x5dd8, 0x1, 0x5, 0x0, 0x7, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040600) fchmod(r0, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x2}, 0xb) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000200)=':', 0x1}], 0x1, 0x2) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 1.042681772s ago: executing program 2 (id=1092): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 476.376836ms ago: executing program 2 (id=1093): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}}, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3e, 0x0, &(0x7f00007d0000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x276, &(0x7f00000003c0)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000009e00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 419.910627ms ago: executing program 6 (id=1094): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 359.216737ms ago: executing program 6 (id=1095): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 270.429158ms ago: executing program 0 (id=1096): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) sendmmsg(r1, 0x0, 0x0, 0x0) 246.140578ms ago: executing program 6 (id=1097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 229.497888ms ago: executing program 6 (id=1098): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 158.417199ms ago: executing program 6 (id=1099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000101000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, 0x0, &(0x7f00000002c0)=r2}, 0x21) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x6, 0x1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'veth1\x00', {0x2, 0x0, @multicast1}}) r5 = socket$netlink(0x10, 0x3, 0x0) clock_nanosleep(0xfffffffd, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "ce4fa63b8eab3f09b5611b25b06bab7c64b45713d27da1fc4a8f698eb43006005e5f65991c3a1e6f89550928b713582f37d43e4b35a9daa5950501438c9c4199"}, 0x48, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) nanosleep(&(0x7f00000001c0), 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800008001801ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00100000000d010028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) unshare(0x44040200) 158.139358ms ago: executing program 0 (id=1100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 117.401749ms ago: executing program 0 (id=1101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 113.535009ms ago: executing program 7 (id=1102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) 96.223899ms ago: executing program 2 (id=1103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r1, 0x8000000000000001, 0xff3}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0xfdef, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x2}}}}}}, 0x0) 69.780359ms ago: executing program 7 (id=1104): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731187000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x34}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e55", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000040)="76386ded0900be010000000000000f9e147583dd22c9ca904b", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x2c, 0x29, 0x0, @empty, @local, {[@srh={0x87, 0x2, 0x4, 0x1, 0x8, 0x40, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0xffffffff, 0x9752333b9a87418, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) 68.467919ms ago: executing program 0 (id=1105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r1, 0x8000000000000001, 0xff3}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0xfdef, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x2}}}}}}, 0x0) 0s ago: executing program 0 (id=1106): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1}}, {{@in, 0x4d2, 0x6c}, 0x0, @in6=@dev, 0xffffffff}}, 0xe8) (async) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @random="21e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0xb7, 0xb}}}}}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) (async, rerun: 32) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) preadv2(r4, &(0x7f0000000180)=[{0x0}, {&(0x7f00000008c0)=""/222, 0xde}], 0x2, 0xfffffffa, 0xc2, 0x6) (async) linkat(0xffffffffffffffff, 0x0, r4, 0x0, 0x0) (async) iopl(0x3) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') pread64(r5, &(0x7f0000001240)=""/102384, 0xffffffffffffffd2, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000800)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x8102, &(0x7f0000000880), 0x7, 0x50a, &(0x7f00000001c0)="$eJzs3d9rY1kdAPDvvW3mZ9d00Yd1wbW4K51FJ2m37m7xYXcF0acFdX2vpU1LadqUJp2dlkW6+AcIMqjgk0++CP4BgsyfIMKAvouKIs6M8+CLRm5yM9PExHZq0mDz+cBpzrkn937PScnNOTmX3AAm1lxEvBcR70bE6xFRzLeneYrjdsqe9/jRR2tZSqLZ/OBvSST5ts6xkvzxZr7btYj41tcj4mGz2Ru3fni0vVqtVvbzcrmxs1euHx7d3tpZ3axsVnaXlhbfWn57+c3lhXP37c6J/GxEvPPVP/3w+z/72ju/+uKHv1/5y63vJnn/o6cfw9R+TQqt16JjOiL2RxFsDKby/hSywr1xtwYAgNOk+Rjuc63xfzGmWqM5AAAA4DJpvjvTWrtpAgAAAJdWGhEzkaSl/FqAmUjTUql9De+n4kZardUbX9ioHeyuZ3URs1FIN7aqlYX8WuHZKCRZeTG/xrZTfqOnvBQRL0bEveL1Vrm0Vquuj/vLDwAAAJgQN3vm/0+K7fn/maQjbhwAAAAwPLPjbgAAAAAwcub/AAAAcPmZ/wMAAMCl9o33389Ss3P/6/U7hwfbtTu31yv17dLOwVpprba/V9qs1TZbv9m3c9rxqrXa3pdi9+BuuVGpN8r1w6OVndrBbmNlq+sW2AAAAMAFevGz93+XRMTxl6+3UiQRV/K6wpjbBozWc/2E5x+f5q6Moi3AxZoadwOAsZkedwOAsTHHB5JT6gdevPPr4bcFAAAYjflP96z/h/V/mBRu4QmTy/o/TK4+6/8uCYAJUTACgIk3+vX/ZvO5GgQAAAzdTCslaSlfC5yJNC2VIl5o3RagkGxsVSsLEfGJiPhtsXA1Ky+29kxOnTMAAAAAAAAAAAAAAAAAAAAAAAAAAG3NZhLNc3hynp0AAACAsYhI/5zk9/+aL7420/v9wJXkH8XWY0R8+JMPfnR3tdHYX8y2P3y6vfHjfPsbp3zZ4GbjAAAAMDrTz7KdeXpnHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw/T40UdrnXSRcf/6lYiY7Rd/Oq61Hq9FISJu/D2J6RP7JRExNYT4xx9HxEv94idZs2I2b0Vv/DQiro85/s0hxIdJdj87/7zX7/2Xxlzrsf/7bzpP/6uT57/sdHAyfuf8NzXg/PfCGWO8/OAX5YHxP454ebr/+acTPxkQ/9WBEa92lb7z7aOjQc9s/jRivu/nT9IVq9zY2SvXD49ub+2sblY2K7tLS4tvLb+9/ObyQnljq1rJ//aN8YPP/PJfrUzav/83BsSfPaX/rw3sf7d/Prj76JPtbKFf/Fuvdsefy+teGhA/zT/7Pp/ns/r5Tv64nT/plZ//5pU8+x8fWVn89QH9P+3/f+uM/X/9m9/7wxmfCgBcgPrh0fZqtVrZH3lmrn9VZ0R0Uc2QOX8mGfIBV4rt//tUdFd1hv7nP3I2lcqO0F2VDVvH/Rr+32TGd04CAABG49mg/wxP7lpwvzq6RgEAAAAAAAAAAAAAAAAAAMCEuYifE+uNeTyergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Ff/DgAA//+L5Mex") kernel console output (not intermixed with test programs): 47.630221][ T3376] net_ratelimit: 11 callbacks suppressed [ 47.630239][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.772646][ T4407] loop2: detected capacity change from 0 to 512 [ 47.821427][ T4407] EXT4-fs (loop2): 1 orphan inode deleted [ 47.827603][ T4407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.840641][ T3431] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 47.860267][ T4407] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.882183][ T4411] FAULT_INJECTION: forcing a failure. [ 47.882183][ T4411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.895295][ T4411] CPU: 1 UID: 0 PID: 4411 Comm: syz.3.245 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 47.895397][ T4411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.895411][ T4411] Call Trace: [ 47.895418][ T4411] [ 47.895426][ T4411] dump_stack_lvl+0xf2/0x150 [ 47.895487][ T4411] dump_stack+0x15/0x1a [ 47.895514][ T4411] should_fail_ex+0x24a/0x260 [ 47.895557][ T4411] should_fail+0xb/0x10 [ 47.895652][ T4411] should_fail_usercopy+0x1a/0x20 [ 47.895732][ T4411] _copy_from_user+0x1c/0xa0 [ 47.895754][ T4411] copy_msghdr_from_user+0x54/0x2a0 [ 47.895794][ T4411] ? __fget_files+0x17c/0x1c0 [ 47.895883][ T4411] do_recvmmsg+0x256/0x6d0 [ 47.896003][ T4411] __x64_sys_recvmmsg+0xe2/0x170 [ 47.896040][ T4411] x64_sys_call+0x2a9a/0x2dc0 [ 47.896096][ T4411] do_syscall_64+0xc9/0x1c0 [ 47.896131][ T4411] ? clear_bhb_loop+0x55/0xb0 [ 47.896165][ T4411] ? clear_bhb_loop+0x55/0xb0 [ 47.896199][ T4411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.896297][ T4411] RIP: 0033:0x7f2c4436d169 [ 47.896313][ T4411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.896360][ T4411] RSP: 002b:00007f2c42995038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 47.896381][ T4411] RAX: ffffffffffffffda RBX: 00007f2c44586160 RCX: 00007f2c4436d169 [ 47.896397][ T4411] RDX: 0000000000000001 RSI: 0000400000000880 RDI: 0000000000000004 [ 47.896412][ T4411] RBP: 00007f2c42995090 R08: 0000000000000000 R09: 0000000000000000 [ 47.896424][ T4411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.896437][ T4411] R13: 0000000000000001 R14: 00007f2c44586160 R15: 00007ffca0d66f98 [ 47.896460][ T4411] [ 48.083026][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.092792][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.103421][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.120538][ T3431] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.192852][ T3431] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.285184][ T3431] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.314985][ T4418] IPv4: Oversized IP packet from 127.202.26.0 [ 48.388883][ T3431] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.427133][ T4442] loop0: detected capacity change from 0 to 512 [ 48.454636][ T4442] EXT4-fs (loop0): 1 orphan inode deleted [ 48.463637][ T4442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.476946][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 48.489952][ T4442] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.501344][ T4436] hub 9-0:1.0: USB hub found [ 48.507390][ T4436] hub 9-0:1.0: 8 ports detected [ 48.535097][ T4446] loop1: detected capacity change from 0 to 1024 [ 48.546713][ T3431] bridge_slave_1: left allmulticast mode [ 48.552466][ T4436] hub 4-0:1.0: USB hub found [ 48.556023][ T4436] hub 4-0:1.0: 8 ports detected [ 48.557148][ T3431] bridge_slave_1: left promiscuous mode [ 48.557342][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.597376][ T4446] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.608397][ T4446] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 48.623568][ T3431] bridge_slave_0: left allmulticast mode [ 48.629334][ T3431] bridge_slave_0: left promiscuous mode [ 48.635246][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.643115][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.643609][ T4446] JBD2: no valid journal superblock found [ 48.657882][ T4446] EXT4-fs (loop1): Could not load journal inode [ 48.856688][ T4474] FAULT_INJECTION: forcing a failure. [ 48.856688][ T4474] name failslab, interval 1, probability 0, space 0, times 0 [ 48.869586][ T4474] CPU: 0 UID: 0 PID: 4474 Comm: syz.3.263 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 48.869626][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.869640][ T4474] Call Trace: [ 48.869649][ T4474] [ 48.869658][ T4474] dump_stack_lvl+0xf2/0x150 [ 48.869692][ T4474] dump_stack+0x15/0x1a [ 48.869746][ T4474] should_fail_ex+0x24a/0x260 [ 48.869787][ T4474] should_failslab+0x8f/0xb0 [ 48.869823][ T4474] __kmalloc_node_noprof+0xad/0x410 [ 48.869848][ T4474] ? __kvmalloc_node_noprof+0x72/0x170 [ 48.869890][ T4474] __kvmalloc_node_noprof+0x72/0x170 [ 48.869976][ T4474] xt_alloc_table_info+0x3d/0x80 [ 48.870009][ T4474] do_ip6t_set_ctl+0x678/0x8c0 [ 48.870041][ T4474] ? kstrtouint+0x77/0xc0 [ 48.870077][ T4474] nf_setsockopt+0x195/0x1b0 [ 48.870100][ T4474] ipv6_setsockopt+0x10f/0x130 [ 48.870158][ T4474] tcp_setsockopt+0x93/0xb0 [ 48.870195][ T4474] sock_common_setsockopt+0x64/0x80 [ 48.870233][ T4474] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 48.870291][ T4474] __sys_setsockopt+0x187/0x200 [ 48.870319][ T4474] __x64_sys_setsockopt+0x66/0x80 [ 48.870376][ T4474] x64_sys_call+0x282e/0x2dc0 [ 48.870405][ T4474] do_syscall_64+0xc9/0x1c0 [ 48.870442][ T4474] ? clear_bhb_loop+0x55/0xb0 [ 48.870502][ T4474] ? clear_bhb_loop+0x55/0xb0 [ 48.870574][ T4474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.870605][ T4474] RIP: 0033:0x7f2c4436d169 [ 48.870621][ T4474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.870642][ T4474] RSP: 002b:00007f2c429d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 48.870664][ T4474] RAX: ffffffffffffffda RBX: 00007f2c44585fa0 RCX: 00007f2c4436d169 [ 48.870736][ T4474] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 48.870748][ T4474] RBP: 00007f2c429d7090 R08: 0000000000000468 R09: 0000000000000000 [ 48.870759][ T4474] R10: 0000400000000740 R11: 0000000000000246 R12: 0000000000000001 [ 48.870771][ T4474] R13: 0000000000000000 R14: 00007f2c44585fa0 R15: 00007ffca0d66f98 [ 48.870791][ T4474] [ 49.156964][ T4479] FAULT_INJECTION: forcing a failure. [ 49.156964][ T4479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.170218][ T4479] CPU: 0 UID: 0 PID: 4479 Comm: syz.3.265 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 49.170245][ T4479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.170259][ T4479] Call Trace: [ 49.170268][ T4479] [ 49.170314][ T4479] dump_stack_lvl+0xf2/0x150 [ 49.170341][ T4479] dump_stack+0x15/0x1a [ 49.170362][ T4479] should_fail_ex+0x24a/0x260 [ 49.170426][ T4479] should_fail+0xb/0x10 [ 49.170460][ T4479] should_fail_usercopy+0x1a/0x20 [ 49.170496][ T4479] copy_to_user_nofault+0x7d/0x110 [ 49.170588][ T4479] bpf_probe_write_user+0x80/0xc0 [ 49.170626][ T4479] bpf_prog_19072b5a3fcf5d64+0x41/0x45 [ 49.170653][ T4479] bpf_trace_run3+0x10c/0x1d0 [ 49.170681][ T4479] ? audit_log_untrustedstring+0xd6/0x130 [ 49.170726][ T4479] ? audit_log_end+0x1d0/0x1e0 [ 49.170786][ T4479] ? audit_log_end+0x1d0/0x1e0 [ 49.170805][ T4479] kmem_cache_free+0x237/0x2d0 [ 49.170834][ T4479] audit_log_end+0x1d0/0x1e0 [ 49.170857][ T4479] audit_seccomp+0x107/0x130 [ 49.170951][ T4479] __seccomp_filter+0x6fa/0x1180 [ 49.170980][ T4479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.171065][ T4479] ? vfs_write+0x644/0x920 [ 49.171091][ T4479] ? putname+0xcf/0xf0 [ 49.171110][ T4479] ? __rcu_read_unlock+0x4e/0x70 [ 49.171198][ T4479] __secure_computing+0x9f/0x1c0 [ 49.171282][ T4479] syscall_trace_enter+0xd1/0x1f0 [ 49.171306][ T4479] ? fpregs_assert_state_consistent+0x83/0xa0 [ 49.171328][ T4479] do_syscall_64+0xaa/0x1c0 [ 49.171365][ T4479] ? clear_bhb_loop+0x55/0xb0 [ 49.171478][ T4479] ? clear_bhb_loop+0x55/0xb0 [ 49.171508][ T4479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.171541][ T4479] RIP: 0033:0x7f2c4436bb7c [ 49.171558][ T4479] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.171579][ T4479] RSP: 002b:00007f2c429d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.171600][ T4479] RAX: ffffffffffffffda RBX: 00007f2c44585fa0 RCX: 00007f2c4436bb7c [ 49.171651][ T4479] RDX: 000000000000000f RSI: 00007f2c429d70a0 RDI: 0000000000000005 [ 49.171662][ T4479] RBP: 00007f2c429d7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.171673][ T4479] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 49.171685][ T4479] R13: 0000000000000000 R14: 00007f2c44585fa0 R15: 00007ffca0d66f98 [ 49.171706][ T4479] [ 49.180403][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.425739][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.434413][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.455717][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.470858][ T3431] bond0 (unregistering): Released all slaves [ 49.557931][ T4500] loop2: detected capacity change from 0 to 1024 [ 49.566313][ T4501] loop3: detected capacity change from 0 to 1024 [ 49.576617][ T3431] hsr_slave_0: left promiscuous mode [ 49.576954][ T4503] FAULT_INJECTION: forcing a failure. [ 49.576954][ T4503] name failslab, interval 1, probability 0, space 0, times 0 [ 49.594731][ T4503] CPU: 0 UID: 0 PID: 4503 Comm: syz.1.274 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 49.594758][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.594772][ T4503] Call Trace: [ 49.594781][ T4503] [ 49.594790][ T4503] dump_stack_lvl+0xf2/0x150 [ 49.594861][ T4503] dump_stack+0x15/0x1a [ 49.594881][ T4503] should_fail_ex+0x24a/0x260 [ 49.594913][ T4503] should_failslab+0x8f/0xb0 [ 49.594998][ T4503] kmem_cache_alloc_noprof+0x52/0x320 [ 49.595025][ T4503] ? security_file_alloc+0x32/0x100 [ 49.595060][ T4503] security_file_alloc+0x32/0x100 [ 49.595093][ T4503] init_file+0x5d/0x1b0 [ 49.595155][ T4503] alloc_empty_file+0xea/0x200 [ 49.595180][ T4503] alloc_file_pseudo+0xc9/0x160 [ 49.595234][ T4503] __shmem_file_setup+0x1bb/0x1f0 [ 49.595269][ T4503] shmem_file_setup+0x3b/0x50 [ 49.595287][ T4503] __se_sys_memfd_create+0x2e1/0x5a0 [ 49.595350][ T4503] __x64_sys_memfd_create+0x31/0x40 [ 49.595380][ T4503] x64_sys_call+0x2d4c/0x2dc0 [ 49.595451][ T4503] do_syscall_64+0xc9/0x1c0 [ 49.595490][ T4503] ? clear_bhb_loop+0x55/0xb0 [ 49.595553][ T4503] ? clear_bhb_loop+0x55/0xb0 [ 49.595586][ T4503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.595617][ T4503] RIP: 0033:0x7f0a9dfed169 [ 49.595635][ T4503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.595670][ T4503] RSP: 002b:00007f0a9c656d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 49.595713][ T4503] RAX: ffffffffffffffda RBX: 00000000000005c9 RCX: 00007f0a9dfed169 [ 49.595736][ T4503] RDX: 00007f0a9c656dec RSI: 0000000000000000 RDI: 00007f0a9e06ec3c [ 49.595749][ T4503] RBP: 0000400000000880 R08: 00007f0a9c656b07 R09: 0000000000000000 [ 49.595762][ T4503] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 49.595776][ T4503] R13: 00007f0a9c656dec R14: 00007f0a9c656df0 R15: 00007ffe0d6822e8 [ 49.595860][ T4503] [ 49.595912][ T3431] hsr_slave_1: left promiscuous mode [ 49.597939][ T4501] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.607029][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.616731][ T4501] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.619027][ T4501] JBD2: no valid journal superblock found [ 49.620244][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.623266][ T4501] EXT4-fs (loop3): Could not load journal inode [ 49.628128][ T4500] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.855672][ T4500] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.866512][ T4500] JBD2: no valid journal superblock found [ 49.872401][ T4500] EXT4-fs (loop2): Could not load journal inode [ 49.880222][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.887735][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.951094][ T3431] veth1_macvtap: left promiscuous mode [ 49.959524][ T3431] veth0_macvtap: left promiscuous mode [ 49.965125][ T3431] veth1_vlan: left promiscuous mode [ 49.976967][ T3431] veth0_vlan: left promiscuous mode [ 50.052366][ T4525] FAULT_INJECTION: forcing a failure. [ 50.052366][ T4525] name failslab, interval 1, probability 0, space 0, times 0 [ 50.065062][ T4525] CPU: 1 UID: 0 PID: 4525 Comm: syz.0.283 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 50.065169][ T4525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.065181][ T4525] Call Trace: [ 50.065188][ T4525] [ 50.065198][ T4525] dump_stack_lvl+0xf2/0x150 [ 50.065232][ T4525] dump_stack+0x15/0x1a [ 50.065258][ T4525] should_fail_ex+0x24a/0x260 [ 50.065290][ T4525] ? bpf_prog_alloc_no_stats+0xc3/0x380 [ 50.065499][ T4525] should_failslab+0x8f/0xb0 [ 50.065534][ T4525] __kmalloc_cache_noprof+0x4e/0x320 [ 50.065630][ T4525] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 50.065661][ T4525] bpf_prog_alloc_no_stats+0xc3/0x380 [ 50.065732][ T4525] bpf_prog_alloc+0x3a/0x150 [ 50.065767][ T4525] bpf_prog_load+0x4d0/0x1050 [ 50.065812][ T4525] __sys_bpf+0x463/0x7a0 [ 50.065850][ T4525] __x64_sys_bpf+0x43/0x50 [ 50.065875][ T4525] x64_sys_call+0x2914/0x2dc0 [ 50.065957][ T4525] do_syscall_64+0xc9/0x1c0 [ 50.066074][ T4525] ? clear_bhb_loop+0x55/0xb0 [ 50.066104][ T4525] ? clear_bhb_loop+0x55/0xb0 [ 50.066135][ T4525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.066160][ T4525] RIP: 0033:0x7f52ca96d169 [ 50.066242][ T4525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.066265][ T4525] RSP: 002b:00007f52c8fd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.066363][ T4525] RAX: ffffffffffffffda RBX: 00007f52cab85fa0 RCX: 00007f52ca96d169 [ 50.066376][ T4525] RDX: 0000000000000094 RSI: 0000400000000500 RDI: 0000000000000005 [ 50.066388][ T4525] RBP: 00007f52c8fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 50.066399][ T4525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.066411][ T4525] R13: 0000000000000000 R14: 00007f52cab85fa0 R15: 00007ffe9e989278 [ 50.066428][ T4525] [ 50.259429][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.335038][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 50.347427][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 50.376891][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.395243][ T4531] capability: warning: `syz.0.285' uses 32-bit capabilities (legacy support in use) [ 50.440440][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.458600][ T4530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4530 comm=syz.0.285 [ 50.505987][ T4542] loop3: detected capacity change from 0 to 1024 [ 50.518859][ T4530] netlink: 132 bytes leftover after parsing attributes in process `syz.0.285'. [ 50.520770][ T4542] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.538907][ T4542] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.556162][ T4542] JBD2: no valid journal superblock found [ 50.562313][ T4542] EXT4-fs (loop3): Could not load journal inode [ 50.567612][ T4422] chnl_net:caif_netlink_parms(): no params data found [ 50.599495][ T4549] loop1: detected capacity change from 0 to 2048 [ 50.622201][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 50.632822][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 50.661671][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 50.671379][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.712797][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.720055][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.729533][ T4422] bridge_slave_0: entered allmulticast mode [ 50.751333][ T4422] bridge_slave_0: entered promiscuous mode [ 50.758321][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.765537][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.768691][ T4562] FAULT_INJECTION: forcing a failure. [ 50.768691][ T4562] name failslab, interval 1, probability 0, space 0, times 0 [ 50.772776][ T4422] bridge_slave_1: entered allmulticast mode [ 50.785221][ T4562] CPU: 0 UID: 0 PID: 4562 Comm: syz.3.298 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 50.785246][ T4562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.785258][ T4562] Call Trace: [ 50.785264][ T4562] [ 50.785271][ T4562] dump_stack_lvl+0xf2/0x150 [ 50.785310][ T4562] dump_stack+0x15/0x1a [ 50.785345][ T4562] should_fail_ex+0x24a/0x260 [ 50.785388][ T4562] should_failslab+0x8f/0xb0 [ 50.785428][ T4562] kmem_cache_alloc_noprof+0x52/0x320 [ 50.785456][ T4562] ? skb_clone+0x154/0x1f0 [ 50.785570][ T4562] skb_clone+0x154/0x1f0 [ 50.785602][ T4562] __netlink_deliver_tap+0x2bd/0x4f0 [ 50.785651][ T4562] netlink_unicast+0x64a/0x670 [ 50.785758][ T4562] netlink_sendmsg+0x5cc/0x6e0 [ 50.785804][ T4562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.785905][ T4562] __sock_sendmsg+0x140/0x180 [ 50.785946][ T4562] ____sys_sendmsg+0x326/0x4b0 [ 50.786030][ T4562] __sys_sendmsg+0x19d/0x230 [ 50.786101][ T4562] __x64_sys_sendmsg+0x46/0x50 [ 50.786133][ T4562] x64_sys_call+0x2734/0x2dc0 [ 50.786167][ T4562] do_syscall_64+0xc9/0x1c0 [ 50.786206][ T4562] ? clear_bhb_loop+0x55/0xb0 [ 50.786284][ T4562] ? clear_bhb_loop+0x55/0xb0 [ 50.786318][ T4562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.786448][ T4562] RIP: 0033:0x7f2c4436d169 [ 50.786517][ T4562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.786539][ T4562] RSP: 002b:00007f2c429d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.786603][ T4562] RAX: ffffffffffffffda RBX: 00007f2c44585fa0 RCX: 00007f2c4436d169 [ 50.786620][ T4562] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003 [ 50.786635][ T4562] RBP: 00007f2c429d7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.786649][ T4562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.786664][ T4562] R13: 0000000000000000 R14: 00007f2c44585fa0 R15: 00007ffca0d66f98 [ 50.786686][ T4562] [ 50.791654][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 50.813069][ T4422] bridge_slave_1: entered promiscuous mode [ 51.037581][ T4422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.050569][ T4422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.088905][ T4422] team0: Port device team_slave_0 added [ 51.096378][ T4422] team0: Port device team_slave_1 added [ 51.119351][ T4577] loop1: detected capacity change from 0 to 512 [ 51.127240][ T4422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.134292][ T4422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.162147][ T4422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.205389][ T4422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.212441][ T4422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.238469][ T4422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.257276][ T4577] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 51.267610][ T4577] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.276010][ T4577] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.292340][ T4577] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 51.299600][ T4577] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.301: bg 0: block 40: padding at end of block bitmap is not set [ 51.314097][ T4577] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 51.330635][ T4577] EXT4-fs (loop1): 1 truncate cleaned up [ 51.331656][ T4422] hsr_slave_0: entered promiscuous mode [ 51.342552][ T4422] hsr_slave_1: entered promiscuous mode [ 51.345005][ T4577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.362713][ T4577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.401411][ T4577] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 51.487775][ T4422] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.514054][ T4422] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.536184][ T4422] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 51.567077][ T4422] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 51.634662][ T4422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.646176][ T4422] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.659018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.666139][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.690257][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.697387][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.723219][ T4422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.733668][ T4422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.794173][ T4422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.983654][ T4422] veth0_vlan: entered promiscuous mode [ 51.993093][ T4422] veth1_vlan: entered promiscuous mode [ 52.008760][ T4627] FAULT_INJECTION: forcing a failure. [ 52.008760][ T4627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.012112][ T4422] veth0_macvtap: entered promiscuous mode [ 52.021987][ T4627] CPU: 0 UID: 0 PID: 4627 Comm: syz.0.317 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 52.022040][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.022057][ T4627] Call Trace: [ 52.022064][ T4627] [ 52.022073][ T4627] dump_stack_lvl+0xf2/0x150 [ 52.022110][ T4627] dump_stack+0x15/0x1a [ 52.022211][ T4627] should_fail_ex+0x24a/0x260 [ 52.022257][ T4627] should_fail+0xb/0x10 [ 52.022292][ T4627] should_fail_usercopy+0x1a/0x20 [ 52.022332][ T4627] _copy_from_iter+0xd5/0xd00 [ 52.022388][ T4627] ? __alloc_skb+0x1b5/0x310 [ 52.022414][ T4627] ? kmalloc_reserve+0x16e/0x190 [ 52.022441][ T4627] ? __build_skb_around+0x196/0x1f0 [ 52.022507][ T4627] ? __alloc_skb+0x21f/0x310 [ 52.022531][ T4627] ? __virt_addr_valid+0x1ed/0x250 [ 52.022563][ T4627] ? __check_object_size+0x364/0x520 [ 52.022596][ T4627] netlink_sendmsg+0x460/0x6e0 [ 52.022673][ T4627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.022716][ T4627] __sock_sendmsg+0x140/0x180 [ 52.022796][ T4627] ____sys_sendmsg+0x326/0x4b0 [ 52.022833][ T4627] __sys_sendmsg+0x19d/0x230 [ 52.022960][ T4627] __x64_sys_sendmsg+0x46/0x50 [ 52.023043][ T4627] x64_sys_call+0x2734/0x2dc0 [ 52.023086][ T4627] do_syscall_64+0xc9/0x1c0 [ 52.023126][ T4627] ? clear_bhb_loop+0x55/0xb0 [ 52.023160][ T4627] ? clear_bhb_loop+0x55/0xb0 [ 52.023274][ T4627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.023308][ T4627] RIP: 0033:0x7f52ca96d169 [ 52.023327][ T4627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.023349][ T4627] RSP: 002b:00007f52c8fd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.023372][ T4627] RAX: ffffffffffffffda RBX: 00007f52cab85fa0 RCX: 00007f52ca96d169 [ 52.023441][ T4627] RDX: 0000000000000000 RSI: 0000400000001200 RDI: 0000000000000006 [ 52.023458][ T4627] RBP: 00007f52c8fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 52.023473][ T4627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.023547][ T4627] R13: 0000000000000000 R14: 00007f52cab85fa0 R15: 00007ffe9e989278 [ 52.023570][ T4627] [ 52.085405][ T4628] loop2: detected capacity change from 0 to 512 [ 52.124434][ T4422] veth1_macvtap: entered promiscuous mode [ 52.278574][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 52.278651][ T30] audit: type=1326 audit(1742042902.451:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ca96d169 code=0x7ffc0000 [ 52.317131][ T4628] EXT4-fs (loop2): 1 orphan inode deleted [ 52.323747][ T4628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.329250][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.340506][ T51] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 52.346672][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.356416][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 52.356571][ T30] audit: type=1326 audit(1742042902.451:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52ca96d169 code=0x7ffc0000 [ 52.366507][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.377921][ T30] audit: type=1326 audit(1742042902.451:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ca96d169 code=0x7ffc0000 [ 52.401188][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.401205][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.401224][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.411691][ T30] audit: type=1326 audit(1742042902.451:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ca96d169 code=0x7ffc0000 [ 52.435005][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.435024][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.444832][ T30] audit: type=1326 audit(1742042902.451:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52ca96d169 code=0x7ffc0000 [ 52.535119][ T30] audit: type=1326 audit(1742042902.451:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ca96d169 code=0x7ffc0000 [ 52.536015][ T4422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.558473][ T30] audit: type=1326 audit(1742042902.451:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ca96d169 code=0x7ffc0000 [ 52.589055][ T30] audit: type=1326 audit(1742042902.451:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f52ca96d169 code=0x7ffc0000 [ 52.612452][ T30] audit: type=1326 audit(1742042902.451:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ca96d169 code=0x7ffc0000 [ 52.631842][ T4422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.643496][ T4628] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.663866][ T4422] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.672725][ T4422] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.681587][ T4422] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.690351][ T4422] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.749570][ T4650] loop1: detected capacity change from 0 to 512 [ 52.768883][ T4650] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.322: bg 0: block 393: padding at end of block bitmap is not set [ 52.771407][ T4653] netdevsim netdevsim6: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 52.827984][ T4653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=4653 comm=syz.6.249 [ 52.841902][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.249'. [ 52.842190][ T4650] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 52.850882][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.871360][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.884468][ T4650] EXT4-fs (loop1): 2 truncates cleaned up [ 52.892718][ T4650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.927417][ T4625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.937071][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 52.951489][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.035743][ T4666] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 53.048066][ T4670] loop1: detected capacity change from 0 to 512 [ 53.105620][ T4676] FAULT_INJECTION: forcing a failure. [ 53.105620][ T4676] name failslab, interval 1, probability 0, space 0, times 0 [ 53.118461][ T4676] CPU: 1 UID: 0 PID: 4676 Comm: syz.3.332 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 53.118493][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.118507][ T4676] Call Trace: [ 53.118514][ T4676] [ 53.118522][ T4676] dump_stack_lvl+0xf2/0x150 [ 53.118555][ T4676] dump_stack+0x15/0x1a [ 53.118581][ T4676] should_fail_ex+0x24a/0x260 [ 53.118630][ T4676] should_failslab+0x8f/0xb0 [ 53.118667][ T4676] kmem_cache_alloc_node_noprof+0x59/0x320 [ 53.118747][ T4676] ? __alloc_skb+0x10b/0x310 [ 53.118770][ T4676] __alloc_skb+0x10b/0x310 [ 53.118793][ T4676] ? audit_log_start+0x34c/0x6b0 [ 53.118835][ T4676] audit_log_start+0x368/0x6b0 [ 53.118890][ T4676] ? kmem_cache_free+0xdc/0x2d0 [ 53.118915][ T4676] audit_seccomp+0x4b/0x130 [ 53.118985][ T4676] __seccomp_filter+0x6fa/0x1180 [ 53.119024][ T4676] __secure_computing+0x9f/0x1c0 [ 53.119067][ T4676] syscall_trace_enter+0xd1/0x1f0 [ 53.119090][ T4676] ? fpregs_assert_state_consistent+0x83/0xa0 [ 53.119114][ T4676] do_syscall_64+0xaa/0x1c0 [ 53.119156][ T4676] ? clear_bhb_loop+0x55/0xb0 [ 53.119186][ T4676] ? clear_bhb_loop+0x55/0xb0 [ 53.119233][ T4676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.119266][ T4676] RIP: 0033:0x7f2c4436bb7c [ 53.119283][ T4676] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.119335][ T4676] RSP: 002b:00007f2c429d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.119397][ T4676] RAX: ffffffffffffffda RBX: 00007f2c44585fa0 RCX: 00007f2c4436bb7c [ 53.119409][ T4676] RDX: 000000000000000f RSI: 00007f2c429d70a0 RDI: 0000000000000003 [ 53.119422][ T4676] RBP: 00007f2c429d7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.119436][ T4676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.119449][ T4676] R13: 0000000000000000 R14: 00007f2c44585fa0 R15: 00007ffca0d66f98 [ 53.119466][ T4676] [ 53.364077][ T4680] loop3: detected capacity change from 0 to 1024 [ 53.371244][ T4680] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.382423][ T4680] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 53.398492][ T4680] JBD2: no valid journal superblock found [ 53.404303][ T4680] EXT4-fs (loop3): Could not load journal inode [ 53.426060][ T4670] EXT4-fs (loop1): 1 orphan inode deleted [ 53.433546][ T4670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.449111][ T4670] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.469145][ T4598] net_ratelimit: 4 callbacks suppressed [ 53.469161][ T4598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.473353][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 53.495119][ T4670] vhci_hcd: invalid port number 254 [ 53.502261][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.534301][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.550758][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.712644][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.751824][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.765592][ T4711] loop3: detected capacity change from 0 to 512 [ 53.850588][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.871373][ T4719] loop1: detected capacity change from 0 to 2048 [ 53.906632][ T4719] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 53.916461][ T4719] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.937997][ T4711] EXT4-fs (loop3): 1 orphan inode deleted [ 53.990445][ T4711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.003394][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 54.023805][ T4711] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.111994][ T4719] EXT4-fs (loop1): failed to initialize system zone (-117) [ 54.140788][ T4719] EXT4-fs (loop1): mount failed [ 54.151032][ T4711] vhci_hcd: invalid port number 254 [ 54.211451][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.375911][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.384195][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.520189][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.620265][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.757287][ T4685] syz.0.337 (4685) used greatest stack depth: 6272 bytes left [ 54.836522][ T4747] netdevsim netdevsim2: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 54.930793][ T4743] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 54.939189][ T4743] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 54.959569][ T4747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=4747 comm=syz.2.360 [ 54.974988][ T4743] wireguard0: entered promiscuous mode [ 54.980565][ T4743] wireguard0: entered allmulticast mode [ 54.995463][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 55.029213][ T4759] vlan2: entered allmulticast mode [ 55.049972][ T4760] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 55.077295][ T4762] netdevsim netdevsim1: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 55.104804][ T4729] IPv6: Can't replace route, no match found [ 55.125728][ T4729] loop3: detected capacity change from 0 to 2048 [ 55.137044][ T4766] FAULT_INJECTION: forcing a failure. [ 55.137044][ T4766] name failslab, interval 1, probability 0, space 0, times 0 [ 55.150173][ T4766] CPU: 0 UID: 0 PID: 4766 Comm: syz.0.366 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 55.150203][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.150217][ T4766] Call Trace: [ 55.150222][ T4766] [ 55.150266][ T4766] dump_stack_lvl+0xf2/0x150 [ 55.150297][ T4766] dump_stack+0x15/0x1a [ 55.150407][ T4766] should_fail_ex+0x24a/0x260 [ 55.150523][ T4766] ? v9fs_mount+0x53/0x570 [ 55.150560][ T4766] should_failslab+0x8f/0xb0 [ 55.150655][ T4766] __kmalloc_cache_noprof+0x4e/0x320 [ 55.150760][ T4766] v9fs_mount+0x53/0x570 [ 55.150785][ T4766] ? __pfx_v9fs_mount+0x10/0x10 [ 55.150806][ T4766] legacy_get_tree+0x77/0xd0 [ 55.150853][ T4766] vfs_get_tree+0x56/0x1e0 [ 55.150958][ T4766] do_new_mount+0x227/0x690 [ 55.150994][ T4766] path_mount+0x49b/0xb30 [ 55.151034][ T4766] __se_sys_mount+0x27f/0x2d0 [ 55.151105][ T4766] ? fput+0x1c4/0x200 [ 55.151131][ T4766] __x64_sys_mount+0x67/0x80 [ 55.151166][ T4766] x64_sys_call+0x2c84/0x2dc0 [ 55.151196][ T4766] do_syscall_64+0xc9/0x1c0 [ 55.151325][ T4766] ? clear_bhb_loop+0x55/0xb0 [ 55.151360][ T4766] ? clear_bhb_loop+0x55/0xb0 [ 55.151391][ T4766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.151433][ T4766] RIP: 0033:0x7f52ca96d169 [ 55.151449][ T4766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.151470][ T4766] RSP: 002b:00007f52c8fd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.151492][ T4766] RAX: ffffffffffffffda RBX: 00007f52cab85fa0 RCX: 00007f52ca96d169 [ 55.151505][ T4766] RDX: 00004000000002c0 RSI: 0000400000000080 RDI: 0000000000000000 [ 55.151519][ T4766] RBP: 00007f52c8fd1090 R08: 0000400000000400 R09: 0000000000000000 [ 55.151533][ T4766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.151620][ T4766] R13: 0000000000000000 R14: 00007f52cab85fa0 R15: 00007ffe9e989278 [ 55.151642][ T4766] [ 55.357844][ T4729] Alternate GPT is invalid, using primary GPT. [ 55.364286][ T4729] loop3: p1 p2 p3 [ 55.368307][ T4771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=4771 comm=syz.1.364 [ 55.418780][ T4762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 55.469509][ T4783] FAULT_INJECTION: forcing a failure. [ 55.469509][ T4783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.482759][ T4783] CPU: 1 UID: 0 PID: 4783 Comm: syz.6.373 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 55.482789][ T4783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.482804][ T4783] Call Trace: [ 55.482812][ T4783] [ 55.482820][ T4783] dump_stack_lvl+0xf2/0x150 [ 55.482848][ T4783] dump_stack+0x15/0x1a [ 55.482922][ T4783] should_fail_ex+0x24a/0x260 [ 55.482956][ T4783] should_fail+0xb/0x10 [ 55.483057][ T4783] should_fail_usercopy+0x1a/0x20 [ 55.483094][ T4783] _copy_from_iter+0xd5/0xd00 [ 55.483173][ T4783] ? __alloc_skb+0x1b5/0x310 [ 55.483198][ T4783] ? kmalloc_reserve+0x16e/0x190 [ 55.483220][ T4783] ? __build_skb_around+0x196/0x1f0 [ 55.483243][ T4783] ? __alloc_skb+0x21f/0x310 [ 55.483280][ T4783] ? __virt_addr_valid+0x1ed/0x250 [ 55.483330][ T4783] ? __check_object_size+0x364/0x520 [ 55.483361][ T4783] netlink_sendmsg+0x460/0x6e0 [ 55.483494][ T4783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.483536][ T4783] __sock_sendmsg+0x140/0x180 [ 55.483573][ T4783] ____sys_sendmsg+0x326/0x4b0 [ 55.483604][ T4783] __sys_sendmsg+0x19d/0x230 [ 55.483673][ T4783] __x64_sys_sendmsg+0x46/0x50 [ 55.483761][ T4783] x64_sys_call+0x2734/0x2dc0 [ 55.483794][ T4783] do_syscall_64+0xc9/0x1c0 [ 55.483833][ T4783] ? clear_bhb_loop+0x55/0xb0 [ 55.483866][ T4783] ? clear_bhb_loop+0x55/0xb0 [ 55.483895][ T4783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.483957][ T4783] RIP: 0033:0x7f92ab8dd169 [ 55.483981][ T4783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.484072][ T4783] RSP: 002b:00007f92a9f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.484092][ T4783] RAX: ffffffffffffffda RBX: 00007f92abaf5fa0 RCX: 00007f92ab8dd169 [ 55.484134][ T4783] RDX: 0000000000000000 RSI: 0000400000001200 RDI: 0000000000000004 [ 55.484146][ T4783] RBP: 00007f92a9f47090 R08: 0000000000000000 R09: 0000000000000000 [ 55.484162][ T4783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.484175][ T4783] R13: 0000000000000000 R14: 00007f92abaf5fa0 R15: 00007ffe442f50f8 [ 55.484197][ T4783] [ 55.975937][ T4814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.380'. [ 56.023486][ T4819] netdevsim netdevsim0: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 56.116856][ T4821] loop3: detected capacity change from 0 to 1024 [ 56.141194][ T4821] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.152359][ T4821] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.187881][ T4821] JBD2: no valid journal superblock found [ 56.193762][ T4821] EXT4-fs (loop3): Could not load journal inode [ 56.200406][ T4819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=4819 comm=syz.0.384 [ 56.226037][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 56.280426][ T4826] Invalid ELF header magic: != ELF [ 56.296489][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 56.306286][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.313747][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.321262][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.328679][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.336198][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.343615][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.351052][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.358571][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.366017][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.373515][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.380957][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.388374][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.395858][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.403342][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.410817][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.418226][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.425785][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 56.437913][ T3373] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 56.442570][ T4826] bond1: entered promiscuous mode [ 56.452734][ T4826] bond1: entered allmulticast mode [ 56.486944][ T4839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.392'. [ 56.496094][ T4839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.392'. [ 56.512195][ T4833] geneve2: entered promiscuous mode [ 56.517582][ T4833] geneve2: entered allmulticast mode [ 56.524434][ T4833] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 56.534622][ T4839] xt_hashlimit: max too large, truncated to 1048576 [ 56.571211][ T4840] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 56.579932][ T4840] geneve2: left promiscuous mode [ 56.585015][ T4840] geneve2: left allmulticast mode [ 56.645485][ T4840] bond1 (unregistering): Released all slaves [ 56.732075][ T1767] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.864059][ T1767] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.046526][ T1767] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.058722][ T4857] netdevsim netdevsim3: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 57.089213][ T4864] FAULT_INJECTION: forcing a failure. [ 57.089213][ T4864] name failslab, interval 1, probability 0, space 0, times 0 [ 57.101955][ T4864] CPU: 0 UID: 0 PID: 4864 Comm: syz.0.396 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 57.102027][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.102091][ T4864] Call Trace: [ 57.102097][ T4864] [ 57.102105][ T4864] dump_stack_lvl+0xf2/0x150 [ 57.102139][ T4864] dump_stack+0x15/0x1a [ 57.102161][ T4864] should_fail_ex+0x24a/0x260 [ 57.102252][ T4864] ? alloc_pipe_info+0xb0/0x360 [ 57.102288][ T4864] should_failslab+0x8f/0xb0 [ 57.102324][ T4864] __kmalloc_cache_noprof+0x4e/0x320 [ 57.102355][ T4864] alloc_pipe_info+0xb0/0x360 [ 57.102435][ T4864] splice_direct_to_actor+0x60f/0x670 [ 57.102466][ T4864] ? __pfx_direct_splice_actor+0x10/0x10 [ 57.102492][ T4864] ? 0xffffffff81000000 [ 57.102506][ T4864] ? selinux_file_permission+0x22a/0x360 [ 57.102537][ T4864] ? __rcu_read_unlock+0x4e/0x70 [ 57.102568][ T4864] ? avc_policy_seqno+0x15/0x20 [ 57.102619][ T4864] ? selinux_file_permission+0x22a/0x360 [ 57.102650][ T4864] do_splice_direct+0xd7/0x150 [ 57.102679][ T4864] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 57.102764][ T4864] do_sendfile+0x398/0x660 [ 57.102793][ T4864] __x64_sys_sendfile64+0x110/0x150 [ 57.102871][ T4864] x64_sys_call+0xfbd/0x2dc0 [ 57.102953][ T4864] do_syscall_64+0xc9/0x1c0 [ 57.102989][ T4864] ? clear_bhb_loop+0x55/0xb0 [ 57.103018][ T4864] ? clear_bhb_loop+0x55/0xb0 [ 57.103101][ T4864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.103161][ T4864] RIP: 0033:0x7f52ca96d169 [ 57.103175][ T4864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.103192][ T4864] RSP: 002b:00007f52c8fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 57.103228][ T4864] RAX: ffffffffffffffda RBX: 00007f52cab86080 RCX: 00007f52ca96d169 [ 57.103241][ T4864] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 57.103252][ T4864] RBP: 00007f52c8fb0090 R08: 0000000000000000 R09: 0000000000000000 [ 57.103263][ T4864] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 57.103275][ T4864] R13: 0000000000000001 R14: 00007f52cab86080 R15: 00007ffe9e989278 [ 57.103292][ T4864] [ 57.152367][ T4867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=4867 comm=syz.3.397 [ 57.548289][ T4835] chnl_net:caif_netlink_parms(): no params data found [ 57.586907][ T1767] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.822250][ T4835] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.829345][ T4835] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.836608][ T4835] bridge_slave_0: entered allmulticast mode [ 57.843377][ T4835] bridge_slave_0: entered promiscuous mode [ 57.868582][ T4835] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.875947][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.890032][ T4835] bridge_slave_1: entered allmulticast mode [ 57.896608][ T4835] bridge_slave_1: entered promiscuous mode [ 57.923185][ T30] kauditd_printk_skb: 334 callbacks suppressed [ 57.923202][ T30] audit: type=1326 audit(1742042908.101:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 57.953637][ T30] audit: type=1326 audit(1742042908.101:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 57.977596][ T30] audit: type=1326 audit(1742042908.101:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 58.001219][ T30] audit: type=1326 audit(1742042908.101:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 58.024793][ T30] audit: type=1326 audit(1742042908.101:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 58.054547][ T4835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.119881][ T30] audit: type=1400 audit(1742042908.291:1300): avc: denied { execute } for pid=4875 comm="syz.3.400" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 58.157421][ T30] audit: type=1400 audit(1742042908.331:1301): avc: denied { ioctl } for pid=4875 comm="syz.3.400" path="socket:[8943]" dev="sockfs" ino=8943 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.205173][ T1767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.215488][ T1767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.226828][ T1767] bond0 (unregistering): Released all slaves [ 58.243596][ T4835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.271198][ T4903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.408'. [ 58.289407][ T4835] team0: Port device team_slave_0 added [ 58.298134][ T4835] team0: Port device team_slave_1 added [ 58.309916][ T30] audit: type=1400 audit(1742042908.481:1302): avc: denied { accept } for pid=4902 comm="syz.2.408" lport=39529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 58.396086][ T4909] loop3: detected capacity change from 0 to 512 [ 58.414431][ T1767] hsr_slave_0: left promiscuous mode [ 58.421236][ T1767] hsr_slave_1: left promiscuous mode [ 58.461628][ T1767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.469247][ T1767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.503759][ T30] audit: type=1326 audit(1742042908.671:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ca96d169 code=0x7ffc0000 [ 58.509958][ C0] net_ratelimit: 9 callbacks suppressed [ 58.509996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.527261][ T30] audit: type=1326 audit(1742042908.671:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.0.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ca96d169 code=0x7ffc0000 [ 58.565027][ T4914] netlink: 680 bytes leftover after parsing attributes in process `syz.0.410'. [ 58.568982][ T4909] EXT4-fs (loop3): 1 orphan inode deleted [ 58.580277][ T4909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.594064][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 58.608281][ T1767] veth1_macvtap: left promiscuous mode [ 58.609666][ T4909] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.613893][ T1767] veth0_macvtap: left promiscuous mode [ 58.629873][ T1767] veth1_vlan: left promiscuous mode [ 58.635220][ T1767] veth0_vlan: left promiscuous mode [ 58.683199][ T4909] vhci_hcd: invalid port number 254 [ 58.717796][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.758889][ T4921] loop6: detected capacity change from 0 to 512 [ 58.939005][ T4926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=4926 comm=syz.2.413 [ 58.953727][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 58.966070][ T1767] team0 (unregistering): Port device team_slave_1 removed [ 58.978608][ T1767] team0 (unregistering): Port device team_slave_0 removed [ 59.018428][ T4835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.025544][ T4835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.051620][ T4835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.068175][ T4835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.075319][ T4835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.101301][ T4835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.111943][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.137330][ T4835] hsr_slave_0: entered promiscuous mode [ 59.143590][ T4835] hsr_slave_1: entered promiscuous mode [ 59.149466][ T4835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.157306][ T4835] Cannot create hsr debugfs directory [ 59.174752][ T4921] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.414: bg 0: block 248: padding at end of block bitmap is not set [ 59.189508][ T4921] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.414: Failed to acquire dquot type 1 [ 59.206836][ T4921] EXT4-fs (loop6): 1 truncate cleaned up [ 59.213134][ T4921] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.227499][ T4919] netdevsim netdevsim2: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 59.249963][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.257265][ T4921] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.331373][ T4422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.382145][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 59.387923][ T4835] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 59.398001][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.406247][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.425728][ T4939] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 59.434922][ T4835] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 59.455388][ T4944] netlink: 'syz.0.420': attribute type 11 has an invalid length. [ 59.463437][ T4944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.420'. [ 59.475800][ T4940] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.488299][ T4835] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 59.497574][ T4835] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 59.533560][ T4940] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.551185][ T4952] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.571708][ T4956] vhci_hcd: invalid port number 254 [ 59.681030][ T4940] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.698061][ T4952] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.715724][ T4835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.728523][ T4940] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.744880][ T4835] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.759379][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.766538][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.783175][ T4952] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.795912][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.803028][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.827486][ T4835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.851660][ T4966] SELinux: syz.0.427 (4966) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 59.869887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.894203][ T4952] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.910378][ T4940] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.926643][ T4940] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.941811][ T4940] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.963152][ T4940] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.967771][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.980125][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.988513][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.021655][ T4952] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.041821][ T4835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.052536][ T4952] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.073146][ T4952] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.098776][ T4952] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.254489][ T4835] veth0_vlan: entered promiscuous mode [ 60.281689][ T4835] veth1_vlan: entered promiscuous mode [ 60.308208][ T4835] veth0_macvtap: entered promiscuous mode [ 60.315575][ T4835] veth1_macvtap: entered promiscuous mode [ 60.325933][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.336586][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.346697][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.357340][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.367190][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.377712][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.387797][ T4835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.400635][ T4835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.411799][ T4835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.423837][ T4835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.443770][ T4835] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.452701][ T4835] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.461726][ T4835] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.470584][ T4835] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.491901][ T5012] netdevsim netdevsim6: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 60.537339][ T5012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=5012 comm=syz.6.440 [ 60.648616][ T5028] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.738399][ T5028] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.888856][ T5028] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.993524][ T5034] netlink: 'syz.3.446': attribute type 6 has an invalid length. [ 61.049558][ T5028] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.080483][ T5036] syz.3.447 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.094348][ T5036] sd 0:0:1:0: device reset [ 61.122087][ T5028] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.146676][ T5047] loop3: detected capacity change from 0 to 512 [ 61.157541][ T5028] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.174637][ T5028] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.187461][ T5047] EXT4-fs (loop3): 1 orphan inode deleted [ 61.201126][ T56] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 61.220169][ T5047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.222853][ T5028] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.242224][ T5047] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.290596][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.319223][ T5061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.340854][ T5066] loop3: detected capacity change from 0 to 1024 [ 61.348186][ T5066] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.359164][ T5066] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.372077][ T5066] JBD2: no valid journal superblock found [ 61.377840][ T5066] EXT4-fs (loop3): Could not load journal inode [ 61.413431][ T5068] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 61.466214][ T5082] loop3: detected capacity change from 0 to 1024 [ 61.474398][ T5082] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.485494][ T5082] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.502357][ T5082] JBD2: no valid journal superblock found [ 61.508150][ T5082] EXT4-fs (loop3): Could not load journal inode [ 61.519042][ T5088] FAULT_INJECTION: forcing a failure. [ 61.519042][ T5088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.532445][ T5088] CPU: 0 UID: 0 PID: 5088 Comm: syz.7.464 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 61.532473][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 61.532485][ T5088] Call Trace: [ 61.532491][ T5088] [ 61.532499][ T5088] dump_stack_lvl+0xf2/0x150 [ 61.532575][ T5088] dump_stack+0x15/0x1a [ 61.532597][ T5088] should_fail_ex+0x24a/0x260 [ 61.532630][ T5088] should_fail+0xb/0x10 [ 61.532737][ T5088] should_fail_usercopy+0x1a/0x20 [ 61.532774][ T5088] strncpy_from_user+0x25/0x210 [ 61.532808][ T5088] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 61.532835][ T5088] ? getname_flags+0x81/0x3b0 [ 61.532937][ T5088] getname_flags+0xb0/0x3b0 [ 61.532975][ T5088] getname+0x17/0x20 [ 61.533036][ T5088] __se_sys_newstat+0x4a/0x280 [ 61.533073][ T5088] ? __secure_computing+0x9f/0x1c0 [ 61.533106][ T5088] __x64_sys_newstat+0x31/0x40 [ 61.533130][ T5088] x64_sys_call+0x6eb/0x2dc0 [ 61.533162][ T5088] do_syscall_64+0xc9/0x1c0 [ 61.533301][ T5088] ? clear_bhb_loop+0x55/0xb0 [ 61.533328][ T5088] ? clear_bhb_loop+0x55/0xb0 [ 61.533373][ T5088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.533399][ T5088] RIP: 0033:0x7f7d3e4ed169 [ 61.533414][ T5088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.533432][ T5088] RSP: 002b:00007f7d3cb30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 61.533450][ T5088] RAX: ffffffffffffffda RBX: 00007f7d3e706080 RCX: 00007f7d3e4ed169 [ 61.533462][ T5088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000140 [ 61.533473][ T5088] RBP: 00007f7d3cb30090 R08: 0000000000000000 R09: 0000000000000000 [ 61.533485][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.533544][ T5088] R13: 0000000000000000 R14: 00007f7d3e706080 R15: 00007ffde1f14878 [ 61.533563][ T5088] [ 61.784534][ T5096] loop3: detected capacity change from 0 to 2048 [ 61.801637][ T5096] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002] [ 61.810564][ T5096] System zones: 0-4 [ 61.814894][ T5096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-450800000000 r/w without journal. Quota mode: none. [ 61.819121][ T5101] loop7: detected capacity change from 0 to 1024 [ 61.827530][ T5096] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.836206][ T5101] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.854770][ T5101] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.865895][ T5101] JBD2: no valid journal superblock found [ 61.871817][ T5101] EXT4-fs (loop7): Could not load journal inode [ 61.905571][ T5096] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.472: corrupted xattr block 128: bad e_name length [ 61.923059][ T5096] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 61.947387][ T5096] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.472: corrupted xattr block 128: bad e_name length [ 61.966273][ T5113] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 61.974637][ T5096] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 61.984602][ T5096] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.472: corrupted xattr block 128: bad e_name length [ 61.998794][ T5096] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 62.025213][ T5117] loop6: detected capacity change from 0 to 512 [ 62.051456][ T5117] EXT4-fs (loop6): 1 orphan inode deleted [ 62.060397][ T5117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.079303][ T5117] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.091192][ T56] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 62.104582][ T5128] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 62.138279][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-450800000000. [ 62.167763][ T5130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=5130 comm=syz.0.484 [ 62.190064][ T5130] __nla_validate_parse: 2 callbacks suppressed [ 62.190083][ T5130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 62.209095][ T4422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.294600][ T5158] netlink: 118396 bytes leftover after parsing attributes in process `gtp'. [ 62.395454][ T5157] loop6: detected capacity change from 0 to 128 [ 62.404902][ T5157] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.418670][ T5157] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.463450][ T5179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=5179 comm=syz.3.502 [ 62.477049][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 62.569814][ T5190] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.632455][ T5190] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.713500][ T5194] loop3: detected capacity change from 0 to 256 [ 62.786933][ T5194] SELinux: security_context_str_to_sid (•) failed with errno=-22 [ 63.104784][ T5190] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.134049][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 63.134065][ T30] audit: type=1400 audit(1742042913.317:1480): avc: denied { watch } for pid=5201 comm="syz.7.508" path="/6/file0" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.167817][ T5202] loop7: detected capacity change from 0 to 256 [ 63.196212][ T5190] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.333136][ T4422] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.396288][ T30] audit: type=1400 audit(1742042913.577:1481): avc: denied { view } for pid=5208 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 63.436438][ T5218] loop6: detected capacity change from 0 to 512 [ 63.452671][ T30] audit: type=1400 audit(1742042913.637:1482): avc: denied { write } for pid=5219 comm="syz.3.514" name="fib_trie" dev="proc" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.502948][ T5218] EXT4-fs (loop6): 1 orphan inode deleted [ 63.509367][ T5218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.523120][ T56] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 63.532935][ T56] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 63.545940][ T5218] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.574353][ T4422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.592712][ T5225] netdevsim netdevsim6: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 63.624890][ T5225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=5225 comm=syz.6.515 [ 63.637938][ T3375] net_ratelimit: 36 callbacks suppressed [ 63.637954][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.638803][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.515'. [ 63.643697][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.668892][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.686667][ T5229] loop6: detected capacity change from 0 to 1024 [ 63.693728][ T5229] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.704663][ T5229] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.716940][ T5229] JBD2: no valid journal superblock found [ 63.722792][ T5229] EXT4-fs (loop6): Could not load journal inode [ 63.914266][ T30] audit: type=1400 audit(1742042914.089:1483): avc: denied { getopt } for pid=5241 comm="syz.6.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.940740][ T30] audit: type=1400 audit(1742042914.120:1484): avc: denied { write } for pid=5241 comm="syz.6.522" path="socket:[11778]" dev="sockfs" ino=11778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.060106][ T5245] program syz.7.523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.091096][ T5247] loop7: detected capacity change from 0 to 512 [ 64.099103][ T5247] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.114024][ T5247] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.133949][ T5252] loop6: detected capacity change from 0 to 512 [ 64.151532][ T5252] EXT4-fs (loop6): 1 orphan inode deleted [ 64.158066][ T5252] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.164067][ T5256] loop7: detected capacity change from 0 to 512 [ 64.169208][ T56] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.184559][ T56] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 64.206886][ T30] audit: type=1400 audit(1742042914.389:1485): avc: denied { listen } for pid=5257 comm="syz.6.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.208093][ T5258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.226716][ T30] audit: type=1400 audit(1742042914.389:1486): avc: denied { accept } for pid=5257 comm="syz.6.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.234554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.265636][ T30] audit: type=1400 audit(1742042914.461:1487): avc: denied { append } for pid=5257 comm="syz.6.527" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.291114][ T5256] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.308149][ T5263] ÿÿÿÿ: renamed from caif0 [ 64.334735][ T4598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.343129][ T5265] loop6: detected capacity change from 0 to 1024 [ 64.350521][ T5265] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.361647][ T5265] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.372945][ T5265] JBD2: no valid journal superblock found [ 64.378733][ T5265] EXT4-fs (loop6): Could not load journal inode [ 64.427959][ T5271] loop3: detected capacity change from 0 to 512 [ 64.442567][ T5271] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 64.457491][ T5271] EXT4-fs (loop3): mount failed [ 64.481814][ T5271] block device autoloading is deprecated and will be removed. [ 64.489526][ T4598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.494772][ T5271] syz.3.531: attempt to access beyond end of device [ 64.494772][ T5271] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 64.653983][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.662257][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.670531][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.077025][ T5190] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.090058][ T5190] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.103448][ T5190] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.114081][ T5290] loop7: detected capacity change from 0 to 128 [ 65.148867][ T5290] syz.7.538: attempt to access beyond end of device [ 65.148867][ T5290] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 65.169358][ T5190] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.220396][ T5295] loop0: detected capacity change from 0 to 1024 [ 65.227514][ T5295] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.238495][ T5295] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.251026][ T5295] JBD2: no valid journal superblock found [ 65.256894][ T5295] EXT4-fs (loop0): Could not load journal inode [ 65.284712][ T5297] netdevsim netdevsim7: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 65.330703][ T5301] loop6: detected capacity change from 0 to 164 [ 65.347522][ T5297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=5297 comm=syz.7.542 [ 65.360768][ T5297] netlink: 4 bytes leftover after parsing attributes in process `syz.7.542'. [ 65.378091][ T5301] Unable to read rock-ridge attributes [ 65.537434][ T5319] netdevsim netdevsim6: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 65.680512][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.552'. [ 65.710811][ T5331] netlink: 16 bytes leftover after parsing attributes in process `syz.7.554'. [ 65.720666][ T5332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=5332 comm=syz.3.551 [ 65.758708][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 65.921448][ T5343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.559'. [ 66.115982][ T5352] loop6: detected capacity change from 0 to 1024 [ 66.123461][ T5352] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.134582][ T5352] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.148894][ T5352] JBD2: no valid journal superblock found [ 66.154811][ T5352] EXT4-fs (loop6): Could not load journal inode [ 66.185876][ T5360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.568'. [ 66.206594][ T5358] sd 0:0:1:0: device reset [ 66.223303][ T5362] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 66.232427][ T5362] bridge1: entered promiscuous mode [ 66.237788][ T5362] bridge1: entered allmulticast mode [ 66.343255][ T5379] loop0: detected capacity change from 0 to 512 [ 66.377972][ T5379] EXT4-fs (loop0): 1 orphan inode deleted [ 66.387743][ T5379] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.399824][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 66.439405][ T5393] loop3: detected capacity change from 0 to 512 [ 66.478877][ T5393] EXT4-fs (loop3): 1 orphan inode deleted [ 66.496099][ T5393] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.508210][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 66.538200][ T5383] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 44896 - 0 [ 66.547170][ T5383] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 44896 - 0 [ 66.556067][ T5383] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 44896 - 0 [ 66.563670][ T5401] loop3: detected capacity change from 0 to 1024 [ 66.564992][ T5383] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 44896 - 0 [ 66.572719][ T5401] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.580319][ T5383] geneve2: entered promiscuous mode [ 66.591322][ T5401] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.596395][ T5383] geneve2: entered allmulticast mode [ 66.616495][ T5401] JBD2: no valid journal superblock found [ 66.622349][ T5401] EXT4-fs (loop3): Could not load journal inode [ 66.820114][ T5428] loop7: detected capacity change from 0 to 1024 [ 66.828075][ T5428] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.839031][ T5428] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.850931][ T5428] JBD2: no valid journal superblock found [ 66.856760][ T5428] EXT4-fs (loop7): Could not load journal inode [ 67.209970][ T5446] loop6: detected capacity change from 0 to 512 [ 67.234102][ T5446] EXT4-fs (loop6): 1 orphan inode deleted [ 67.240648][ T5446] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.252459][ T3431] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 67.307729][ T5456] loop6: detected capacity change from 0 to 512 [ 67.332810][ T5456] EXT4-fs (loop6): 1 orphan inode deleted [ 67.355725][ T5456] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.366891][ T3431] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 67.394960][ T5464] __nla_validate_parse: 12 callbacks suppressed [ 67.394980][ T5464] netlink: 132 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 67.403362][ T5466] loop0: detected capacity change from 0 to 1024 [ 67.417935][ T5466] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.428962][ T5466] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 67.440679][ T5466] JBD2: no valid journal superblock found [ 67.446821][ T5466] EXT4-fs (loop0): Could not load journal inode [ 67.464857][ T5470] mmap: syz.2.609 (5470) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.480135][ T56] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 67.496734][ T5472] loop0: detected capacity change from 0 to 512 [ 67.517118][ T5472] EXT4-fs (loop0): 1 orphan inode deleted [ 67.518746][ T5476] netlink: 40 bytes leftover after parsing attributes in process `syz.6.611'. [ 67.523472][ T5472] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.543033][ T1467] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 67.590811][ T5485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5485 comm=syz.0.615 [ 67.677505][ T5495] loop3: detected capacity change from 0 to 1024 [ 67.686067][ T5495] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.697100][ T5495] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 67.709977][ T5495] JBD2: no valid journal superblock found [ 67.715845][ T5495] EXT4-fs (loop3): Could not load journal inode [ 67.751653][ T5499] sd 0:0:1:0: device reset [ 67.935124][ T5519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5519 comm=syz.6.631 [ 67.937063][ T5521] loop7: detected capacity change from 0 to 512 [ 67.956525][ T5521] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 67.968290][ T5519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5519 comm=syz.6.631 [ 67.980918][ T5519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5519 comm=syz.6.631 [ 68.004302][ T5523] sd 0:0:1:0: device reset [ 68.014971][ T5521] EXT4-fs (loop7): 1 truncate cleaned up [ 68.021271][ T5521] EXT4-fs mount: 16 callbacks suppressed [ 68.021289][ T5521] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.046408][ T30] kauditd_printk_skb: 266 callbacks suppressed [ 68.046499][ T30] audit: type=1400 audit(1742042918.346:1748): avc: denied { ioctl } for pid=5520 comm="syz.7.632" path="/27/file1/cpu.stat" dev="loop7" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.077962][ T30] audit: type=1400 audit(1742042918.366:1749): avc: denied { ioctl } for pid=5520 comm="syz.7.632" path="socket:[12194]" dev="sockfs" ino=12194 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.083090][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.632'. [ 68.103290][ T30] audit: type=1400 audit(1742042918.366:1750): avc: denied { bind } for pid=5520 comm="syz.7.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.174207][ T5537] netlink: 'syz.3.639': attribute type 3 has an invalid length. [ 68.205213][ T5543] loop3: detected capacity change from 0 to 512 [ 68.244332][ T30] audit: type=1326 audit(1742042918.540:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 68.268008][ T30] audit: type=1326 audit(1742042918.540:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 68.291453][ T30] audit: type=1326 audit(1742042918.540:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 68.318484][ T4835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.338141][ T30] audit: type=1326 audit(1742042918.540:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 68.341633][ T5543] EXT4-fs (loop3): 1 orphan inode deleted [ 68.362435][ T30] audit: type=1326 audit(1742042918.540:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 68.391682][ T30] audit: type=1326 audit(1742042918.540:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 68.392484][ T5543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.415364][ T30] audit: type=1326 audit(1742042918.540:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 68.452189][ T56] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 68.473450][ T5557] loop0: detected capacity change from 0 to 1024 [ 68.480568][ T5543] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.492789][ T5557] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.503801][ T5557] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.528854][ T5557] JBD2: no valid journal superblock found [ 68.534709][ T5557] EXT4-fs (loop0): Could not load journal inode [ 68.539510][ T4598] net_ratelimit: 192 callbacks suppressed [ 68.539531][ T4598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.584481][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.599739][ T5572] loop0: detected capacity change from 0 to 512 [ 68.617682][ T5572] EXT4-fs: quotafile must be on filesystem root [ 68.627819][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'. [ 68.640530][ T5580] netlink: 'syz.2.655': attribute type 15 has an invalid length. [ 68.648379][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.655'. [ 68.757412][ T5597] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 68.769167][ T5594] netlink: 24 bytes leftover after parsing attributes in process `syz.7.661'. [ 68.778404][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.876928][ T5607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=5607 comm=syz.3.667 [ 68.892295][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 68.919235][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.668'. [ 68.932534][ T5617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 68.943497][ T5617] netlink: 'syz.3.670': attribute type 9 has an invalid length. [ 68.951991][ T5617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 69.037580][ T5619] vlan2: entered allmulticast mode [ 69.042842][ T5619] team0: entered allmulticast mode [ 69.048083][ T5619] team_slave_0: entered allmulticast mode [ 69.053963][ T5619] team_slave_1: entered allmulticast mode [ 69.065303][ T5619] team0: left allmulticast mode [ 69.070530][ T5619] team_slave_0: left allmulticast mode [ 69.076140][ T5619] team_slave_1: left allmulticast mode [ 69.085999][ T5629] loop3: detected capacity change from 0 to 512 [ 69.096798][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.105244][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.117816][ T5629] EXT4-fs (loop3): 1 orphan inode deleted [ 69.131835][ T5629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.145716][ T56] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 69.145846][ T5629] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.166003][ T4598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.176036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.212451][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.319846][ T5657] loop7: detected capacity change from 0 to 512 [ 69.326331][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.345731][ T5662] netlink: 'syz.6.689': attribute type 1 has an invalid length. [ 69.357028][ T5657] EXT4-fs (loop7): 1 orphan inode deleted [ 69.370569][ T56] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 69.379520][ T5657] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.396265][ T5657] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.491112][ T5683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=5683 comm=syz.3.697 [ 69.509446][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.517886][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.529667][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.557905][ T5656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.573730][ T51] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 69.671962][ T5702] loop3: detected capacity change from 0 to 1024 [ 69.680039][ T5702] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.690987][ T5702] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.715134][ T5702] JBD2: no valid journal superblock found [ 69.721016][ T5702] EXT4-fs (loop3): Could not load journal inode [ 70.593664][ T5770] loop3: detected capacity change from 0 to 1024 [ 70.692204][ T5770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.762510][ T5790] syz.7.731 uses obsolete (PF_INET,SOCK_PACKET) [ 70.984219][ T5797] loop0: detected capacity change from 0 to 1024 [ 70.998382][ T5797] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.009342][ T5797] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.039789][ T5797] JBD2: no valid journal superblock found [ 71.045614][ T5797] EXT4-fs (loop0): Could not load journal inode [ 71.115325][ T5800] nfs: Unexpected value for 'acl' [ 71.331561][ T5828] netdevsim netdevsim6: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 71.428675][ T5828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=5828 comm=syz.6.740 [ 72.196835][ T1767] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 72.226125][ T1767] EXT4-fs (loop3): Remounting filesystem read-only [ 72.243880][ T5968] loop0: detected capacity change from 0 to 1024 [ 72.263671][ T5968] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.274798][ T5968] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 72.292253][ T5968] JBD2: no valid journal superblock found [ 72.298455][ T5968] EXT4-fs (loop0): Could not load journal inode [ 72.305564][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.393501][ T5986] __nla_validate_parse: 4 callbacks suppressed [ 72.393521][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 72.413758][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.755'. [ 72.684729][ T6031] loop3: detected capacity change from 0 to 164 [ 72.709435][ T6031] @: renamed from vlan0 (while UP) [ 72.737508][ T6031] syz.3.766: attempt to access beyond end of device [ 72.737508][ T6031] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 72.779799][ T6031] syz.3.766: attempt to access beyond end of device [ 72.779799][ T6031] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 72.942574][ T6053] loop0: detected capacity change from 0 to 8192 [ 72.971149][ T6059] tipc: Enabling of bearer rejected, failed to enable media [ 73.008523][ T6053] loop0: p2 p3 p4 [ 73.012533][ T6061] loop3: detected capacity change from 0 to 512 [ 73.013310][ T6053] loop0: p2 start 452985600 is beyond EOD, truncated [ 73.025651][ T6053] loop0: p3 size 33554432 extends beyond EOD, truncated [ 73.034855][ T6053] loop0: p4 start 8388607 is beyond EOD, truncated [ 73.087516][ T6061] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.115516][ T6061] EXT4-fs (loop3): 1 truncate cleaned up [ 73.141138][ T6061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.240830][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 73.291185][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.325391][ T6081] loop3: detected capacity change from 0 to 1024 [ 73.332291][ T6081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.343034][ T6081] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.389981][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 73.389998][ T30] audit: type=1326 audit(1742042923.795:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8e9ed169 code=0x7ffc0000 [ 73.450272][ T6081] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 73.458603][ T6081] System zones: 0-1, 3-36 [ 73.482342][ T2964] net_ratelimit: 24 callbacks suppressed [ 73.482359][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.521294][ T6081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.522948][ T30] audit: type=1326 audit(1742042923.826:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea8e9ed169 code=0x7ffc0000 [ 73.557327][ T30] audit: type=1326 audit(1742042923.826:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8e9ed169 code=0x7ffc0000 [ 73.580817][ T30] audit: type=1326 audit(1742042923.826:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8e9ed169 code=0x7ffc0000 [ 73.604411][ T30] audit: type=1326 audit(1742042923.826:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea8e9ed169 code=0x7ffc0000 [ 73.627791][ T30] audit: type=1326 audit(1742042923.826:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8e9ed169 code=0x7ffc0000 [ 73.651209][ T30] audit: type=1326 audit(1742042923.826:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea8e9ed169 code=0x7ffc0000 [ 73.674813][ T30] audit: type=1326 audit(1742042923.836:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8e9ed169 code=0x7ffc0000 [ 73.698232][ T30] audit: type=1326 audit(1742042923.836:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea8e9ed169 code=0x7ffc0000 [ 73.722226][ T30] audit: type=1326 audit(1742042923.836:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6082 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8e9ed169 code=0x7ffc0000 [ 73.752630][ T6079] loop0: detected capacity change from 0 to 512 [ 73.761719][ T6098] vlan0: entered allmulticast mode [ 73.772130][ T6081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.784'. [ 73.782533][ T6079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.784624][ T6081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.784'. [ 73.813551][ T6081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.784'. [ 73.822650][ T6079] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm +}[@: invalid indirect mapped block 83886080 (level 1) [ 73.836272][ T6081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.784'. [ 73.854395][ T6079] EXT4-fs (loop0): 1 orphan inode deleted [ 73.860291][ T6079] EXT4-fs (loop0): 1 truncate cleaned up [ 73.880837][ T6079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.900739][ T6081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.784'. [ 73.943788][ T6081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.784'. [ 73.965102][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.004877][ T6120] netdevsim netdevsim7: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 74.005650][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.050825][ T6120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6120 comm=syz.7.798 [ 74.087030][ T6126] loop3: detected capacity change from 0 to 1024 [ 74.093816][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.798'. [ 74.109787][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.118541][ T6126] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.129498][ T6126] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.143105][ T6120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.151563][ T6126] JBD2: no valid journal superblock found [ 74.157396][ T6126] EXT4-fs (loop3): Could not load journal inode [ 74.180065][ T6131] netdevsim netdevsim6: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 74.183804][ T6136] netlink: 'syz.2.803': attribute type 2 has an invalid length. [ 74.201033][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.215733][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.261926][ T6131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6131 comm=syz.6.801 [ 74.275028][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.345928][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.502882][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.600487][ T6168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6168 comm=syz.2.815 [ 74.685902][ T6180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6180 comm=syz.2.818 [ 74.933806][ T6213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6213 comm=syz.2.829 [ 75.037595][ T6230] netdevsim netdevsim7: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 75.076107][ T6230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6230 comm=syz.7.835 [ 75.130229][ T6237] loop3: detected capacity change from 0 to 1024 [ 75.192645][ T6237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.212025][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.220264][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.290658][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.399414][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.403475][ T6252] netlink: 'syz.7.840': attribute type 1 has an invalid length. [ 75.418833][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.453119][ T6252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.521192][ T6248] veth3: entered promiscuous mode [ 75.553403][ T6248] bond1: (slave veth3): Enslaving as an active interface with a down link [ 75.610192][ T6257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6257 comm=syz.3.843 [ 75.616942][ T6250] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 75.755298][ T6263] IPv6: Can't replace route, no match found [ 75.813352][ T6268] loop3: detected capacity change from 0 to 1024 [ 75.852986][ T6268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.998244][ T6268] sctp: [Deprecated]: syz.3.846 (pid 6268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.998244][ T6268] Use struct sctp_sack_info instead [ 76.045390][ T6279] netdevsim netdevsim7: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 76.100123][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.131032][ T6279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6279 comm=syz.7.849 [ 76.186261][ T6294] sd 0:0:1:0: device reset [ 76.232214][ T6300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6300 comm=syz.7.856 [ 76.605118][ T6341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6341 comm=syz.2.868 [ 76.762473][ T6362] loop0: detected capacity change from 0 to 256 [ 76.769599][ T6362] vfat: Deprecated parameter 'posix' [ 76.774967][ T6362] FAT-fs: "posix" option is obsolete, not supported now [ 76.785066][ T6365] netlink: 'syz.2.877': attribute type 1 has an invalid length. [ 76.785240][ T6362] FAT-fs (loop0): codepage cp775 not found [ 76.863055][ T6375] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 76.876065][ T6356] IPVS: stopping master sync thread 6375 ... [ 76.885286][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.892780][ T6374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.321949][ T6405] ip6t_rpfilter: unknown options [ 77.328890][ T6407] loop0: detected capacity change from 0 to 512 [ 77.336571][ T6398] __nla_validate_parse: 13 callbacks suppressed [ 77.336590][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.890'. [ 77.351915][ T6398] tipc: Started in network mode [ 77.357011][ T6398] tipc: Node identity 100007, cluster identity 4711 [ 77.364430][ T6398] tipc: Node number set to 1048583 [ 77.383907][ T6407] EXT4-fs (loop0): 1 orphan inode deleted [ 77.390464][ T6407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.403048][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 77.419577][ T6407] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.476241][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.897'. [ 77.492852][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.505484][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 77.750398][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 77.803568][ T6454] SELinux: Context system_u:object_r:fuse_device_t:s0 is not valid (left unmapped). [ 77.927655][ T6462] netdevsim netdevsim6: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 78.056562][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.910'. [ 78.077425][ T6472] loop3: detected capacity change from 0 to 512 [ 78.141429][ T6472] EXT4-fs (loop3): 1 orphan inode deleted [ 78.152015][ T6472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.166654][ T1767] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 78.192503][ T6483] @: renamed from vlan0 (while UP) [ 78.229475][ T6472] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.319935][ T6492] loop0: detected capacity change from 0 to 512 [ 78.330152][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.351648][ T6492] EXT4-fs (loop0): 1 orphan inode deleted [ 78.358247][ T6492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.371348][ T56] __quota_error: 172 callbacks suppressed [ 78.371362][ T56] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 78.387204][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 78.408138][ T6492] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.433616][ T6502] sd 0:0:1:0: device reset [ 78.494633][ T6500] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.923'. [ 78.565187][ T30] audit: type=1400 audit(1742042929.041:2026): avc: denied { create } for pid=6507 comm="syz.3.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.602379][ T30] audit: type=1400 audit(1742042929.071:2027): avc: denied { map } for pid=6507 comm="syz.3.926" path="socket:[14564]" dev="sockfs" ino=14564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.626001][ T30] audit: type=1400 audit(1742042929.071:2028): avc: denied { read accept } for pid=6507 comm="syz.3.926" path="socket:[14564]" dev="sockfs" ino=14564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.657223][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.686997][ T1767] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 78.696885][ T1767] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 78.714653][ T6518] loop3: detected capacity change from 0 to 512 [ 78.727491][ T6518] EXT4-fs: Ignoring removed orlov option [ 78.744061][ T6518] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 78.779312][ T2964] kernel write not supported for file /snd/seq (pid: 2964 comm: kworker/0:2) [ 78.859970][ T30] audit: type=1400 audit(1742042929.344:2029): avc: denied { write } for pid=6535 comm="syz.3.937" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 78.935924][ T6543] netlink: 'syz.2.938': attribute type 10 has an invalid length. [ 78.944776][ T6543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.938'. [ 79.048592][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 79.081792][ T6543] team0: Port device geneve1 added [ 79.167250][ T6560] loop3: detected capacity change from 0 to 512 [ 79.195337][ T6560] EXT4-fs (loop3): 1 orphan inode deleted [ 79.201628][ T6560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.215886][ T56] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 79.225734][ T56] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 79.225987][ T6560] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.257945][ T30] audit: type=1400 audit(1742042929.739:2030): avc: denied { create } for pid=6564 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 79.313647][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.327396][ T3374] net_ratelimit: 19 callbacks suppressed [ 79.327415][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.341749][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.396241][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.488400][ T6590] netdevsim netdevsim7: Direct firmware load for ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 79.519241][ T6584] netlink: 40 bytes leftover after parsing attributes in process `syz.6.955'. [ 79.529700][ T30] audit: type=1326 audit(1742042930.002:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.6.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 79.553268][ T30] audit: type=1326 audit(1742042930.002:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.6.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ab8dd169 code=0x7ffc0000 [ 79.618598][ T6590] selinux_netlink_send: 3 callbacks suppressed [ 79.618617][ T6590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6590 comm=syz.7.957 [ 79.652948][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.957'. [ 79.687793][ T6598] netlink: 'syz.6.959': attribute type 1 has an invalid length. [ 79.823681][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.833029][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.028933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.037507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.130749][ T6623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6623 comm=syz.2.970 [ 80.355455][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.363789][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.373109][ T6656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.144765][ T6717] gtp0: entered promiscuous mode [ 81.318484][ T6743] loop3: detected capacity change from 0 to 512 [ 81.325560][ T6743] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.347782][ T6743] EXT4-fs (loop3): 1 truncate cleaned up [ 81.355206][ T6743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.382411][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.550913][ T6756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6756 comm=syz.3.1022 [ 81.590582][ T6762] loop3: detected capacity change from 0 to 1024 [ 81.598172][ T6762] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.609140][ T6762] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 81.620132][ T6762] JBD2: no valid journal superblock found [ 81.625930][ T6762] EXT4-fs (loop3): Could not load journal inode [ 81.683209][ T6766] loop3: detected capacity change from 0 to 164 [ 81.716894][ T3374] IPVS: starting estimator thread 0... [ 81.821033][ T6769] IPVS: using max 2256 ests per chain, 112800 per kthread [ 81.836698][ T6771] loop3: detected capacity change from 0 to 1024 [ 81.843945][ T6771] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.855214][ T6771] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 81.866714][ T6771] JBD2: no valid journal superblock found [ 81.872559][ T6771] EXT4-fs (loop3): Could not load journal inode [ 81.905318][ T6781] loop3: detected capacity change from 0 to 512 [ 81.912283][ T6781] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.923881][ T6781] EXT4-fs (loop3): 1 truncate cleaned up [ 81.931025][ T6781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.957933][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.977565][ T6791] FAULT_INJECTION: forcing a failure. [ 81.977565][ T6791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.991067][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.3.1034 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 81.991099][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.991115][ T6791] Call Trace: [ 81.991122][ T6791] [ 81.991131][ T6791] dump_stack_lvl+0xf2/0x150 [ 81.991167][ T6791] dump_stack+0x15/0x1a [ 81.991211][ T6791] should_fail_ex+0x24a/0x260 [ 81.991243][ T6791] should_fail+0xb/0x10 [ 81.991270][ T6791] should_fail_usercopy+0x1a/0x20 [ 81.991379][ T6791] _copy_from_user+0x1c/0xa0 [ 81.991479][ T6791] __se_sys_mount+0x115/0x2d0 [ 81.991513][ T6791] ? fput+0x1c4/0x200 [ 81.991538][ T6791] ? ksys_write+0x176/0x1b0 [ 81.991574][ T6791] __x64_sys_mount+0x67/0x80 [ 81.991614][ T6791] x64_sys_call+0x2c84/0x2dc0 [ 81.991720][ T6791] do_syscall_64+0xc9/0x1c0 [ 81.991762][ T6791] ? clear_bhb_loop+0x55/0xb0 [ 81.991827][ T6791] ? clear_bhb_loop+0x55/0xb0 [ 81.991864][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.991944][ T6791] RIP: 0033:0x7f2c4436d169 [ 81.991964][ T6791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.991985][ T6791] RSP: 002b:00007f2c429d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.992004][ T6791] RAX: ffffffffffffffda RBX: 00007f2c44585fa0 RCX: 00007f2c4436d169 [ 81.992017][ T6791] RDX: 0000400000000040 RSI: 0000400000000180 RDI: 0000000000000000 [ 81.992030][ T6791] RBP: 00007f2c429d7090 R08: 0000400000000580 R09: 0000000000000000 [ 81.992055][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.992070][ T6791] R13: 0000000000000000 R14: 00007f2c44585fa0 R15: 00007ffca0d66f98 [ 81.992092][ T6791] [ 82.005900][ T6788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60436 sclass=netlink_route_socket pid=6788 comm=syz.2.1033 [ 82.243888][ T6816] ip6t_rpfilter: unknown options [ 82.564626][ T6869] __nla_validate_parse: 7 callbacks suppressed [ 82.564648][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 83.366661][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 83.366677][ T30] audit: type=1400 audit(1742042933.901:2144): avc: denied { getopt } for pid=6890 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 83.463820][ T30] audit: type=1400 audit(1742042933.942:2145): avc: denied { mount } for pid=6890 comm="syz.2.1077" name="/" dev="ramfs" ino=15810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.843818][ T6927] IPv6: Can't replace route, no match found [ 84.230758][ T30] audit: type=1400 audit(1742042934.738:2146): avc: denied { read } for pid=6861 comm="syz.3.1064" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 84.253923][ T30] audit: type=1400 audit(1742042934.749:2147): avc: denied { open } for pid=6861 comm="syz.3.1064" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 84.277640][ T30] audit: type=1326 audit(1742042934.749:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.3.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4436d169 code=0x7ffc0000 [ 84.301314][ T30] audit: type=1326 audit(1742042934.749:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.3.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4436d169 code=0x7ffc0000 [ 84.324855][ T30] audit: type=1326 audit(1742042934.749:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.3.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c4436d169 code=0x7ffc0000 [ 84.348292][ T30] audit: type=1326 audit(1742042934.759:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.3.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4436d169 code=0x7ffc0000 [ 84.371868][ T30] audit: type=1326 audit(1742042934.759:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.3.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4436d169 code=0x7ffc0000 [ 84.395477][ T30] audit: type=1326 audit(1742042934.759:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.3.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c4436d169 code=0x7ffc0000 [ 84.427105][ T2964] net_ratelimit: 83 callbacks suppressed [ 84.427122][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.581252][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.589503][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.598071][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.616410][ T6939] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 84.904296][ T6961] ================================================================== [ 84.912523][ T6961] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 84.920035][ T6961] [ 84.922378][ T6961] write to 0xffff888113e2f700 of 8 bytes by task 6960 on cpu 1: [ 84.930029][ T6961] mas_wmb_replace+0x222/0x14d0 [ 84.934920][ T6961] mas_wr_store_entry+0x1530/0x23f0 [ 84.940162][ T6961] mas_store_prealloc+0x6bf/0x960 [ 84.945227][ T6961] vma_complete+0x3a7/0x760 [ 84.949794][ T6961] __split_vma+0x620/0x6a0 [ 84.954245][ T6961] vma_modify+0x1a2/0x200 [ 84.958595][ T6961] vma_modify_flags+0xf1/0x120 [ 84.963387][ T6961] mprotect_fixup+0x31a/0x5e0 [ 84.968094][ T6961] do_mprotect_pkey+0x6cc/0x9a0 [ 84.973058][ T6961] __x64_sys_mprotect+0x48/0x60 [ 84.977938][ T6961] x64_sys_call+0x2770/0x2dc0 [ 84.982734][ T6961] do_syscall_64+0xc9/0x1c0 [ 84.987298][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.993263][ T6961] [ 84.995601][ T6961] read to 0xffff888113e2f700 of 8 bytes by task 6961 on cpu 0: [ 85.003176][ T6961] mtree_range_walk+0x33d/0x460 [ 85.008080][ T6961] mas_walk+0x16e/0x320 [ 85.012279][ T6961] lock_vma_under_rcu+0x95/0x270 [ 85.017240][ T6961] exc_page_fault+0x150/0x650 [ 85.021960][ T6961] asm_exc_page_fault+0x26/0x30 [ 85.026848][ T6961] [ 85.029185][ T6961] value changed: 0xffff8881331431c1 -> 0xffff888113e2f700 [ 85.036302][ T6961] [ 85.038639][ T6961] Reported by Kernel Concurrency Sanitizer on: [ 85.044803][ T6961] CPU: 0 UID: 0 PID: 6961 Comm: syz.0.1106 Not tainted 6.14.0-rc6-syzkaller-00202-ga29967be967e #0 [ 85.055502][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.065591][ T6961] ================================================================== [ 85.081122][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.101217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.587880][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.666613][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.674823][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.450637][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.471213][ T9] net_ratelimit: 12 callbacks suppressed [ 89.471292][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.560323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.709216][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.788772][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.797067][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.186812][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.195068][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.753405][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.833453][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.841798][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.883215][ T36] net_ratelimit: 16 callbacks suppressed [ 94.883231][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog