last executing test programs: 1m45.960418446s ago: executing program 32 (id=43): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0xfffffffffffffd32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd']) 1m44.126784612s ago: executing program 33 (id=57): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000000700)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x70}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104feffff7f0300000000000000", @ANYRES32=r4, @ANYBLOB="600000008008000008000300", @ANYRES32=r1, @ANYBLOB="c4d959d16e81a2789c2b70fb3ac94930bd3646117edee174c3c721352282b970c7c53ea1c649265f74c19191d458d6bb63c43fa2a0473e5eee480b982b8decfb5869a3f5f156"], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 1m40.872084559s ago: executing program 34 (id=82): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000140)={0x73, 0x12, '\x00', [@generic={0x5, 0x70, "5a5a380293cc2ec8cf0c7df7b1bb3f3ef3388b8ffa81b34203bbd08ed0d9de792800b9b991913e2d68ff2b16534de9239249ca353e97731b711817d77564dc69dcbb8ad02e15a3b04440b11d39175cf0f30fbe3848e1fd18a494aeb731117574a1f4b1dd8a7557bb5883fbcdd58f044f"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @pad1, @pad1, @calipso={0x7, 0x8, {0x1, 0x0, 0x0, 0x9e93}}]}, 0xa0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xfffffffe}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@block_validity}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[{0x7996, 0x10, 0x9, 0x80000001}, {0x7, 0x80, 0x2, 0x2}, {0x5, 0x5, 0xa, 0x10}, {0x2, 0x7, 0x3, 0x400}, {0x8, 0x9, 0xc}, {0x1, 0x6, 0x1, 0x457de136}, {0x7, 0x0, 0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000100003"], 0x20}, 0x1, 0x0, 0x0, 0x400c800}, 0x800) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4}, 0x1, r10}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m36.484501012s ago: executing program 35 (id=122): unshare(0x42000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) 1m26.452686466s ago: executing program 36 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0xfff, {@ip4=@empty}}}]}, 0x38}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x21100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r9 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r9, 0xee01, 0xee00) (async) keyctl$chown(0x4, r9, 0xee01, 0xee00) keyctl$chown(0x4, r9, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) keyctl$revoke(0x3, r9) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xc}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 1m20.267908075s ago: executing program 37 (id=348): socket(0x27, 0x80006, 0x81) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0xc0f85403, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x7de, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0xa00, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 1m15.579240463s ago: executing program 38 (id=392): timer_create(0x3, 0x0, &(0x7f0000000780)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_delete(r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x4) 53.129489066s ago: executing program 0 (id=683): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010101}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 52.978759108s ago: executing program 0 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 52.366199897s ago: executing program 0 (id=690): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000000800000008a9d059b3e7418305d000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1e4, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) close(r5) 52.320951097s ago: executing program 0 (id=691): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket(0x11, 0x800000003, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004d9000000000094f6000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = memfd_create(0x0, 0x5) fsetxattr$security_selinux(r4, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800004, &(0x7f0000001b40)={[{@dioread_lock}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@nombcache}, {@abort}, {@mblk_io_submit}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001bc0)={0x0, 0x100000000}) setgroups(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x3}}, './file1\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) openat(r8, &(0x7f0000000340)='.\x00', 0x0, 0x0) 51.221146153s ago: executing program 0 (id=696): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}], 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 32) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r1, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES64, @ANYRES64, @ANYBLOB="2c959d136fca56035e6608686635c9debdf20565ed3a9f57730943bf6f128c4fc4da0e1625ecc2153f82113f2b0abe791ea8b5d3d12dc31c830865fef912ce63c22b69012c101b7037704609d5ca56b92863daa08ae608898d1374893b8e86a56c1f8bb308b6ba861259dbf7e6dde6b8ba3300bfef988491fdff431ca9ca552f4a2f40b0a5b8f08d2c28c0fa4463e005d7a8e41bc771cad8c8755bdb7c3a084b60782052757341758c01c4236a8dce241cf74686f053d363c6b912503ee8e26024c8ef1552233f0449de8d383d63622065a218587e4bd463a8a7ea"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = syz_io_uring_setup(0x109, 0x0, &(0x7f00000003c0), &(0x7f0000000200)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x41, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f00000004c0)='./file1/../file0\x00', 0xffffffffffffffff, 0x0, 0x0, {0x0, r7}}) (async) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000280)={0x7, 0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000840)=""/251, 0xfb}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/164, 0xa4}, {&(0x7f0000000bc0)=""/154, 0x9a}, {&(0x7f0000000440)=""/99, 0x63}], &(0x7f0000000780)=[0x6, 0x7, 0x80, 0xfffffffffffeffff, 0x5, 0x1, 0xb67, 0x4, 0x6, 0x8]}, 0x20) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000400)={0xa}) (async, rerun: 32) syz_emit_ethernet(0x9a, 0x0, 0x0) (async, rerun: 32) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x6044094, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x401, 0xfffb, 0x0, 0x0, 0x0, 0x8005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="380100001000330600000000000000ffff8f964e0000000001000000000000783dd8b5fc35400000fc00000000000000000000000000000000000200"/75, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2001000000000000000000000000000200000000320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f0000002fc0), 0x0, 0x24000045) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 50.934535777s ago: executing program 0 (id=699): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) connect$can_bcm(r0, &(0x7f0000000000), 0x10) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 50.918821247s ago: executing program 39 (id=699): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) connect$can_bcm(r0, &(0x7f0000000000), 0x10) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 38.082748482s ago: executing program 4 (id=911): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000003c0)=ANY=[], 0x9) 37.997635553s ago: executing program 4 (id=912): r0 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 37.997254173s ago: executing program 4 (id=913): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0xe43, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x3, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 37.691286288s ago: executing program 4 (id=914): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x4a7, &(0x7f00000004c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000080)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r5) gettid() mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) 37.50089151s ago: executing program 4 (id=918): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x8, &(0x7f0000000040)) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) socket$netlink(0x10, 0x3, 0x8) syz_io_uring_setup(0x2bfd, &(0x7f0000000500)={0x0, 0x0, 0x10001, 0x7, 0x313}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00'}, 0x18) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 37.076792276s ago: executing program 4 (id=922): r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0xdf2a980543fc4d15, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000000)=0xb0, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x62, 0x12141, 0x0) acct(&(0x7f00000001c0)='./file0\x00') timer_create(0x4, &(0x7f0000000180)={0x0, 0x29, 0x4, @thr={&(0x7f0000000080)="e453adb6289906aff89ee3565545e0", &(0x7f00000000c0)="7a51bf596d95092ad7bbcf4d2609d42d086ec4a7eb06b91fab29e1aa40b370eb951060c70ecb7082f24d6ec9107af72d46287c0b717e165d1e0c98a95c6822705cb14807cd29afc72e3287cf2af9e6a7d8561ca2bf4e62259f4ca0a914b0ebd3ab0f472ddeb5f2a2eedf705929829e5f8e49d9142cbd527c772614fca04eddbbb12b7a44e5b2c4acaee387f8c0ec4451a854d620a9cb4f74cee252408b8e03812a6cb5b9a561d46c110981"}}, &(0x7f00000001c0)) 37.075775016s ago: executing program 40 (id=922): r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0xdf2a980543fc4d15, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000000)=0xb0, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x62, 0x12141, 0x0) acct(&(0x7f00000001c0)='./file0\x00') timer_create(0x4, &(0x7f0000000180)={0x0, 0x29, 0x4, @thr={&(0x7f0000000080)="e453adb6289906aff89ee3565545e0", &(0x7f00000000c0)="7a51bf596d95092ad7bbcf4d2609d42d086ec4a7eb06b91fab29e1aa40b370eb951060c70ecb7082f24d6ec9107af72d46287c0b717e165d1e0c98a95c6822705cb14807cd29afc72e3287cf2af9e6a7d8561ca2bf4e62259f4ca0a914b0ebd3ab0f472ddeb5f2a2eedf705929829e5f8e49d9142cbd527c772614fca04eddbbb12b7a44e5b2c4acaee387f8c0ec4451a854d620a9cb4f74cee252408b8e03812a6cb5b9a561d46c110981"}}, &(0x7f00000001c0)) 31.552807256s ago: executing program 2 (id=1051): openat$tun(0xffffffffffffff9c, 0x0, 0x42043, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9c0000001000010400000800fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="8750a7542ce00200380012800e000100697036677265746170000000240002800800050007000000060010004e21000008000c000400000006000f000700000044002b80080003000400000008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r0, @ANYBLOB="9afe0800", @ANYRES32, @ANYBLOB="b1b36a41b340164dfdfa27daeee960c06f3e16612164265f2f87f24d25e7", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x20040805}, 0x20004090) 31.421409168s ago: executing program 2 (id=1055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) 31.376111268s ago: executing program 2 (id=1056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 31.357599719s ago: executing program 2 (id=1058): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) futex_waitv(&(0x7f0000000b00)=[{0x8, &(0x7f0000000100)=0x6, 0x2}, {0x5, &(0x7f0000000180)=0xffffffffffffffff, 0x2}, {0xffffffffffffff33, &(0x7f00000001c0)=0x4079, 0x82}, {0x5, &(0x7f0000000200)=0x4, 0x82}, {0x101, &(0x7f0000000280)=0x3, 0x82}, {0x6, &(0x7f0000000340)=0x1, 0x2}, {0x6, &(0x7f0000000380)=0x3, 0x82}, {0x9, &(0x7f0000000500)=0x9, 0x82}, {0x7, &(0x7f0000000540)=0x5, 0x2}, {0x9, &(0x7f0000000580)=0xfffffffffffffc00, 0x82}, {0x0, &(0x7f00000005c0)=0xe, 0x2}, {0x5, &(0x7f0000000600)=0x7, 0x2}, {0x1542, &(0x7f0000000080)=0x40, 0x2}, {0x0, &(0x7f0000000840)=0xe19, 0x2}, {0x6, &(0x7f0000000880)=0xd9, 0x2}, {0x0, &(0x7f0000000980)=0x100000001, 0x80}, {0x0, &(0x7f00000009c0)=0xe1, 0x80}, {0xc0a6ec9, &(0x7f0000000a00), 0x82}], 0x12, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x80000, 0x8000, 0x4, 0x401, 0x28ab, 0x0, 0x8000004}) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f0000000d00)=0xa84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x48400) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 31.207540431s ago: executing program 2 (id=1061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000003c0)=ANY=[], 0x9) 31.158766032s ago: executing program 3 (id=1063): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x8000000000}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x0, 0x3d6, &(0x7f00000008c0)="$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") r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0x0, 0x1}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x8, 0x800, 0xca, 0x7}, {0x3, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) 31.064835093s ago: executing program 3 (id=1066): openat$tun(0xffffffffffffff9c, 0x0, 0x42043, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9c0000001000010400000800fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="8750a7542ce00200380012800e000100697036677265746170000000240002800800050007000000060010004e21000008000c000400000006000f000700000044002b80080003000400000008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r0, @ANYBLOB="9afe0800", @ANYRES32, @ANYBLOB="b1b36a41b340164dfdfa27daeee960c06f3e16612164265f2f87f24d25e7", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x20040805}, 0x20004090) 30.974080254s ago: executing program 3 (id=1071): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000001000000000000000002000000000000"], 0x14}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 30.945983305s ago: executing program 3 (id=1072): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) futex_waitv(&(0x7f0000000b00)=[{0x8, &(0x7f0000000100)=0x6, 0x2}, {0x5, &(0x7f0000000180)=0xffffffffffffffff, 0x2}, {0xffffffffffffff33, &(0x7f00000001c0)=0x4079, 0x82}, {0x5, &(0x7f0000000200)=0x4, 0x82}, {0x101, &(0x7f0000000280)=0x3, 0x82}, {0x6, &(0x7f0000000340)=0x1, 0x2}, {0x6, &(0x7f0000000380)=0x3, 0x82}, {0x9, &(0x7f0000000500)=0x9, 0x82}, {0x7, &(0x7f0000000540)=0x5, 0x2}, {0x9, &(0x7f0000000580)=0xfffffffffffffc00, 0x82}, {0x0, &(0x7f00000005c0)=0xe, 0x2}, {0x5, &(0x7f0000000600)=0x7, 0x2}, {0x1542, &(0x7f0000000080)=0x40, 0x2}, {0x0, &(0x7f0000000840)=0xe19, 0x2}, {0x6, &(0x7f0000000880)=0xd9, 0x2}, {0x0, &(0x7f0000000980)=0x100000001, 0x80}, {0x0, &(0x7f00000009c0)=0xe1, 0x80}, {0xc0a6ec9, &(0x7f0000000a00), 0x82}], 0x12, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x80000, 0x8000, 0x4, 0x401, 0x28ab, 0x0, 0x8000004}) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f0000000d00)=0xa84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x48400) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 30.896070476s ago: executing program 2 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r1) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x78) socket$xdp(0x2c, 0x3, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="3057000001"]) keyctl$search(0xa, r1, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x2}, r2) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x521042) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYBLOB="5953fdfffffffddbdf256b"], 0x28}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x0, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = io_uring_setup(0x503e, &(0x7f0000000f40)={0x0, 0x698c, 0x100, 0x2, 0xfffffffe}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="c14f000100", @ANYRES16=0x0, @ANYBLOB="020526bd7000fbdbdf251f00000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x880) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000000140)={0x5b, 0x0, 0x0, 0x0, 0x0}, 0x20) keyctl$setperm(0x5, r2, 0x1000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) getsockname$inet6(r3, &(0x7f0000000080), &(0x7f0000000780)=0x1c) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x4, 0x0, {0x80, 0x20, 0x0, 0x9, 0x0, 0x2, 0x0, 0x4}, [@RTA_IIF={0x8, 0x3, r10}, @RTA_SRC={0x8, 0x2, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 30.882794366s ago: executing program 41 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d96c5e8aa4617cc54c5e67060a92661f84e698d1fe3cee10a85882cbecb29f2a22535ac50e64d95ecbab66f54373b94475e05b79a0a61bc2ae1e", 0x12d, r1) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x78) socket$xdp(0x2c, 0x3, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="3057000001"]) keyctl$search(0xa, r1, &(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x2}, r2) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x521042) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYBLOB="5953fdfffffffddbdf256b"], 0x28}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x0, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = io_uring_setup(0x503e, &(0x7f0000000f40)={0x0, 0x698c, 0x100, 0x2, 0xfffffffe}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="c14f000100", @ANYRES16=0x0, @ANYBLOB="020526bd7000fbdbdf251f00000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x880) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000000140)={0x5b, 0x0, 0x0, 0x0, 0x0}, 0x20) keyctl$setperm(0x5, r2, 0x1000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) getsockname$inet6(r3, &(0x7f0000000080), &(0x7f0000000780)=0x1c) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x4, 0x0, {0x80, 0x20, 0x0, 0x9, 0x0, 0x2, 0x0, 0x4}, [@RTA_IIF={0x8, 0x3, r10}, @RTA_SRC={0x8, 0x2, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 30.800339637s ago: executing program 3 (id=1080): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x4, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x7fff8000, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x5, 0x45ba, 0x4, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x135, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0x5, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x6, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x803, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x0, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x1, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0x2}, {0xff, 0x0, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) 30.719665818s ago: executing program 7 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000003c0)=ANY=[], 0x9) 30.637394989s ago: executing program 7 (id=1086): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, 0xffffffffffffffff) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000200)=0x4, 0x4) 30.406996642s ago: executing program 7 (id=1092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1e4, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 30.148709376s ago: executing program 3 (id=1094): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010101}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 30.148228716s ago: executing program 42 (id=1094): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010101}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 29.961405319s ago: executing program 7 (id=1098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_clone3(&(0x7f00000008c0)={0x400, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) 29.692812473s ago: executing program 7 (id=1099): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) syz_clone3(&(0x7f00000008c0)={0x400, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) 29.400023567s ago: executing program 7 (id=1106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 29.374043527s ago: executing program 43 (id=1106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4.497940835s ago: executing program 6 (id=1636): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x57a, &(0x7f0000001d00)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcQL+Aw5IHJB64sCNIxIHQJQDUoEIlCBxGDRj766zsRM39tpk/flIk3kzb8bf9+ydec/Pjl8AM+tcROxGxGJEvBkRy939SXeJVztLftzdO7fX7t25vZZElr3xj6TIz/dFzzm5k93HLEXE178S8e3kwbit7Z3rq/V67VZ3u9Ju3Ky0tncubjZWN2obtRvV6pWVK5deuvxidWx1Pdv4xQdf3nztG7/+1Sff/93uF7+fF+tUN6+3HuPUqfrCfpzcfES8dhTBpmCuu16ccjl4PGlEfCQiPlNc/8sxV/x1AgDHWZYtR7bcuw0AHHdpMQaWpOWISNNuJ6DcGcN7Nk6k9WarfeFac+vGemes7HQspNc267VLZ5b+8N3i4IUk314p8or8Yrt6aPtyRJyJiB8uPVVsl9ea9fXpdHkAYOad7G3/I+LfS2laLg91ap9P9QCAJ0Zp2gUAACZO+w8As0f7DwCzZ4j2v/th/+6RlwUAmAzv/wFg9mj/AWD2/HzaBQAAJulrr7+eL9m97u9fr7+1vXW9+dbF9VrrermxtVZea966Wd5oNjeK3+xpPOrx6s3mzZUXYuvtSrvWalda2ztXG82tG+2rxe96X60tTKRWAMDDnDn73u+TiNh9+aliiZ65HLTVcLylYzwKeLLMjXKyDgI80cz2BbNrqCa86CT89sjLAkxYZ8iv/495l/om7/fjDxHL94zh/8r5jw8//m+OZzhejOzD7Hq88f9Xxl4OYPIee/z/T+MtBzB5WZYcnvN/cT8LADiWRvgKX/bOuDohwFQ9ajLvsXz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMfMqYj4TiRpuZgLPM3/TcvliKcj4nQsJNc267VLEfFMnI2IhaV8e2XahQYARpT+LenO/3V++flTh3MXk/8sFeuI+N5P3vjR26vt9q2VfP8/9/cv7U0fVj04b4R5BQGA4f1lmIOK9rvaXfe8kb975/ba3nKEZXzAB1/an3x07d6d28XSyZmPLMuyiFLRlzjxryTmu+eUIuK5iJgbQ/zddyPiY/3qnxRjI6e7M5/2xo9u7KcnGj+9L35a5HXW+dP30TGUBWbNe/n959XD199ccWWdK47of/2XijvU6Ir7Xyli7953cP/bu95LRWkOx8+v+XPDxnjhN199YGe23Ml7N+K5+X7xk/34yYD4zw8Z/4+f+NQPXhmQl/004nz0j98bq9Ju3Ky0tncubjZWN2obtRvV6pWVK5deuvxitVKMUVf2Rqof9PeXLzwzqGx5/U8MiN955U8eqv/i/rmfG7L+P/vvm9/69MHm0uH4X/hs/9f/2WJdiqTP5Nt5m/j5IeOvnvjlwOm78/jrA+r/qNf/wpDx3//rzvqQhwIAE9Da3rm+Wq/Xbo2UyN+Ffvizsix7Jy/DQ47Js4d7wL3u4mjV+XMUiYOnJYkkRn9+7k/knbFhDl4YuTr3JfaGS8ZdnT6J+f2+4ngf+ZsP/2sZlFgcJWg69lo8TiJOdxN3JxV0KrcjYIIOLvpplwQAAAAAAAAAAAAAABhkEv+Hadp1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pj6XwAAAP//0+W91w==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103042, 0x5d9f61795f7ff7ff) (fail_nth: 8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0xffffffffffffff6c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) 4.097951711s ago: executing program 6 (id=1639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 4.097619941s ago: executing program 6 (id=1640): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008"], 0x124}}, 0x0) 4.079855901s ago: executing program 6 (id=1641): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) (fail_nth: 4) 3.760237136s ago: executing program 6 (id=1643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c0002800400010014000380"], 0x48}, 0x1, 0x0, 0x0, 0x20004094}, 0x0) 3.752424586s ago: executing program 6 (id=1646): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) listen(r3, 0xffffffff) bind$rds(0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x80000) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.240485892s ago: executing program 8 (id=1723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r2, @ANYBLOB="010080000000fedbdf250f000000"], 0x1ec}, 0x1, 0x0, 0x0, 0x2805}, 0x8040) 1.234283302s ago: executing program 8 (id=1725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYBLOB="19"], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 1.196184482s ago: executing program 8 (id=1726): pipe2$9p(&(0x7f0000000100), 0x80000) socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) setns(0xffffffffffffffff, 0x2000000) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52c, &(0x7f0000000640)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) dup(r6) write$P9_RWRITE(r6, &(0x7f0000000180)={0xb, 0x77, 0x1, 0xd40}, 0xb) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$setlease(r8, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r8) 778.287909ms ago: executing program 9 (id=1739): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) ioprio_set$pid(0x2, r2, 0x4000) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 777.613629ms ago: executing program 9 (id=1740): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 760.572959ms ago: executing program 9 (id=1741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000185"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0x110}}, 0x0) 755.483219ms ago: executing program 5 (id=1742): getsockopt(0xffffffffffffffff, 0x1, 0x13, &(0x7f00000000c0)=""/114, &(0x7f0000000040)=0x72) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x0, 0x3}, 0x8806, 0x3, 0xa, 0x0, 0x0, 0xf1d1, 0xfff6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) readahead(r0, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)=ANY=[@ANYBLOB='map=acorn,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c686964652c626c6f636b3d3078303030303030303030303030303230302c73657373696f6e3d30783030303030303030303030303030de34312c9800703d61636f726e2c6d61703d6e6f726d616c2c6f76657272696465726f636b7065726d2c6e6f6a6f6c6965742c6d61703d6f66662c6f76657272696465726f636b7065726d2c696f636861727365743d64656661756c742c"], 0x2, 0xa1a, &(0x7f0000001880)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, &(0x7f0000000040)) 742.410759ms ago: executing program 9 (id=1743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c00"], 0x124}}, 0x0) 715.795739ms ago: executing program 9 (id=1744): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x21c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1ec, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1600000, 0x2, 0x8, 0xd9dc}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x5, 0x7, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0xe3, 0x2}}]}, @TCA_NETEM_LOSS={0xd0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x3, 0x1, 0xedff, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x9, 0x7, 0xfffff000, 0x3a2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x4, 0x80, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x7, 0x200, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffffff54, 0x3, 0x1, 0x3c9, 0xc}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x5, 0x5, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x9, 0x9, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x9da, 0x1, 0x141, 0xffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x40ae, 0x3, 0x3, 0x6}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x21c}}, 0x0) 702.806999ms ago: executing program 9 (id=1745): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x19, 0x1, 0x3, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@generic="b25e63bdf939ddd79068939e305c38c890b739c4d540757139665368dfac5bc5558258dbb052880f2ff027dbaa43a3b55a51cc69c42240e9834f"]}, 0xffffffffffffff96}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000050000060900010073797a3100000000580004805400018009000100261a54f75d7753086d6574610000000044000280080001400000000c080003400000000d08000240000003ff080001400000000008000240000000010800034000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000009c0)={[{@dioread_nolock}, {@noblock_validity}, {@usrquota}, {@errors_remount}, {@abort, 0x0}, {@noauto_da_alloc}, {@noload}, {@minixdf}, {@mblk_io_submit}, {@lazytime}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@norecovery}, {@nouser_xattr}, {@journal_checksum}, {@sysvgroups}], [{@audit}, {@fowner_gt={'fowner>', 0xee00}}], 0x2c}, 0x6, 0x4fc, &(0x7f0000001a40)="$eJzs3EtvVGUfAPD/mU5p+wJv+/J64aaMorHRSGm5LlwA0YSNiYnG4LK2hSAFDK0JkEaKMZC40PAJvOxM/ASudGPUuNC4lbg1JsR0A7owx5yZM3Xa6fTGTCelv18yw3Nu8zz/c87DPJc5DWDDKmVvScSWiPglInori3N3KFX+uTczNfLnzNRIEmn66h9Jeb+7M1Mj1V2rx23OF/oLEYX3k9hVn23XxJWr54bHx8cu5SsGJgt56vzwmbEzYxeGjh49eKDnyOGhQ02JMyvT3Z3vXty94+Qbt14eOXXrze++yMqb5ttr46joK79vWnYOHXVrSlGaey5rPL38oq8LW2vSSTF7L7SvMCxbdtdml6uzXP97o6O8VNEbL73X1sIBLZWmadpVt3b2u2w6rZUklQPS9HoKPACSaHcJgPaoftHfncl6qlMj9f3gB9ud41HuAWVx38tflS3Fcg+21FfpG3W2KP+HIuLU9F8fZ69YcBwCAKC5vjoecfNEFLN2R/VV2VKIR2r2+28+N9QXEf+LiG0R8f+8/fJwRHnfRyNie80xW5cxC1Cat1zf/vmpJ0/UNlebJmv/vZDPbc1t/82WvK8jX9pajr8zOX12fGx/fk76o7MrWx6s/+jZYbWvX/z5o0b5l2raf9kry7/aFszL8Xtx3gDd6PDk8P3GXXXnevnEXquPP4liUk1F7IiInav4/OycnX32892Nts+JP4uzLv4PG394cRUFmif9NOKZyvWfjnnxRz7/l5TnJ8+/PTBx5erzZ2vnJwePHB46NNAd42P7B6p3Rb3vf7zxSp6s60Yscv2rVaOlE2nZ9f/Pgvf/7MxlX5aana+dWHkeN27fbNinWe39vyl5rZyuzs9eHp6cvDQYsSmZrl8/9O+xl4d75uyfxd+/d+H6vy3i70/y43ZFRHYTPxYRj0fEnrzsT0TEkxGxd5H4vz3x1FuNupBLx99aWfyjK7r+jRLHfohYeFPHuW++rMv4g1Jd/J3R6PofLKf68zWjw5PdS8W1WElrE/d9AgEAAGAd2BMRWyIp7MsHmrZEobBvX8Tm2RGUicnnTl9858Jo5RmBvugsVEe6emvGQwfzseFsOTtqqGY5236gPG6cpmnaky1n/ffx7e0NHTa8zQ3qf+a3+kdagAfNiubRGj3RBqxL8+v/7WUf2fwfZABrqwm/owHWKfUfNq5l1/9WPQUHtM1C9f9axL02FAVYYwvV/9fr1hxbk7IAa0v/Hzau1dd/PwaA9c73P2xIy3pIfhWJbScX2ScptibTxolCLP5XAPoiqmuqbZrFP/DXQkRzStjR1Eh75lzTwoL7dEcz8orCkvsUV/CHGFqR6G6Ye6Et5WmQ6IqIJe7e2ZvtWjVxtdUFK1eCz9r7vxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD9+ycAAP//NjnTNQ==") mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '{%'}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x680, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@ssid={0x0, 0x9, @random="8238662dbb1d8c0f7e"}, @cf={0x4, 0x6, {0xd2, 0x9, 0x8, 0x6}}, @supported_rates={0x1, 0x5, [{0xc, 0x1}, {0x9, 0x1}, {0x35}, {0x24, 0x1}, {0x2}]}, @peer_mgmt={0x75, 0x16, {0x4, 0x1e71, @void, @val=0x1b, @val="6b12b9b947416667bdb9653dbdeb50ed"}}, @ibss={0x6, 0x2, 0x9}]}, @NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, {{0x0, 0x1}, 0x1, 0x5, 0x200, @device_b, 0x52, @void, 0xf76, 0xf, 0x4, [{{0x0, 0x0, 0x1}, @broadcast, 0xa}, {{}, @broadcast}, {{0x1}, @broadcast, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x2}]}}]}, @NL80211_ATTR_IE={0x16, 0x2a, [@tim={0x5, 0x10, {0x1, 0xc5, 0x0, "9a45c9ff48511f202a44b6b73b"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_REALM={0xe3, 0xfa, "d8516fcb07b5d2d73efa884c1ef4de09a5d092da27a28c4c5c200dc17d23239e24cf47bc6dcdaa976c352dd085a15ceaf0a968a3acaeaea1de94cfd18409dd8975ca5b7255db8b2004fd924375fe73bc6c5d113548ef27f62f9a5e76303f7a6f22a8964f8f7158e088f46c4fe70ebdb688616331f98720d575b05e9686b456ab971085086b4af17f4eb77b5b4f49d88698affd5483161b79d207af3ee08e904b335c4ec4767de0ebb357fa31e2f624097c0fcd69ac6a617e9289ccc52be73b1a568e30aa8b2eaf834cf312bd60e42c6b485ad790add408b96fc3f615d5b0c2"}, @NL80211_ATTR_FILS_ERP_REALM={0x52, 0xfa, "f03c3a79ec71ca6ba23a24df8bdb4fc92c6d6f6e9220137ddfb1dc3346f6c6f868663900aede83d5d251b76111b89c862441e15612a7ac2ab538c96dc277fa9311fb8ee61eebbba6f148e3414d72"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6d}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x53, 0xfa, "19a049769f5cea69713ea28d7aed9ed765dc7e28626d1769a014189d549c7d049cc05bbfb6d02a344bbc79eb9f11af2a0f9fdbe16aa3917679196d6c3143958dc3a9be73e0c31750cef6bd1355c9eb"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}], @NL80211_ATTR_IE={0x81, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0x0, 0x9, @device_a, 0x8, 0x7, 0x3}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @rann={0x7e, 0x15, {{}, 0xe, 0x2a, @device_b, 0x8, 0x1, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @prep={0x83, 0x1f, {{}, 0x10, 0xc, @broadcast, 0x7, @void, 0x5, 0x81, @broadcast, 0x7ff}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x40, 0x3c, 0xe}}, @dsss={0x3, 0x1, 0x30}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x5, 0x4, @broadcast, 0xde, 0x3, 0x7fffffff}}, @dsss={0x3, 0x1, 0x3c}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "47a9b9e8302ec32091"}, @NL80211_ATTR_FILS_ERP_REALM={0x51, 0xfa, "4e57eae048335b7f7cd4a60b100e3a2833d3630916d4d4f0443b64885343b148212d576b876fc71fc6d0493a3fffefbcb3d7ffa78b9a97f77bbce942e41d12b26d2b2bb4b8973df5d09b91d105"}, @NL80211_ATTR_FILS_ERP_RRK={0x5c, 0xfc, "710b9d063632f04c16ac8641f881a0e890ae5dfc0d7782af2bc59e6c3b16df9e07c5dea27e116e1ead2e9ecee2776fcb25030bda2c397c856e4d4ec3b852806209f5f56b5c5b59afe1ab8530bfbc3363d95787dbdf834130"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x66, 0xfa, "a3d46965023ddee91b598d772921c01b6b068b0b299700e4391a96e12b283b95d01d0fb138ca4de05a40629ea4a645467d31961545afabce3bc889f8621dc0abb227ac99cc18958b932d215cd9404510177c602bc2d41b20cf3b67891e3f963b2c2e"}, @NL80211_ATTR_FILS_ERP_RRK={0x68, 0xfc, "9a1d4c12f0308b64eea2309a2409e484db28af2d1bb95fd0e5e5740d9e84a24f719dac16595cc7f09dfc27189b933c17a8f8b44847fe2aa41654c94667047077723ba95f1a5c1ce3c4a24e3294f9dcafc0f66f9d92c7775dfbe578484136adc51bd70b53"}, @NL80211_ATTR_FILS_ERP_REALM={0x6d, 0xfa, "736a377024b8dd49b1cc7f9e097fcc13696a1ddd828ce6c349437b5a3c2a9ddf33a03bd3fc55d78c1d537afcb5d23bcdfab36c0f5f5052653553f182e1ff43f1ce64b8a71805d8aa5b7657a91367d782bc47a6c352f638cceff33d84b522bdd2cd00a969196e9ac5d4"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "85eaa7f2"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "59783a3c877c156ffbc42b22f580915a"}, @NL80211_ATTR_FILS_ERP_RRK={0x5c, 0xfc, "07ef6c944945e6fbed8a8e30286f8e9d59ae899e9ea6254413a6597a77033cef78dfb944ff3051b5fa9d0f0b76c5e22a696048c1bdc8214b3823a00681d8cd2bea392d7c5993766f02969fe90bed4aaf48c33cab7b878176"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "773f77cf5e"}, @NL80211_ATTR_FILS_ERP_REALM={0x7c, 0xfa, "fe5857f18737727090aa9a8bcf60d7f575cd3975737f1d45c06a9efe0ddd09a5266b54be8ae027c553c6822be302c27545f1e6899a53cf05accae8e2d3137fe83e3d6b04bfb34158d6e2fa3ca52e84f928e18acae99bd1ff708f97f7451a87ecf34621f64b6b7bd95d6da7a0e25640e859529e923291e78a"}, @NL80211_ATTR_FILS_ERP_RRK={0x9e, 0xfc, "5235288a8780c8ba4917175dbabd9e727cf781f6d355eae97e247868b11efe39f9edbe544d4c95faff8d422dda163aa818c6fcb3a14599d49466011e52afc92a339c485c543a8cb131c3721f9004c85a784c1bb161f185b1322024ce981cf5bfdb9cfe230b025e5143a463654fe01200aab862ab30e18e3b13828964d47750856c7a64aedbe00871fb60dd4c78e02bf9e00b3ed8b4da612144a2"}]]}, 0x680}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[@ANYBLOB="3289a7a864f58759e09d9556bc"], 0x3, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000003c0)) r8 = socket$kcm(0x2d, 0x2, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0xa, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x10}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000fc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000e80)=@delqdisc={0x124, 0x25, 0x604, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xfff2, 0x3}, {0x4}, {0x7, 0xfff1}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x494}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1b}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2b}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2c}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x16}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20044010}, 0x20044181) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) getsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r13}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r13, 0x6612) 692.95131ms ago: executing program 5 (id=1746): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000004c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(0xffffffffffffffff, &(0x7f0000000240)=""/28, 0xffd2) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x1, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0x10, 0x1000, &(0x7f0000000e40)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000300), &(0x7f0000000380)=[{0x4, 0x3, 0xe, 0x1}, {0x0, 0x5, 0xb, 0x5}], 0x10, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffbf4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4049b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3b}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}]}}}]}, 0x40}}, 0x4048084) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0x4}, 0x18) syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x3f, 0x2000, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x34, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xf, "f7d11634eea239467089c40ced"}, {0x0, 0x2}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10001, @private0, 0x3}, {0xa, 0x4e24, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, r7, 0xffffffff}}, 0x48) syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0], 0x1}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 512.365172ms ago: executing program 5 (id=1747): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8002, 0x0, 0x1003, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='rxrpc_call_reset\x00', r0}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2040400) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x8005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6, 0x10, 0x0, 0x5}]}, 0x10) 511.856702ms ago: executing program 5 (id=1748): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="19"], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 501.032852ms ago: executing program 5 (id=1749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 488.592102ms ago: executing program 5 (id=1750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x1000000000000000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x7, 0x0, 0x0, 0x9d9}, {0x6606, 0xff, 0xff, 0x508}, {0x0, 0x3, 0xc, 0xfde6}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) (fail_nth: 3) 246.451206ms ago: executing program 8 (id=1751): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) ioprio_set$pid(0x2, r2, 0x4000) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 197.568447ms ago: executing program 8 (id=1753): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000003060102000000000000000000000000a3583a617e4081a2a7072e3fb42dbf946aca4df48c14b57a3e1f9809e26196c87095be9ddc6270be452c625a6354e87491a645044cdf1472b33a912aec736093e1605692a6f580402bf1ce70416c00fab14e52e6c71bd847cbd6484fb08d850f677575f907"], 0x14}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000002000010300000000feffffff02101400fd0000020100000008000200e000000208000100ffffffff08000d00ff0f0000080004"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f00000001c0)=0x8) syz_clone3(&(0x7f0000000400)={0x107345080, 0x0, 0x0, &(0x7f0000000140), {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 95.158968ms ago: executing program 1 (id=1756): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x21c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1ec, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1600000, 0x2, 0x8, 0xd9dc}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x5, 0x7, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0xe3, 0x2}}]}, @TCA_NETEM_LOSS={0xd0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x3, 0x1, 0xedff, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x9, 0x7, 0xfffff000, 0x3a2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x4, 0x80, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x7, 0x200, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffffff54, 0x3, 0x1, 0x3c9, 0xc}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x5, 0x5, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x9, 0x9, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x9da, 0x1, 0x141, 0xffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x40ae, 0x3, 0x3, 0x6}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x21c}}, 0x0) 69.335259ms ago: executing program 1 (id=1757): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) r3 = dup2(r0, r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 51.170779ms ago: executing program 1 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400"], 0x110}}, 0x0) 35.003409ms ago: executing program 8 (id=1759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8002, 0x0, 0x1003, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='rxrpc_call_reset\x00', r0}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2040400) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x8005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6, 0x10, 0x0, 0x5}]}, 0x10) 34.458259ms ago: executing program 1 (id=1760): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="19"], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 17.673959ms ago: executing program 1 (id=1761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 0s ago: executing program 1 (id=1762): pipe2$9p(&(0x7f0000000100), 0x80000) socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) setns(0xffffffffffffffff, 0x2000000) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52c, &(0x7f0000000640)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) dup(r6) write$P9_RWRITE(r6, &(0x7f0000000180)={0xb, 0x77, 0x1, 0xd40}, 0xb) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$setlease(r8, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r8) kernel console output (not intermixed with test programs): filesystem 00000000-0000-0000-0000-000000000000. [ 105.154724][ T8159] netlink: 32 bytes leftover after parsing attributes in process `syz.7.993'. [ 105.163814][ T8159] batadv0: entered promiscuous mode [ 105.343275][ T8173] loop2: detected capacity change from 0 to 512 [ 105.371793][ T8173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.385450][ T8173] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.388517][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.410055][ T8173] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.999: bg 0: block 217: padding at end of block bitmap is not set [ 105.441445][ T8182] ALSA: seq fatal error: cannot create timer (-22) [ 105.450300][ T8182] 9pnet_fd: Insufficient options for proto=fd [ 105.538014][ T8192] netlink: 596 bytes leftover after parsing attributes in process `syz.7.1008'. [ 105.563784][ T8173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8173 comm=syz.2.999 [ 105.607917][ T8202] loop5: detected capacity change from 0 to 512 [ 105.629060][ T5539] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.639895][ T8202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.656177][ T8202] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.693334][ T3737] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 105.719296][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.761777][ T8220] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1020'. [ 105.805471][ T8230] loop1: detected capacity change from 0 to 512 [ 105.835182][ T8230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.858019][ T8230] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.878538][ T7833] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.952779][ T3315] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 105.987439][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.052561][ T8246] Cannot find add_set index 0 as target [ 106.326207][ T3394] page_pool_release_retry() stalled pool shutdown: id 45, 1 inflight 60 sec [ 106.431330][ T8260] loop7: detected capacity change from 0 to 512 [ 106.455097][ T8259] lo speed is unknown, defaulting to 1000 [ 106.467978][ T8259] lo speed is unknown, defaulting to 1000 [ 106.513300][ T8260] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.527051][ T8260] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.561326][ T8271] loop3: detected capacity change from 0 to 2048 [ 106.571201][ T8273] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1042'. [ 106.601499][ T8271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.655191][ T8281] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 106.682583][ T8271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.787490][ T8296] lo speed is unknown, defaulting to 1000 [ 106.794714][ T8296] lo speed is unknown, defaulting to 1000 [ 106.868044][ T8302] loop5: detected capacity change from 0 to 2048 [ 106.884525][ T8305] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1055'. [ 106.927207][ T8302] Alternate GPT is invalid, using primary GPT. [ 106.933882][ T8302] loop5: p1 p2 p3 [ 106.947075][ T8311] loop2: detected capacity change from 0 to 1024 [ 106.960074][ T8309] loop1: detected capacity change from 0 to 2048 [ 106.962913][ T8311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.004386][ T8309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.019455][ T8319] loop3: detected capacity change from 0 to 2048 [ 107.027994][ T8309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.042419][ T8319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.056476][ T8319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.073676][ T5539] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bogus i_mode (177755) [ 107.092958][ T5539] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bogus i_mode (177755) [ 107.131354][ T8327] loop3: detected capacity change from 0 to 512 [ 107.139326][ T8327] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 107.149712][ T8327] EXT4-fs (loop3): group descriptors corrupted! [ 107.173890][ T8329] netlink: 'syz.1.1064': attribute type 1 has an invalid length. [ 107.187710][ T8320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.195406][ T8333] lo speed is unknown, defaulting to 1000 [ 107.218774][ T8333] lo speed is unknown, defaulting to 1000 [ 107.248190][ T4021] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.307710][ T8341] syzkaller0: entered promiscuous mode [ 107.313416][ T8341] syzkaller0: entered allmulticast mode [ 107.355811][ T8347] loop3: detected capacity change from 0 to 1024 [ 107.373660][ T3394] page_pool_release_retry() stalled pool shutdown: id 46, 1 inflight 60 sec [ 107.415220][ T8347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.494555][ T7833] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bogus i_mode (177755) [ 107.526795][ T6787] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.532768][ T7833] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bogus i_mode (177755) [ 107.583436][ T8361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.631422][ T6787] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.643186][ T8385] loop7: detected capacity change from 0 to 512 [ 107.655146][ T8354] lo speed is unknown, defaulting to 1000 [ 107.663052][ T8354] lo speed is unknown, defaulting to 1000 [ 107.678510][ T8385] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.691377][ T8388] FAULT_INJECTION: forcing a failure. [ 107.691377][ T8388] name failslab, interval 1, probability 0, space 0, times 0 [ 107.704311][ T8388] CPU: 0 UID: 0 PID: 8388 Comm: syz.5.1087 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 107.704394][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.704408][ T8388] Call Trace: [ 107.704416][ T8388] [ 107.704473][ T8388] __dump_stack+0x1d/0x30 [ 107.704558][ T8388] dump_stack_lvl+0xe8/0x140 [ 107.704589][ T8388] dump_stack+0x15/0x1b [ 107.704606][ T8388] should_fail_ex+0x265/0x280 [ 107.704627][ T8388] should_failslab+0x8c/0xb0 [ 107.704696][ T8388] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 107.704729][ T8388] ? __d_alloc+0x3d/0x350 [ 107.704784][ T8388] __d_alloc+0x3d/0x350 [ 107.704884][ T8388] ? mpol_shared_policy_init+0xbd/0x4c0 [ 107.704904][ T8388] d_alloc_pseudo+0x1e/0x80 [ 107.704984][ T8388] alloc_file_pseudo+0x71/0x160 [ 107.705017][ T8388] ? __se_sys_memfd_create+0x1cc/0x590 [ 107.705041][ T8388] __shmem_file_setup+0x1b9/0x1f0 [ 107.705078][ T8388] shmem_file_setup+0x3b/0x50 [ 107.705178][ T8388] __se_sys_memfd_create+0x2c3/0x590 [ 107.705201][ T8388] __x64_sys_memfd_create+0x31/0x40 [ 107.705222][ T8388] x64_sys_call+0x122f/0x2fb0 [ 107.705323][ T8388] do_syscall_64+0xd2/0x200 [ 107.705353][ T8388] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.705525][ T8388] ? clear_bhb_loop+0x40/0x90 [ 107.705605][ T8388] ? clear_bhb_loop+0x40/0x90 [ 107.705625][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.705643][ T8388] RIP: 0033:0x7ff1f131e969 [ 107.705657][ T8388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.705670][ T8388] RSP: 002b:00007ff1ef986e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 107.705728][ T8388] RAX: ffffffffffffffda RBX: 00000000000004f9 RCX: 00007ff1f131e969 [ 107.705739][ T8388] RDX: 00007ff1ef986ef0 RSI: 0000000000000000 RDI: 00007ff1f13a1444 [ 107.705748][ T8388] RBP: 0000200000000d00 R08: 00007ff1ef986bb7 R09: 00007ff1ef986e40 [ 107.705758][ T8388] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 107.705768][ T8388] R13: 00007ff1ef986ef0 R14: 00007ff1ef986eb0 R15: 00002000000002c0 [ 107.705789][ T8388] [ 107.711950][ T8385] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.817265][ T8354] chnl_net:caif_netlink_parms(): no params data found [ 107.958225][ T4021] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 108.011702][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 108.011781][ T29] audit: type=1400 audit(1748818824.774:20932): avc: denied { connect } for pid=8396 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.034901][ T6787] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.038535][ T29] audit: type=1400 audit(1748818824.794:20933): avc: denied { ioctl } for pid=8396 comm="syz.1.1089" path="socket:[19277]" dev="sockfs" ino=19277 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.131165][ T4021] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.157893][ T6787] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.210455][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.217705][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.225818][ T8354] bridge_slave_0: entered allmulticast mode [ 108.233648][ T8354] bridge_slave_0: entered promiscuous mode [ 108.240436][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.247755][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.256995][ T8354] bridge_slave_1: entered allmulticast mode [ 108.263564][ T8354] bridge_slave_1: entered promiscuous mode [ 108.266198][ T29] audit: type=1326 audit(1748818825.024:20934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.5.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f131e969 code=0x7ffc0000 [ 108.293184][ T29] audit: type=1326 audit(1748818825.024:20935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.5.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff1f131e969 code=0x7ffc0000 [ 108.317996][ T29] audit: type=1326 audit(1748818825.024:20936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.5.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f131e969 code=0x7ffc0000 [ 108.342021][ T29] audit: type=1326 audit(1748818825.024:20937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.5.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7ff1f131e969 code=0x7ffc0000 [ 108.365839][ T29] audit: type=1326 audit(1748818825.024:20938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.5.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f131e969 code=0x7ffc0000 [ 108.389797][ T29] audit: type=1326 audit(1748818825.024:20939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.5.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1f131e969 code=0x7ffc0000 [ 108.393761][ T8426] loop7: detected capacity change from 0 to 256 [ 108.413572][ T29] audit: type=1326 audit(1748818825.024:20940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.5.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f131e969 code=0x7ffc0000 [ 108.443477][ T29] audit: type=1326 audit(1748818825.024:20941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.5.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f131e969 code=0x7ffc0000 [ 108.452557][ T8426] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 108.478183][ T8426] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 108.489101][ T8426] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 108.505479][ T8426] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 108.518182][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.544751][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.554448][ T4021] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 108.564110][ T8406] lo speed is unknown, defaulting to 1000 [ 108.577074][ T4021] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 108.593949][ T8406] lo speed is unknown, defaulting to 1000 [ 108.631561][ T8436] loop1: detected capacity change from 0 to 512 [ 108.642361][ T6787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.653129][ T6787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.659009][ T8436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.675780][ T6787] bond0 (unregistering): Released all slaves [ 108.676173][ T8436] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.719604][ T3315] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 108.734818][ T8439] loop5: detected capacity change from 0 to 8192 [ 108.743611][ T8354] team0: Port device team_slave_0 added [ 108.752411][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.762816][ T8432] bridge: RTM_NEWNEIGH with invalid ether address [ 108.775122][ T8354] team0: Port device team_slave_1 added [ 108.776432][ T8439] loop5: p3 [ 108.784212][ T8439] loop5: p3 size 196608 extends beyond EOD, truncated [ 108.793103][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.800864][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.814796][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.822318][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.832868][ T6787] veth1_macvtap: left promiscuous mode [ 108.838728][ T6787] veth0_macvtap: left promiscuous mode [ 108.844370][ T6787] veth1_vlan: left promiscuous mode [ 108.849758][ T6787] veth0_vlan: left promiscuous mode [ 108.912759][ T6787] team0 (unregistering): Port device team_slave_1 removed [ 108.925326][ T6787] team0 (unregistering): Port device team_slave_0 removed [ 109.003627][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.010826][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.037242][ T8354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.056756][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.063923][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.090232][ T8354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.110868][ T8457] __nla_validate_parse: 3 callbacks suppressed [ 109.110887][ T8457] netlink: 197276 bytes leftover after parsing attributes in process `syz.5.1109'. [ 109.170995][ T8354] hsr_slave_0: entered promiscuous mode [ 109.178133][ T8354] hsr_slave_1: entered promiscuous mode [ 109.188073][ T8354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.201278][ T8354] Cannot create hsr debugfs directory [ 109.210179][ T8448] lo speed is unknown, defaulting to 1000 [ 109.234884][ T8469] ALSA: seq fatal error: cannot create timer (-22) [ 109.253076][ T8406] chnl_net:caif_netlink_parms(): no params data found [ 109.280809][ T8473] program syz.5.1114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.385934][ T8484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.496221][ T8484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.551743][ T6787] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.568144][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.575224][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.582481][ T8406] bridge_slave_0: entered allmulticast mode [ 109.589786][ T8406] bridge_slave_0: entered promiscuous mode [ 109.605408][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.612640][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.619888][ T8406] bridge_slave_1: entered allmulticast mode [ 109.626411][ T8406] bridge_slave_1: entered promiscuous mode [ 109.634946][ T6787] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.670153][ T8448] chnl_net:caif_netlink_parms(): no params data found [ 109.681374][ T8406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.698434][ T8406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.741638][ T6787] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.784650][ T8406] team0: Port device team_slave_0 added [ 109.801618][ T6787] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.824351][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.831485][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.846930][ T8448] bridge_slave_0: entered allmulticast mode [ 109.853535][ T8448] bridge_slave_0: entered promiscuous mode [ 109.861997][ T8406] team0: Port device team_slave_1 added [ 109.878487][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.886112][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.896378][ T8448] bridge_slave_1: entered allmulticast mode [ 109.903154][ T8448] bridge_slave_1: entered promiscuous mode [ 109.918900][ T8494] loop5: detected capacity change from 0 to 128 [ 109.926259][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.933332][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.947199][ T8494] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.959452][ T8406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.983490][ T8494] ext4 filesystem being mounted at /286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.017815][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.043948][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.051051][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.077149][ T8406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.081763][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.100573][ T3737] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.112570][ T6787] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.128898][ T8497] loop5: detected capacity change from 0 to 512 [ 110.137439][ T8354] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 110.152000][ T8354] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 110.154000][ T8497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.171746][ T8497] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.173394][ T8354] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 110.195756][ T6787] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.208196][ T3737] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 110.208528][ T8448] team0: Port device team_slave_0 added [ 110.229536][ T8448] team0: Port device team_slave_1 added [ 110.235535][ T8354] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 110.236182][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.276008][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.283147][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.309180][ T8448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.320802][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.327829][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.354196][ T8448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.368087][ T8406] hsr_slave_0: entered promiscuous mode [ 110.374514][ T8406] hsr_slave_1: entered promiscuous mode [ 110.381573][ T8406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.389633][ T8406] Cannot create hsr debugfs directory [ 110.421109][ T6787] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.472693][ T8448] hsr_slave_0: entered promiscuous mode [ 110.479062][ T8448] hsr_slave_1: entered promiscuous mode [ 110.485012][ T8448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.492747][ T8448] Cannot create hsr debugfs directory [ 110.506132][ T6787] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.559811][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.576004][ T8507] loop5: detected capacity change from 0 to 512 [ 110.595158][ T8354] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.895180][ T8354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.905748][ T8354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.000539][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.007906][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.018316][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.025417][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.253411][ T8354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.271705][ T6787] bridge_slave_1: left allmulticast mode [ 111.277432][ T6787] bridge_slave_1: left promiscuous mode [ 111.283126][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.296579][ T6787] bridge_slave_0: left allmulticast mode [ 111.302377][ T6787] bridge_slave_0: left promiscuous mode [ 111.308142][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.316747][ T6787] bridge_slave_1: left allmulticast mode [ 111.322433][ T6787] bridge_slave_1: left promiscuous mode [ 111.328218][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.338930][ T6787] bridge_slave_0: left allmulticast mode [ 111.344838][ T6787] bridge_slave_0: left promiscuous mode [ 111.350785][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.381302][ T8518] netlink: 'syz.5.1121': attribute type 39 has an invalid length. [ 111.461211][ T6787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.471384][ T6787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.482568][ T6787] bond0 (unregistering): Released all slaves [ 111.568445][ T6787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.577991][ T6787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.587392][ T6787] bond0 (unregistering): Released all slaves [ 111.629645][ T6787] tipc: Left network mode [ 111.690322][ T6787] hsr_slave_0: left promiscuous mode [ 111.699163][ T6787] hsr_slave_1: left promiscuous mode [ 111.704873][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.712442][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.721497][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.728950][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.738467][ T6787] hsr_slave_0: left promiscuous mode [ 111.744378][ T6787] hsr_slave_1: left promiscuous mode [ 111.750276][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.757734][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.765492][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.773046][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.787887][ T6787] veth1_macvtap: left promiscuous mode [ 111.793615][ T6787] veth0_macvtap: left promiscuous mode [ 111.799820][ T6787] veth1_vlan: left promiscuous mode [ 111.805148][ T6787] veth0_vlan: left promiscuous mode [ 111.812117][ T6787] veth1_macvtap: left promiscuous mode [ 111.817770][ T6787] veth0_macvtap: left promiscuous mode [ 111.823337][ T6787] veth1_vlan: left promiscuous mode [ 111.828807][ T6787] veth0_vlan: left promiscuous mode [ 111.965683][ T6787] team0 (unregistering): Port device team_slave_1 removed [ 111.977275][ T6787] team0 (unregistering): Port device team_slave_0 removed [ 112.054857][ T6787] team0 (unregistering): Port device team_slave_1 removed [ 112.066328][ T6787] team0 (unregistering): Port device team_slave_0 removed [ 112.202345][ T8354] veth0_vlan: entered promiscuous mode [ 112.228041][ T8354] veth1_vlan: entered promiscuous mode [ 112.240799][ T8354] veth0_macvtap: entered promiscuous mode [ 112.248396][ T8354] veth1_macvtap: entered promiscuous mode [ 112.259389][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.268462][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.277474][ T8354] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.286383][ T8354] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.295188][ T8354] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.303999][ T8354] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.374471][ T8535] netlink: 'syz.5.1123': attribute type 1 has an invalid length. [ 112.463337][ T8545] loop8: detected capacity change from 0 to 1024 [ 112.470638][ T8545] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 112.481598][ T8545] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.492848][ T8545] EXT4-fs (loop8): invalid journal inode [ 112.499548][ T8545] EXT4-fs (loop8): can't get journal size [ 112.508086][ T8545] EXT4-fs error (device loop8): ext4_protect_reserved_inode:182: inode #2: comm syz.8.1126: blocks 48-48 from inode overlap system zone [ 112.524631][ T8545] EXT4-fs (loop8): failed to initialize system zone (-117) [ 112.531984][ T8545] EXT4-fs (loop8): mount failed [ 112.537094][ T8406] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 112.547479][ T8406] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 112.555848][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1126'. [ 112.564954][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1126'. [ 112.574393][ T8406] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 112.585205][ T8406] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 112.636946][ T8406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.658007][ T8406] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.670867][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.678060][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.689733][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.696879][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.712622][ T8557] netlink: 472 bytes leftover after parsing attributes in process `syz.1.1131'. [ 112.755853][ T8562] loop8: detected capacity change from 0 to 512 [ 112.771175][ T8562] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.784385][ T8562] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.803918][ T8406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.827328][ T8354] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 112.830701][ T8448] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.853911][ T8354] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.864579][ T8448] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.881101][ T8448] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.894956][ T8448] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.949505][ T8448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.975526][ T8448] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.985860][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.992974][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.004939][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.012129][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.026863][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 113.026883][ T29] audit: type=1326 audit(1748818829.784:21078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8583 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 113.035220][ T8448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.067225][ T8448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.121288][ T8596] loop8: detected capacity change from 0 to 512 [ 113.130469][ T8406] veth0_vlan: entered promiscuous mode [ 113.144480][ T8406] veth1_vlan: entered promiscuous mode [ 113.150152][ T29] audit: type=1326 audit(1748818829.904:21079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 113.173896][ T29] audit: type=1326 audit(1748818829.904:21080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 113.197665][ T29] audit: type=1326 audit(1748818829.904:21081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 113.198579][ T8598] loop1: detected capacity change from 0 to 2048 [ 113.221172][ T29] audit: type=1326 audit(1748818829.904:21082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 113.243592][ T8406] veth0_macvtap: entered promiscuous mode [ 113.251072][ T29] audit: type=1326 audit(1748818829.904:21083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 113.260860][ T8406] veth1_macvtap: entered promiscuous mode [ 113.280321][ T29] audit: type=1326 audit(1748818829.904:21084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 113.291768][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.309658][ T29] audit: type=1326 audit(1748818829.904:21085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 113.340884][ T29] audit: type=1326 audit(1748818829.904:21086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 113.364435][ T29] audit: type=1326 audit(1748818829.904:21087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 113.378926][ T8448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.398255][ T8596] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.417374][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.428278][ T8596] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.429798][ T8406] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.447468][ T8406] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.456250][ T8406] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.465157][ T8406] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.494561][ T8610] loop5: detected capacity change from 0 to 512 [ 113.502342][ T8610] EXT4-fs: dax option not supported [ 113.517911][ T8610] netlink: 'syz.5.1142': attribute type 1 has an invalid length. [ 113.525704][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1142'. [ 113.541966][ T8354] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 113.587579][ T8624] netlink: 'syz.8.1143': attribute type 39 has an invalid length. [ 113.600556][ T8619] loop1: detected capacity change from 0 to 512 [ 113.623125][ T8626] lo speed is unknown, defaulting to 1000 [ 113.641343][ T8619] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.703322][ T3315] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 113.719826][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1147'. [ 113.753782][ T8635] netlink: 'syz.5.1147': attribute type 10 has an invalid length. [ 113.792715][ T8635] team0 (unregistering): Port device team_slave_0 removed [ 113.818309][ T8635] team0 (unregistering): Port device team_slave_1 removed [ 113.852084][ T8448] veth0_vlan: entered promiscuous mode [ 113.860414][ T8448] veth1_vlan: entered promiscuous mode [ 113.882892][ T8448] veth0_macvtap: entered promiscuous mode [ 113.890429][ T8448] veth1_macvtap: entered promiscuous mode [ 113.907637][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.921103][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.937449][ T8448] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.946251][ T8448] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.955015][ T8448] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.955354][ T8654] loop1: detected capacity change from 0 to 2048 [ 113.963857][ T8448] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.055394][ T8666] syzkaller0: entered promiscuous mode [ 114.061101][ T8666] syzkaller0: entered allmulticast mode [ 114.262884][ T8689] loop6: detected capacity change from 0 to 512 [ 114.280424][ T8689] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.311727][ T8448] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 114.344511][ T8703] loop1: detected capacity change from 0 to 512 [ 114.357859][ T8703] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.367646][ T8703] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 114.382734][ T8703] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 114.391824][ T8703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 114.400416][ T8703] System zones: 0-2, 18-18, 34-34 [ 114.405860][ T8703] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1173: iget: bad i_size value: 360287970189639680 [ 114.419497][ T8713] loop6: detected capacity change from 0 to 512 [ 114.419795][ T8703] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1173: couldn't read orphan inode 15 (err -117) [ 114.445355][ T8713] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.454917][ T8713] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 114.467762][ T8713] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 114.477025][ T8713] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 114.485075][ T8713] System zones: 0-2, 18-18, 34-34 [ 114.491293][ T8713] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.1172: iget: bad i_size value: 360287970189639680 [ 114.504619][ T8713] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1172: couldn't read orphan inode 15 (err -117) [ 114.770921][ T8723] loop9: detected capacity change from 0 to 512 [ 114.956496][ T8731] loop8: detected capacity change from 0 to 1024 [ 115.261392][ T8739] loop5: detected capacity change from 0 to 2048 [ 115.430713][ T8770] FAULT_INJECTION: forcing a failure. [ 115.430713][ T8770] name failslab, interval 1, probability 0, space 0, times 0 [ 115.443485][ T8770] CPU: 1 UID: 0 PID: 8770 Comm: syz.5.1191 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 115.443515][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.443530][ T8770] Call Trace: [ 115.443538][ T8770] [ 115.443556][ T8770] __dump_stack+0x1d/0x30 [ 115.443648][ T8770] dump_stack_lvl+0xe8/0x140 [ 115.443670][ T8770] dump_stack+0x15/0x1b [ 115.443691][ T8770] should_fail_ex+0x265/0x280 [ 115.443716][ T8770] should_failslab+0x8c/0xb0 [ 115.443806][ T8770] __kvmalloc_node_noprof+0x126/0x4f0 [ 115.443840][ T8770] ? bpf_test_run_xdp_live+0x114/0xfe0 [ 115.443928][ T8770] bpf_test_run_xdp_live+0x114/0xfe0 [ 115.443964][ T8770] ? avc_has_perm_noaudit+0x1b1/0x200 [ 115.444003][ T8770] ? avc_has_perm+0xd3/0x150 [ 115.444089][ T8770] ? selinux_file_open+0x2df/0x330 [ 115.444132][ T8770] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 115.444168][ T8770] ? should_fail_ex+0xdb/0x280 [ 115.444207][ T8770] ? _copy_from_user+0x89/0xb0 [ 115.444237][ T8770] ? bpf_test_init+0x11a/0x160 [ 115.444336][ T8770] bpf_prog_test_run_xdp+0x4f5/0x910 [ 115.444382][ T8770] ? __rcu_read_unlock+0x4f/0x70 [ 115.444408][ T8770] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 115.444436][ T8770] bpf_prog_test_run+0x22a/0x390 [ 115.444528][ T8770] __sys_bpf+0x3dc/0x790 [ 115.444567][ T8770] __x64_sys_bpf+0x41/0x50 [ 115.444672][ T8770] x64_sys_call+0x2478/0x2fb0 [ 115.444698][ T8770] do_syscall_64+0xd2/0x200 [ 115.444729][ T8770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.444851][ T8770] ? clear_bhb_loop+0x40/0x90 [ 115.444875][ T8770] ? clear_bhb_loop+0x40/0x90 [ 115.444895][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.444923][ T8770] RIP: 0033:0x7ff1f131e969 [ 115.444942][ T8770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.444964][ T8770] RSP: 002b:00007ff1ef987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.444986][ T8770] RAX: ffffffffffffffda RBX: 00007ff1f1545fa0 RCX: 00007ff1f131e969 [ 115.445003][ T8770] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 115.445018][ T8770] RBP: 00007ff1ef987090 R08: 0000000000000000 R09: 0000000000000000 [ 115.445033][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.445127][ T8770] R13: 0000000000000000 R14: 00007ff1f1545fa0 R15: 00007ffce7016748 [ 115.445169][ T8770] [ 115.714081][ T8778] loop5: detected capacity change from 0 to 512 [ 115.743379][ T8778] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.785864][ T8778] EXT4-fs (loop5): 1 truncate cleaned up [ 115.814969][ T8786] loop9: detected capacity change from 0 to 512 [ 115.828577][ T8786] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 115.855198][ T8786] EXT4-fs (loop9): 1 truncate cleaned up [ 115.870940][ T8786] FAULT_INJECTION: forcing a failure. [ 115.870940][ T8786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.884196][ T8786] CPU: 0 UID: 0 PID: 8786 Comm: syz.9.1194 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 115.884304][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.884318][ T8786] Call Trace: [ 115.884326][ T8786] [ 115.884335][ T8786] __dump_stack+0x1d/0x30 [ 115.884361][ T8786] dump_stack_lvl+0xe8/0x140 [ 115.884385][ T8786] dump_stack+0x15/0x1b [ 115.884416][ T8786] should_fail_ex+0x265/0x280 [ 115.884441][ T8786] should_fail+0xb/0x20 [ 115.884462][ T8786] should_fail_usercopy+0x1a/0x20 [ 115.884489][ T8786] _copy_to_user+0x20/0xa0 [ 115.884594][ T8786] simple_read_from_buffer+0xb5/0x130 [ 115.884629][ T8786] proc_fail_nth_read+0x100/0x140 [ 115.884659][ T8786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.884686][ T8786] vfs_read+0x1a0/0x6f0 [ 115.884731][ T8786] ? touch_atime+0x106/0x340 [ 115.884764][ T8786] ? __rcu_read_unlock+0x4f/0x70 [ 115.884791][ T8786] ? __fget_files+0x184/0x1c0 [ 115.884821][ T8786] ksys_read+0xda/0x1a0 [ 115.884847][ T8786] __x64_sys_read+0x40/0x50 [ 115.885009][ T8786] x64_sys_call+0x2d77/0x2fb0 [ 115.885090][ T8786] do_syscall_64+0xd2/0x200 [ 115.885123][ T8786] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.885153][ T8786] ? clear_bhb_loop+0x40/0x90 [ 115.885235][ T8786] ? clear_bhb_loop+0x40/0x90 [ 115.885260][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.885280][ T8786] RIP: 0033:0x7f6ad494d37c [ 115.885296][ T8786] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.885323][ T8786] RSP: 002b:00007f6ad2fb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.885348][ T8786] RAX: ffffffffffffffda RBX: 00007f6ad4b75fa0 RCX: 00007f6ad494d37c [ 115.885363][ T8786] RDX: 000000000000000f RSI: 00007f6ad2fb70a0 RDI: 0000000000000006 [ 115.885378][ T8786] RBP: 00007f6ad2fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 115.885396][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.885411][ T8786] R13: 0000000000000000 R14: 00007f6ad4b75fa0 R15: 00007ffc85a754f8 [ 115.885432][ T8786] [ 116.210596][ T8839] loop8: detected capacity change from 0 to 512 [ 116.223198][ T8846] FAULT_INJECTION: forcing a failure. [ 116.223198][ T8846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.236447][ T8846] CPU: 1 UID: 0 PID: 8846 Comm: syz.9.1204 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 116.236476][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.236488][ T8846] Call Trace: [ 116.236495][ T8846] [ 116.236569][ T8846] __dump_stack+0x1d/0x30 [ 116.236591][ T8846] dump_stack_lvl+0xe8/0x140 [ 116.236610][ T8846] dump_stack+0x15/0x1b [ 116.236690][ T8846] should_fail_ex+0x265/0x280 [ 116.236713][ T8846] should_fail+0xb/0x20 [ 116.236808][ T8846] should_fail_usercopy+0x1a/0x20 [ 116.236832][ T8846] _copy_to_user+0x20/0xa0 [ 116.236867][ T8846] simple_read_from_buffer+0xb5/0x130 [ 116.236891][ T8846] proc_fail_nth_read+0x100/0x140 [ 116.236916][ T8846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.236967][ T8846] vfs_read+0x1a0/0x6f0 [ 116.236995][ T8846] ? __rcu_read_unlock+0x4f/0x70 [ 116.237040][ T8846] ? __fget_files+0x184/0x1c0 [ 116.237065][ T8846] ksys_read+0xda/0x1a0 [ 116.237091][ T8846] __x64_sys_read+0x40/0x50 [ 116.237112][ T8846] x64_sys_call+0x2d77/0x2fb0 [ 116.237132][ T8846] do_syscall_64+0xd2/0x200 [ 116.237165][ T8846] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.237196][ T8846] ? clear_bhb_loop+0x40/0x90 [ 116.237269][ T8846] ? clear_bhb_loop+0x40/0x90 [ 116.237296][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.237323][ T8846] RIP: 0033:0x7f6ad494d37c [ 116.237372][ T8846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 116.237392][ T8846] RSP: 002b:00007f6ad2fb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.237412][ T8846] RAX: ffffffffffffffda RBX: 00007f6ad4b75fa0 RCX: 00007f6ad494d37c [ 116.237425][ T8846] RDX: 000000000000000f RSI: 00007f6ad2fb70a0 RDI: 0000000000000005 [ 116.237438][ T8846] RBP: 00007f6ad2fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.237451][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.237465][ T8846] R13: 0000000000000000 R14: 00007f6ad4b75fa0 R15: 00007ffc85a754f8 [ 116.237563][ T8846] [ 116.458393][ T8839] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.518629][ T8354] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 116.617928][ T8878] SELinux: ebitmap: truncated map [ 116.628222][ T8878] SELinux: failed to load policy [ 116.841584][ T8909] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1216'. [ 116.860198][ T8912] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1217'. [ 116.869265][ T8912] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1217'. [ 116.948773][ T8871] loop9: detected capacity change from 0 to 512 [ 116.998374][ T8909] syzkaller0: entered promiscuous mode [ 117.003909][ T8909] syzkaller0: entered allmulticast mode [ 117.023713][ T8871] ext3: Unknown parameter 'fowner>00000000000000000000' [ 117.144709][ T8862] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 117.166918][ T8862] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 117.173493][ T8862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.181072][ T8862] vhci_hcd vhci_hcd.0: Device attached [ 117.193410][ T8862] IPv6: Can't replace route, no match found [ 117.237176][ T8862] 9pnet_fd: Insufficient options for proto=fd [ 117.245294][ T8950] vhci_hcd: connection closed [ 117.245912][ T12] vhci_hcd: stop threads [ 117.254960][ T12] vhci_hcd: release socket [ 117.259480][ T12] vhci_hcd: disconnect device [ 117.450083][ T8986] loop5: detected capacity change from 0 to 128 [ 117.459279][ T8986] vfat: Unknown parameter 'šps' [ 117.467876][ T8986] netlink: 'syz.5.1234': attribute type 13 has an invalid length. [ 117.475828][ T8986] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1234'. [ 117.498943][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1235'. [ 117.557024][ T8995] syzkaller0: entered promiscuous mode [ 117.562637][ T8995] syzkaller0: entered allmulticast mode [ 117.587399][ T8997] netlink: 'syz.8.1238': attribute type 1 has an invalid length. [ 117.595295][ T8943] loop6: detected capacity change from 0 to 128 [ 117.601820][ T8943] vfat: Unknown parameter '' [ 117.623253][ T8999] FAULT_INJECTION: forcing a failure. [ 117.623253][ T8999] name failslab, interval 1, probability 0, space 0, times 0 [ 117.636129][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.6.1239 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 117.636175][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.636219][ T8999] Call Trace: [ 117.636225][ T8999] [ 117.636231][ T8999] __dump_stack+0x1d/0x30 [ 117.636249][ T8999] dump_stack_lvl+0xe8/0x140 [ 117.636264][ T8999] dump_stack+0x15/0x1b [ 117.636278][ T8999] should_fail_ex+0x265/0x280 [ 117.636312][ T8999] ? nfnetlink_rcv+0xa04/0x1690 [ 117.636328][ T8999] should_failslab+0x8c/0xb0 [ 117.636363][ T8999] __kmalloc_cache_noprof+0x4c/0x320 [ 117.636392][ T8999] nfnetlink_rcv+0xa04/0x1690 [ 117.636468][ T8999] netlink_unicast+0x59e/0x670 [ 117.636497][ T8999] netlink_sendmsg+0x58b/0x6b0 [ 117.636556][ T8999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.636599][ T8999] __sock_sendmsg+0x145/0x180 [ 117.636621][ T8999] ____sys_sendmsg+0x31e/0x4e0 [ 117.636681][ T8999] ___sys_sendmsg+0x17b/0x1d0 [ 117.636723][ T8999] __x64_sys_sendmsg+0xd4/0x160 [ 117.636812][ T8999] x64_sys_call+0x2999/0x2fb0 [ 117.636903][ T8999] do_syscall_64+0xd2/0x200 [ 117.636963][ T8999] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.636981][ T8999] ? clear_bhb_loop+0x40/0x90 [ 117.636995][ T8999] ? clear_bhb_loop+0x40/0x90 [ 117.637010][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.637071][ T8999] RIP: 0033:0x7f49ebf2e969 [ 117.637081][ T8999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.637170][ T8999] RSP: 002b:00007f49ea597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.637181][ T8999] RAX: ffffffffffffffda RBX: 00007f49ec155fa0 RCX: 00007f49ebf2e969 [ 117.637188][ T8999] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 117.637223][ T8999] RBP: 00007f49ea597090 R08: 0000000000000000 R09: 0000000000000000 [ 117.637239][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.637246][ T8999] R13: 0000000000000000 R14: 00007f49ec155fa0 R15: 00007ffc10cf0fe8 [ 117.637328][ T8999] [ 117.893076][ T9006] loop5: detected capacity change from 0 to 512 [ 117.900559][ T9006] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 117.909680][ T9006] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.1242: bad orphan inode 15 [ 117.920251][ T9006] ext4_test_bit(bit=14, block=18) = 1 [ 117.925750][ T9006] is_bad_inode(inode)=0 [ 117.930033][ T9006] NEXT_ORPHAN(inode)=1023 [ 117.934468][ T9006] max_ino=32 [ 117.937713][ T9006] i_nlink=0 [ 117.942352][ T9006] ext2 filesystem being mounted at /336/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 117.970501][ T9012] FAULT_INJECTION: forcing a failure. [ 117.970501][ T9012] name failslab, interval 1, probability 0, space 0, times 0 [ 117.983258][ T9012] CPU: 0 UID: 0 PID: 9012 Comm: syz.6.1245 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 117.983285][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.983296][ T9012] Call Trace: [ 117.983301][ T9012] [ 117.983308][ T9012] __dump_stack+0x1d/0x30 [ 117.983330][ T9012] dump_stack_lvl+0xe8/0x140 [ 117.983350][ T9012] dump_stack+0x15/0x1b [ 117.983368][ T9012] should_fail_ex+0x265/0x280 [ 117.983391][ T9012] should_failslab+0x8c/0xb0 [ 117.983419][ T9012] kmem_cache_alloc_noprof+0x50/0x310 [ 117.983450][ T9012] ? mas_alloc_nodes+0x265/0x520 [ 117.983486][ T9012] mas_alloc_nodes+0x265/0x520 [ 117.983517][ T9012] mas_preallocate+0x32b/0x510 [ 117.983552][ T9012] __split_vma+0x239/0x610 [ 117.983592][ T9012] ? mas_find+0x4ea/0x610 [ 117.983625][ T9012] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 117.983656][ T9012] do_vmi_align_munmap+0x1a4/0x3d0 [ 117.983687][ T9012] do_vmi_munmap+0x1db/0x220 [ 117.983712][ T9012] move_vma+0x9be/0xcd0 [ 117.983744][ T9012] ? selinux_mmap_addr+0x99/0xb0 [ 117.983774][ T9012] ? security_mmap_addr+0x5f/0x70 [ 117.983807][ T9012] mremap_to+0x502/0x540 [ 117.983842][ T9012] __se_sys_mremap+0x549/0x6f0 [ 117.983873][ T9012] ? ksys_write+0x192/0x1a0 [ 117.983896][ T9012] __x64_sys_mremap+0x67/0x80 [ 117.983927][ T9012] x64_sys_call+0x2ba9/0x2fb0 [ 117.983951][ T9012] do_syscall_64+0xd2/0x200 [ 117.983982][ T9012] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.984012][ T9012] ? clear_bhb_loop+0x40/0x90 [ 117.984036][ T9012] ? clear_bhb_loop+0x40/0x90 [ 117.984060][ T9012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.984083][ T9012] RIP: 0033:0x7f49ebf2e969 [ 117.984099][ T9012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.984117][ T9012] RSP: 002b:00007f49ea597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 117.984136][ T9012] RAX: ffffffffffffffda RBX: 00007f49ec155fa0 RCX: 00007f49ebf2e969 [ 117.984148][ T9012] RDX: 0000000005000000 RSI: 0000000000002000 RDI: 0000200000ff5000 [ 117.984162][ T9012] RBP: 00007f49ea597090 R08: 0000200000ffd000 R09: 0000000000000000 [ 117.984175][ T9012] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 117.984188][ T9012] R13: 0000000000000001 R14: 00007f49ec155fa0 R15: 00007ffc10cf0fe8 [ 117.984209][ T9012] [ 118.012839][ T9017] lo speed is unknown, defaulting to 1000 [ 118.127561][ T9018] loop9: detected capacity change from 0 to 8192 [ 118.253038][ T9018] syz.9.1247: attempt to access beyond end of device [ 118.253038][ T9018] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 118.267147][ T9018] Buffer I/O error on dev loop9, logical block 57847, async page read [ 118.292486][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 118.292503][ T29] audit: type=1400 audit(1748818835.054:21520): avc: denied { associate } for pid=9019 comm="syz.6.1248" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 118.324229][ T9027] bond1: option mode: unable to set because the bond device is up [ 118.332529][ T9028] loop6: detected capacity change from 0 to 512 [ 118.371598][ T9031] loop9: detected capacity change from 0 to 512 [ 118.381771][ T9028] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 118.390393][ T9028] EXT4-fs (loop6): orphan cleanup on readonly fs [ 118.402174][ T9028] EXT4-fs error (device loop6): ext4_quota_enable:7124: inode #15: comm syz.6.1248: iget: bad i_size value: 360287970189639690 [ 118.412529][ T9039] netlink: 'syz.1.1254': attribute type 8 has an invalid length. [ 118.417243][ T9031] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.427263][ T9028] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.1248: Bad quota inode: 15, type: 2 [ 118.454740][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 118.463715][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 118.467759][ T9040] netlink: 'syz.5.1253': attribute type 1 has an invalid length. [ 118.473283][ T29] audit: type=1326 audit(1748818835.214:21521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 118.504685][ T29] audit: type=1326 audit(1748818835.214:21522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 118.516509][ T9028] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 118.528408][ T29] audit: type=1326 audit(1748818835.214:21523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 118.566949][ T29] audit: type=1326 audit(1748818835.214:21524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 118.575992][ T9028] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 118.590783][ T29] audit: type=1326 audit(1748818835.214:21525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 118.620811][ T29] audit: type=1326 audit(1748818835.214:21526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 118.644288][ T29] audit: type=1326 audit(1748818835.214:21527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 118.667968][ T29] audit: type=1326 audit(1748818835.214:21528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 118.691918][ T29] audit: type=1326 audit(1748818835.214:21529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 118.724030][ T9039] wireguard0: entered promiscuous mode [ 118.730129][ T9039] wireguard0: entered allmulticast mode [ 118.738836][ T8406] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 118.791365][ T9046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1257'. [ 118.800446][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 118.814695][ T9046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1257'. [ 118.902756][ T9055] lo speed is unknown, defaulting to 1000 [ 118.923866][ T9057] loop9: detected capacity change from 0 to 512 [ 118.931274][ T9057] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.940481][ T9057] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 118.951650][ T9057] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 119.013053][ T9057] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 119.022008][ T9057] System zones: 0-2, 18-18, 34-34 [ 119.037974][ T9057] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.1261: iget: bad i_size value: 360287970189639680 [ 119.066463][ T9057] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.1261: couldn't read orphan inode 15 (err -117) [ 119.264116][ T9085] lo speed is unknown, defaulting to 1000 [ 119.391894][ T9094] netlink: 'syz.9.1275': attribute type 39 has an invalid length. [ 119.599072][ T9114] netlink: 'syz.5.1282': attribute type 1 has an invalid length. [ 119.608952][ T9109] FAULT_INJECTION: forcing a failure. [ 119.608952][ T9109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.622311][ T9109] CPU: 1 UID: 0 PID: 9109 Comm: syz.6.1280 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 119.622343][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.622356][ T9109] Call Trace: [ 119.622362][ T9109] [ 119.622432][ T9109] __dump_stack+0x1d/0x30 [ 119.622477][ T9109] dump_stack_lvl+0xe8/0x140 [ 119.622521][ T9109] dump_stack+0x15/0x1b [ 119.622537][ T9109] should_fail_ex+0x265/0x280 [ 119.622638][ T9109] should_fail+0xb/0x20 [ 119.622655][ T9109] should_fail_usercopy+0x1a/0x20 [ 119.622677][ T9109] _copy_from_user+0x1c/0xb0 [ 119.622741][ T9109] do_ipv6_setsockopt+0x220/0x22e0 [ 119.622763][ T9109] ? kstrtoull+0x111/0x140 [ 119.622796][ T9109] ? avc_has_perm_noaudit+0x1b1/0x200 [ 119.622845][ T9109] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 119.622917][ T9109] ipv6_setsockopt+0x59/0x130 [ 119.622942][ T9109] udpv6_setsockopt+0x99/0xb0 [ 119.623032][ T9109] sock_common_setsockopt+0x69/0x80 [ 119.623054][ T9109] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 119.623075][ T9109] __sys_setsockopt+0x181/0x200 [ 119.623103][ T9109] __x64_sys_setsockopt+0x64/0x80 [ 119.623149][ T9109] x64_sys_call+0x2bd5/0x2fb0 [ 119.623227][ T9109] do_syscall_64+0xd2/0x200 [ 119.623339][ T9109] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 119.623373][ T9109] ? clear_bhb_loop+0x40/0x90 [ 119.623393][ T9109] ? clear_bhb_loop+0x40/0x90 [ 119.623413][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.623478][ T9109] RIP: 0033:0x7f49ebf2e969 [ 119.623502][ T9109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.623519][ T9109] RSP: 002b:00007f49ea597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.623594][ T9109] RAX: ffffffffffffffda RBX: 00007f49ec155fa0 RCX: 00007f49ebf2e969 [ 119.623667][ T9109] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 119.623679][ T9109] RBP: 00007f49ea597090 R08: 0000000000000310 R09: 0000000000000000 [ 119.623690][ T9109] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 119.623702][ T9109] R13: 0000000000000000 R14: 00007f49ec155fa0 R15: 00007ffc10cf0fe8 [ 119.623845][ T9109] [ 119.870003][ T9121] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 119.913433][ T9121] loop1: detected capacity change from 0 to 512 [ 119.922733][ T9121] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.1.1285: corrupted xattr block 95: invalid header [ 119.938109][ T9121] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1285: bg 0: block 7: invalid block bitmap [ 119.950899][ T9121] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 119.963626][ T9121] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #11: comm syz.1.1285: corrupted xattr block 95: invalid header [ 119.978036][ T9121] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 119.987167][ T9121] EXT4-fs (loop1): 1 orphan inode deleted [ 119.997186][ T9130] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 120.090127][ T9132] loop8: detected capacity change from 0 to 1024 [ 120.107982][ T9132] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.425347][ T9149] loop9: detected capacity change from 0 to 512 [ 120.432889][ T9149] EXT4-fs (loop9): fragment/cluster size (4096) != block size (2048) [ 120.713956][ T9165] gtp0: entered promiscuous mode [ 120.719097][ T9165] gtp0: entered allmulticast mode [ 120.719249][ T9159] loop5: detected capacity change from 0 to 128 [ 120.730837][ T9159] vfat: Unknown parameter '' [ 120.822390][ T9175] netlink: 'syz.6.1307': attribute type 1 has an invalid length. [ 120.906891][ T9191] FAULT_INJECTION: forcing a failure. [ 120.906891][ T9191] name failslab, interval 1, probability 0, space 0, times 0 [ 120.919763][ T9191] CPU: 1 UID: 0 PID: 9191 Comm: syz.1.1313 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 120.919787][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.919805][ T9191] Call Trace: [ 120.919811][ T9191] [ 120.919817][ T9191] __dump_stack+0x1d/0x30 [ 120.919844][ T9191] dump_stack_lvl+0xe8/0x140 [ 120.919861][ T9191] dump_stack+0x15/0x1b [ 120.919875][ T9191] should_fail_ex+0x265/0x280 [ 120.919914][ T9191] should_failslab+0x8c/0xb0 [ 120.919934][ T9191] kmem_cache_alloc_noprof+0x50/0x310 [ 120.919958][ T9191] ? audit_log_start+0x365/0x6c0 [ 120.919987][ T9191] audit_log_start+0x365/0x6c0 [ 120.920054][ T9191] audit_seccomp+0x48/0x100 [ 120.920148][ T9191] ? __seccomp_filter+0x68c/0x10d0 [ 120.920215][ T9191] __seccomp_filter+0x69d/0x10d0 [ 120.920318][ T9191] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.920343][ T9191] ? vfs_write+0x75e/0x8e0 [ 120.920363][ T9191] ? __rcu_read_unlock+0x4f/0x70 [ 120.920460][ T9191] ? __fget_files+0x184/0x1c0 [ 120.920489][ T9191] __secure_computing+0x82/0x150 [ 120.920512][ T9191] syscall_trace_enter+0xcf/0x1e0 [ 120.920536][ T9191] do_syscall_64+0xac/0x200 [ 120.920568][ T9191] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 120.920621][ T9191] ? clear_bhb_loop+0x40/0x90 [ 120.920643][ T9191] ? clear_bhb_loop+0x40/0x90 [ 120.920663][ T9191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.920754][ T9191] RIP: 0033:0x7f0c3648e969 [ 120.920770][ T9191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.920790][ T9191] RSP: 002b:00007f0c34af6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 120.920812][ T9191] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0c3648e969 [ 120.920847][ T9191] RDX: 00007f0c34af6f20 RSI: 0000000000000058 RDI: 00007f0c34af6f20 [ 120.920859][ T9191] RBP: 00007f0c34af7090 R08: 0000000000000000 R09: 0000000000000058 [ 120.920871][ T9191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.920883][ T9191] R13: 0000000000000000 R14: 00007f0c366b5fa0 R15: 00007ffcc7df6158 [ 120.920924][ T9191] [ 121.149707][ T9179] loop5: detected capacity change from 0 to 512 [ 121.176567][ T9194] loop1: detected capacity change from 0 to 512 [ 121.188806][ T9179] EXT4-fs (loop5): 1 orphan inode deleted [ 121.195234][ T9194] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 121.195635][ T9179] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.209983][ T9194] EXT4-fs (loop1): mount failed [ 121.234889][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 121.296801][ T9215] loop9: detected capacity change from 0 to 512 [ 121.305725][ T9215] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #17: comm syz.9.1320: iget: bogus i_mode (0) [ 121.318023][ T9215] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.1320: couldn't read orphan inode 17 (err -117) [ 121.338008][ T9215] xt_connbytes: Forcing CT accounting to be enabled [ 121.344913][ T9215] Cannot find add_set index 0 as target [ 121.352144][ T9215] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.1320: bg 0: block 7: invalid block bitmap [ 121.404130][ T9213] FAULT_INJECTION: forcing a failure. [ 121.404130][ T9213] name failslab, interval 1, probability 0, space 0, times 0 [ 121.416820][ T9213] CPU: 1 UID: 0 PID: 9213 Comm: syz.8.1319 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 121.416851][ T9213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.416864][ T9213] Call Trace: [ 121.416906][ T9213] [ 121.416921][ T9213] __dump_stack+0x1d/0x30 [ 121.416943][ T9213] dump_stack_lvl+0xe8/0x140 [ 121.416966][ T9213] dump_stack+0x15/0x1b [ 121.416984][ T9213] should_fail_ex+0x265/0x280 [ 121.417034][ T9213] should_failslab+0x8c/0xb0 [ 121.417094][ T9213] kmem_cache_alloc_noprof+0x50/0x310 [ 121.417121][ T9213] ? security_file_alloc+0x32/0x100 [ 121.417145][ T9213] security_file_alloc+0x32/0x100 [ 121.417228][ T9213] init_file+0x5c/0x1d0 [ 121.417273][ T9213] alloc_empty_file+0x8b/0x200 [ 121.417303][ T9213] path_openat+0x68/0x2170 [ 121.417360][ T9213] ? _parse_integer_limit+0x170/0x190 [ 121.417395][ T9213] ? _parse_integer+0x27/0x40 [ 121.417429][ T9213] ? kstrtoull+0x111/0x140 [ 121.417490][ T9213] ? kstrtouint+0x76/0xc0 [ 121.417525][ T9213] do_filp_open+0x109/0x230 [ 121.417608][ T9213] do_sys_openat2+0xa6/0x110 [ 121.417645][ T9213] __x64_sys_creat+0x65/0x90 [ 121.417677][ T9213] x64_sys_call+0x114d/0x2fb0 [ 121.417697][ T9213] do_syscall_64+0xd2/0x200 [ 121.417766][ T9213] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 121.417795][ T9213] ? clear_bhb_loop+0x40/0x90 [ 121.417816][ T9213] ? clear_bhb_loop+0x40/0x90 [ 121.417906][ T9213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.417928][ T9213] RIP: 0033:0x7f6a8a57e969 [ 121.417956][ T9213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.417978][ T9213] RSP: 002b:00007f6a88be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 121.418000][ T9213] RAX: ffffffffffffffda RBX: 00007f6a8a7a5fa0 RCX: 00007f6a8a57e969 [ 121.418030][ T9213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 121.418045][ T9213] RBP: 00007f6a88be7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.418059][ T9213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.418073][ T9213] R13: 0000000000000000 R14: 00007f6a8a7a5fa0 R15: 00007ffe70fe1de8 [ 121.418094][ T9213] [ 121.704540][ T9241] random: crng reseeded on system resumption [ 121.715469][ T9241] loop6: detected capacity change from 0 to 512 [ 121.730256][ T9241] EXT4-fs: test_dummy_encryption option not supported [ 122.010187][ T9297] netlink: 'syz.9.1336': attribute type 1 has an invalid length. [ 122.045779][ T9314] FAULT_INJECTION: forcing a failure. [ 122.045779][ T9314] name failslab, interval 1, probability 0, space 0, times 0 [ 122.058594][ T9314] CPU: 0 UID: 0 PID: 9314 Comm: syz.6.1338 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 122.058626][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.058639][ T9314] Call Trace: [ 122.058645][ T9314] [ 122.058652][ T9314] __dump_stack+0x1d/0x30 [ 122.058718][ T9314] dump_stack_lvl+0xe8/0x140 [ 122.058775][ T9314] dump_stack+0x15/0x1b [ 122.058791][ T9314] should_fail_ex+0x265/0x280 [ 122.058814][ T9314] should_failslab+0x8c/0xb0 [ 122.058908][ T9314] kmem_cache_alloc_noprof+0x50/0x310 [ 122.058941][ T9314] ? getname_flags+0x80/0x3b0 [ 122.058972][ T9314] getname_flags+0x80/0x3b0 [ 122.059081][ T9314] path_setxattrat+0x223/0x310 [ 122.059128][ T9314] __x64_sys_lsetxattr+0x71/0x90 [ 122.059158][ T9314] x64_sys_call+0x1e36/0x2fb0 [ 122.059183][ T9314] do_syscall_64+0xd2/0x200 [ 122.059244][ T9314] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.059330][ T9314] ? clear_bhb_loop+0x40/0x90 [ 122.059355][ T9314] ? clear_bhb_loop+0x40/0x90 [ 122.059451][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.059475][ T9314] RIP: 0033:0x7f49ebf2e969 [ 122.059494][ T9314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.059525][ T9314] RSP: 002b:00007f49ea597038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 122.059549][ T9314] RAX: ffffffffffffffda RBX: 00007f49ec155fa0 RCX: 00007f49ebf2e969 [ 122.059635][ T9314] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 00002000000001c0 [ 122.059650][ T9314] RBP: 00007f49ea597090 R08: 0000000000000001 R09: 0000000000000000 [ 122.059734][ T9314] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 122.059748][ T9314] R13: 0000000000000000 R14: 00007f49ec155fa0 R15: 00007ffc10cf0fe8 [ 122.059769][ T9314] [ 122.445710][ T9354] netlink: 'syz.6.1350': attribute type 1 has an invalid length. [ 122.523600][ T9373] lo speed is unknown, defaulting to 1000 [ 122.544781][ T9376] syzkaller0: entered promiscuous mode [ 122.550370][ T9376] syzkaller0: entered allmulticast mode [ 122.894152][ T9419] loop5: detected capacity change from 0 to 128 [ 122.903511][ T9419] vfat: Unknown parameter '' [ 123.307902][ T9445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.315222][ T9445] IPv6: NLM_F_CREATE should be set when creating new route [ 123.325021][ T9445] smc: net device bond0 erased user defined pnetid SYZ2 [ 123.346361][ T9447] netlink: 'syz.9.1366': attribute type 1 has an invalid length. [ 123.418962][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 123.418978][ T29] audit: type=1326 audit(1748818840.184:21697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 123.449649][ T29] audit: type=1326 audit(1748818840.184:21698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 123.473220][ T29] audit: type=1326 audit(1748818840.184:21699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 123.509937][ T29] audit: type=1326 audit(1748818840.234:21700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 123.533577][ T29] audit: type=1326 audit(1748818840.234:21701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 123.557914][ T29] audit: type=1326 audit(1748818840.274:21702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 123.581494][ T29] audit: type=1326 audit(1748818840.274:21703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 123.605131][ T29] audit: type=1326 audit(1748818840.274:21704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 123.628985][ T29] audit: type=1326 audit(1748818840.274:21705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 123.652743][ T29] audit: type=1326 audit(1748818840.294:21706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9451 comm="syz.6.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 123.733187][ T9472] loop6: detected capacity change from 0 to 1024 [ 123.744183][ T9473] __nla_validate_parse: 8 callbacks suppressed [ 123.744199][ T9473] netlink: 472 bytes leftover after parsing attributes in process `syz.9.1376'. [ 123.782181][ T9472] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.1377: missing EA_INODE flag [ 123.806280][ T9472] EXT4-fs (loop6): Remounting filesystem read-only [ 123.813407][ T9488] FAULT_INJECTION: forcing a failure. [ 123.813407][ T9488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.826629][ T9488] CPU: 1 UID: 0 PID: 9488 Comm: syz.9.1382 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 123.826661][ T9488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.826674][ T9488] Call Trace: [ 123.826681][ T9488] [ 123.826697][ T9488] __dump_stack+0x1d/0x30 [ 123.826728][ T9488] dump_stack_lvl+0xe8/0x140 [ 123.826806][ T9488] dump_stack+0x15/0x1b [ 123.826820][ T9488] should_fail_ex+0x265/0x280 [ 123.826839][ T9488] should_fail+0xb/0x20 [ 123.826854][ T9488] should_fail_usercopy+0x1a/0x20 [ 123.826972][ T9488] _copy_to_user+0x20/0xa0 [ 123.826996][ T9488] simple_read_from_buffer+0xb5/0x130 [ 123.827059][ T9488] proc_fail_nth_read+0x100/0x140 [ 123.827086][ T9488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.827158][ T9488] vfs_read+0x1a0/0x6f0 [ 123.827179][ T9488] ? __rcu_read_unlock+0x4f/0x70 [ 123.827197][ T9488] ? __fget_files+0x184/0x1c0 [ 123.827226][ T9488] ksys_read+0xda/0x1a0 [ 123.827259][ T9488] __x64_sys_read+0x40/0x50 [ 123.827286][ T9488] x64_sys_call+0x2d77/0x2fb0 [ 123.827298][ T9488] do_syscall_64+0xd2/0x200 [ 123.827313][ T9488] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.827327][ T9488] ? clear_bhb_loop+0x40/0x90 [ 123.827404][ T9488] ? clear_bhb_loop+0x40/0x90 [ 123.827419][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.827431][ T9488] RIP: 0033:0x7f6ad494d37c [ 123.827440][ T9488] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.827463][ T9488] RSP: 002b:00007f6ad2fb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.827556][ T9488] RAX: ffffffffffffffda RBX: 00007f6ad4b75fa0 RCX: 00007f6ad494d37c [ 123.827567][ T9488] RDX: 000000000000000f RSI: 00007f6ad2fb70a0 RDI: 0000000000000003 [ 123.827580][ T9488] RBP: 00007f6ad2fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.827591][ T9488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.827601][ T9488] R13: 0000000000000000 R14: 00007f6ad4b75fa0 R15: 00007ffc85a754f8 [ 123.827617][ T9488] [ 124.124893][ T9511] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1389'. [ 124.167110][ T9517] syzkaller1: entered promiscuous mode [ 124.172642][ T9517] syzkaller1: entered allmulticast mode [ 124.217037][ T9527] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1393'. [ 124.226613][ T9527] batadv0: entered promiscuous mode [ 124.259529][ T9535] netlink: 212424 bytes leftover after parsing attributes in process `syz.9.1394'. [ 124.271327][ T9535] loop9: detected capacity change from 0 to 128 [ 124.290381][ T58] kworker/u8:4: attempt to access beyond end of device [ 124.290381][ T58] loop9: rw=1, sector=145, nr_sectors = 384 limit=128 [ 124.317646][ T58] kworker/u8:4: attempt to access beyond end of device [ 124.317646][ T58] loop9: rw=1, sector=537, nr_sectors = 8 limit=128 [ 124.333048][ T58] kworker/u8:4: attempt to access beyond end of device [ 124.333048][ T58] loop9: rw=1, sector=553, nr_sectors = 8 limit=128 [ 124.351085][ T58] kworker/u8:4: attempt to access beyond end of device [ 124.351085][ T58] loop9: rw=1, sector=569, nr_sectors = 8 limit=128 [ 124.365409][ T58] kworker/u8:4: attempt to access beyond end of device [ 124.365409][ T58] loop9: rw=1, sector=585, nr_sectors = 8 limit=128 [ 124.380543][ T58] kworker/u8:4: attempt to access beyond end of device [ 124.380543][ T58] loop9: rw=1, sector=601, nr_sectors = 8 limit=128 [ 124.395307][ T58] kworker/u8:4: attempt to access beyond end of device [ 124.395307][ T58] loop9: rw=1, sector=617, nr_sectors = 8 limit=128 [ 124.409731][ T58] kworker/u8:4: attempt to access beyond end of device [ 124.409731][ T58] loop9: rw=1, sector=633, nr_sectors = 8 limit=128 [ 124.424110][ T58] kworker/u8:4: attempt to access beyond end of device [ 124.424110][ T58] loop9: rw=1, sector=649, nr_sectors = 8 limit=128 [ 124.438876][ T58] kworker/u8:4: attempt to access beyond end of device [ 124.438876][ T58] loop9: rw=2049, sector=665, nr_sectors = 8 limit=128 [ 124.608387][ T9589] loop9: detected capacity change from 0 to 512 [ 124.617318][ T9589] EXT4-fs (loop9): too many log groups per flexible block group [ 124.625200][ T9589] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 124.632195][ T9589] EXT4-fs (loop9): mount failed [ 124.642128][ T9586] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1402'. [ 125.059932][ T9615] loop9: detected capacity change from 0 to 128 [ 125.066315][ T9615] vfat: Unknown parameter '' [ 125.119862][ T9664] loop5: detected capacity change from 0 to 2048 [ 125.134328][ T9669] netlink: 'syz.9.1411': attribute type 39 has an invalid length. [ 125.494247][ T9688] netlink: 472 bytes leftover after parsing attributes in process `syz.6.1417'. [ 125.649352][ T9699] loop1: detected capacity change from 0 to 2048 [ 125.777447][ T9713] loop6: detected capacity change from 0 to 128 [ 125.812937][ T9713] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.108201][ T9724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1431'. [ 126.117293][ T9724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1431'. [ 126.181165][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1433'. [ 126.196984][ T9726] loop8: detected capacity change from 0 to 512 [ 126.204332][ T9726] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.213512][ T9726] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 126.232456][ T9726] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 126.248625][ T9732] netlink: 'syz.5.1435': attribute type 1 has an invalid length. [ 126.257728][ T9726] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 126.276778][ T9729] loop1: detected capacity change from 0 to 512 [ 126.286572][ T9726] System zones: 0-2, 18-18, 34-35 [ 126.288651][ T9729] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.1.1434: corrupted xattr block 95: invalid header [ 126.313017][ T9729] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1434: bg 0: block 7: invalid block bitmap [ 126.326477][ T9729] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 126.336677][ T9735] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 126.358082][ T9729] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #11: comm syz.1.1434: corrupted xattr block 95: invalid header [ 126.381177][ T9729] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 126.392559][ T9729] EXT4-fs (loop1): 1 orphan inode deleted [ 126.404031][ T9744] SELinux: syz.9.1440 (9744) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 126.568727][ T9750] netlink: 'syz.6.1442': attribute type 39 has an invalid length. [ 126.938914][ T9762] xt_TCPMSS: Only works on TCP SYN packets [ 126.988811][ T9762] hub 6-0:1.0: USB hub found [ 126.996949][ T9762] hub 6-0:1.0: 8 ports detected [ 127.114072][ T8354] EXT4-fs unmount: 49 callbacks suppressed [ 127.114093][ T8354] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.183772][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1447'. [ 127.192860][ T9765] netlink: 'syz.8.1447': attribute type 18 has an invalid length. [ 127.235710][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.268109][ T9771] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 127.456592][ T9787] syzkaller0: entered promiscuous mode [ 127.462130][ T9787] syzkaller0: entered allmulticast mode [ 127.588645][ T9793] lo speed is unknown, defaulting to 1000 [ 127.681489][ T9807] loop8: detected capacity change from 0 to 512 [ 127.737127][ T9807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.765105][ T9807] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.790734][ T9807] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.1464: corrupted inode contents [ 127.804044][ T9807] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.1464: mark_inode_dirty error [ 127.834376][ T9807] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.1464: corrupted inode contents [ 127.848229][ T9834] netlink: 'syz.6.1470': attribute type 39 has an invalid length. [ 127.868449][ T9807] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.1464: mark_inode_dirty error [ 128.010409][ T9845] netlink: 'syz.5.1472': attribute type 1 has an invalid length. [ 128.077976][ T8354] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.096721][ T9850] syzkaller0: entered promiscuous mode [ 128.102360][ T9850] syzkaller0: entered allmulticast mode [ 128.146326][ T9864] FAULT_INJECTION: forcing a failure. [ 128.146326][ T9864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.159649][ T9864] CPU: 1 UID: 0 PID: 9864 Comm: syz.8.1475 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 128.159743][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.159758][ T9864] Call Trace: [ 128.159765][ T9864] [ 128.159774][ T9864] __dump_stack+0x1d/0x30 [ 128.159800][ T9864] dump_stack_lvl+0xe8/0x140 [ 128.159822][ T9864] dump_stack+0x15/0x1b [ 128.159882][ T9864] should_fail_ex+0x265/0x280 [ 128.159952][ T9864] should_fail+0xb/0x20 [ 128.159974][ T9864] should_fail_usercopy+0x1a/0x20 [ 128.160000][ T9864] _copy_from_user+0x1c/0xb0 [ 128.160030][ T9864] ___sys_sendmsg+0xc1/0x1d0 [ 128.160072][ T9864] __x64_sys_sendmsg+0xd4/0x160 [ 128.160112][ T9864] x64_sys_call+0x2999/0x2fb0 [ 128.160133][ T9864] do_syscall_64+0xd2/0x200 [ 128.160225][ T9864] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.160254][ T9864] ? clear_bhb_loop+0x40/0x90 [ 128.160342][ T9864] ? clear_bhb_loop+0x40/0x90 [ 128.160366][ T9864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.160388][ T9864] RIP: 0033:0x7f6a8a57e969 [ 128.160463][ T9864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.160484][ T9864] RSP: 002b:00007f6a88be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.160509][ T9864] RAX: ffffffffffffffda RBX: 00007f6a8a7a5fa0 RCX: 00007f6a8a57e969 [ 128.160556][ T9864] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 128.160572][ T9864] RBP: 00007f6a88be7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.160607][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.160622][ T9864] R13: 0000000000000000 R14: 00007f6a8a7a5fa0 R15: 00007ffe70fe1de8 [ 128.160642][ T9864] [ 128.355922][ T9872] netlink: 'syz.8.1478': attribute type 39 has an invalid length. [ 128.462531][ T9885] batadv0: entered promiscuous mode [ 128.571998][ T9904] netlink: 'syz.5.1490': attribute type 39 has an invalid length. [ 128.911672][ T9919] lo speed is unknown, defaulting to 1000 [ 128.960638][ T9925] FAULT_INJECTION: forcing a failure. [ 128.960638][ T9925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.974269][ T9925] CPU: 0 UID: 0 PID: 9925 Comm: syz.6.1497 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 128.974302][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.974313][ T9925] Call Trace: [ 128.974319][ T9925] [ 128.974376][ T9925] __dump_stack+0x1d/0x30 [ 128.974400][ T9925] dump_stack_lvl+0xe8/0x140 [ 128.974423][ T9925] dump_stack+0x15/0x1b [ 128.974445][ T9925] should_fail_ex+0x265/0x280 [ 128.974485][ T9925] should_fail+0xb/0x20 [ 128.974506][ T9925] should_fail_usercopy+0x1a/0x20 [ 128.974529][ T9925] _copy_from_user+0x1c/0xb0 [ 128.974634][ T9925] proc_submiturb+0x43/0xa0 [ 128.974662][ T9925] usbdev_ioctl+0xcc2/0x1710 [ 128.974687][ T9925] ? __pfx_usbdev_ioctl+0x10/0x10 [ 128.974705][ T9925] __se_sys_ioctl+0xcb/0x140 [ 128.974736][ T9925] __x64_sys_ioctl+0x43/0x50 [ 128.974775][ T9925] x64_sys_call+0x19a8/0x2fb0 [ 128.974872][ T9925] do_syscall_64+0xd2/0x200 [ 128.975008][ T9925] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.975072][ T9925] ? clear_bhb_loop+0x40/0x90 [ 128.975130][ T9925] ? clear_bhb_loop+0x40/0x90 [ 128.975153][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.975220][ T9925] RIP: 0033:0x7f49ebf2e969 [ 128.975240][ T9925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.975259][ T9925] RSP: 002b:00007f49ea597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.975279][ T9925] RAX: ffffffffffffffda RBX: 00007f49ec155fa0 RCX: 00007f49ebf2e969 [ 128.975291][ T9925] RDX: 0000200000000280 RSI: 000000008038550a RDI: 0000000000000004 [ 128.975303][ T9925] RBP: 00007f49ea597090 R08: 0000000000000000 R09: 0000000000000000 [ 128.975316][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.975370][ T9925] R13: 0000000000000000 R14: 00007f49ec155fa0 R15: 00007ffc10cf0fe8 [ 128.975389][ T9925] [ 129.183682][ T9930] loop5: detected capacity change from 0 to 512 [ 129.259318][ T9930] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.5.1498: corrupted xattr block 95: invalid header [ 129.313807][ T9930] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1498: bg 0: block 7: invalid block bitmap [ 129.342865][ T9951] netlink: 'syz.6.1504': attribute type 1 has an invalid length. [ 129.349498][ T9930] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 129.362490][ T9929] loop9: detected capacity change from 0 to 128 [ 129.378461][ T9930] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #11: comm syz.5.1498: corrupted xattr block 95: invalid header [ 129.388617][ T9929] vfat: Unknown parameter '' [ 129.418955][ T9930] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 129.429144][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 129.429184][ T29] audit: type=1326 audit(1748818846.204:21991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 129.437041][ T9930] EXT4-fs (loop5): 1 orphan inode deleted [ 129.479130][ T29] audit: type=1326 audit(1748818846.234:21992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 129.502720][ T29] audit: type=1326 audit(1748818846.234:21993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 129.515772][ T9963] syzkaller0: entered promiscuous mode [ 129.526214][ T29] audit: type=1326 audit(1748818846.234:21994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 129.531661][ T9963] syzkaller0: entered allmulticast mode [ 129.555125][ T29] audit: type=1326 audit(1748818846.234:21995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 129.561840][ T9960] loop6: detected capacity change from 0 to 2048 [ 129.584273][ T29] audit: type=1326 audit(1748818846.234:21996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 129.591089][ T9930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.614080][ T29] audit: type=1326 audit(1748818846.234:21997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 129.614109][ T29] audit: type=1326 audit(1748818846.234:21998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 129.614137][ T29] audit: type=1326 audit(1748818846.234:21999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 129.697271][ T29] audit: type=1326 audit(1748818846.234:22000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9959 comm="syz.6.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f49ebf2e969 code=0x7ffc0000 [ 129.746434][ T9960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.768303][ T9960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.798135][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.821433][ T9978] __nla_validate_parse: 9 callbacks suppressed [ 129.821450][ T9978] netlink: 472 bytes leftover after parsing attributes in process `syz.8.1511'. [ 129.842519][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1509'. [ 129.851602][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1509'. [ 129.982855][T10003] loop9: detected capacity change from 0 to 1764 [ 129.985041][T10004] netlink: 'syz.5.1517': attribute type 13 has an invalid length. [ 130.008079][T10003] iso9660: Bad value for 'session' [ 130.080393][T10017] netlink: 'syz.8.1520': attribute type 1 has an invalid length. [ 130.127300][T10004] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.134689][T10004] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.147128][T10022] netlink: 'syz.9.1521': attribute type 1 has an invalid length. [ 130.261694][T10004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.275475][T10004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.285697][T10026] loop6: detected capacity change from 0 to 128 [ 130.348442][T10026] vfat: Unknown parameter '' [ 130.377475][T10004] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.386512][T10004] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.395569][T10004] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.404735][T10004] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.533643][T10064] loop8: detected capacity change from 0 to 2048 [ 130.552451][T10064] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.589117][T10070] loop9: detected capacity change from 0 to 512 [ 130.602735][T10064] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.621218][T10070] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.730294][T10070] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.1523: invalid block [ 130.736373][T10089] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1529'. [ 130.772886][T10070] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1523: invalid indirect mapped block 4294967295 (level 1) [ 130.814886][T10070] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1523: invalid indirect mapped block 4294967295 (level 1) [ 130.854377][T10070] EXT4-fs (loop9): 2 truncates cleaned up [ 130.870702][T10070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.030256][T10126] netlink: 'syz.8.1542': attribute type 39 has an invalid length. [ 131.047530][ T8406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.108559][T10138] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1546'. [ 131.117628][T10138] batadv0: entered promiscuous mode [ 131.149621][T10142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1545'. [ 131.324187][T10180] netlink: 472 bytes leftover after parsing attributes in process `syz.9.1555'. [ 131.350497][T10183] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1556'. [ 131.359595][T10183] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1556'. [ 131.422082][T10161] loop1: detected capacity change from 0 to 128 [ 131.429091][T10161] vfat: Unknown parameter '' [ 131.912640][T10272] loop9: detected capacity change from 0 to 512 [ 131.940771][T10277] loop1: detected capacity change from 0 to 512 [ 131.948528][T10272] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 131.964157][T10272] EXT4-fs (loop9): mount failed [ 131.974210][T10277] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 131.989042][T10277] EXT4-fs (loop1): mount failed [ 132.046615][T10298] FAULT_INJECTION: forcing a failure. [ 132.046615][T10298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.059885][T10298] CPU: 0 UID: 0 PID: 10298 Comm: syz.1.1572 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 132.059926][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.059938][T10298] Call Trace: [ 132.059946][T10298] [ 132.059955][T10298] __dump_stack+0x1d/0x30 [ 132.060054][T10298] dump_stack_lvl+0xe8/0x140 [ 132.060075][T10298] dump_stack+0x15/0x1b [ 132.060112][T10298] should_fail_ex+0x265/0x280 [ 132.060134][T10298] should_fail+0xb/0x20 [ 132.060154][T10298] should_fail_usercopy+0x1a/0x20 [ 132.060243][T10298] _copy_to_user+0x20/0xa0 [ 132.060302][T10298] simple_read_from_buffer+0xb5/0x130 [ 132.060341][T10298] proc_fail_nth_read+0x100/0x140 [ 132.060366][T10298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.060401][T10298] vfs_read+0x1a0/0x6f0 [ 132.060426][T10298] ? __rcu_read_unlock+0x4f/0x70 [ 132.060453][T10298] ? __fget_files+0x184/0x1c0 [ 132.060558][T10298] ksys_read+0xda/0x1a0 [ 132.060579][T10298] __x64_sys_read+0x40/0x50 [ 132.060603][T10298] x64_sys_call+0x2d77/0x2fb0 [ 132.060685][T10298] do_syscall_64+0xd2/0x200 [ 132.060719][T10298] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.060743][T10298] ? clear_bhb_loop+0x40/0x90 [ 132.060764][T10298] ? clear_bhb_loop+0x40/0x90 [ 132.060813][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.060838][T10298] RIP: 0033:0x7f0c3648d37c [ 132.060858][T10298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.060880][T10298] RSP: 002b:00007f0c34ad6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.060902][T10298] RAX: ffffffffffffffda RBX: 00007f0c366b6080 RCX: 00007f0c3648d37c [ 132.060935][T10298] RDX: 000000000000000f RSI: 00007f0c34ad60a0 RDI: 0000000000000003 [ 132.060947][T10298] RBP: 00007f0c34ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.060962][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.060976][T10298] R13: 0000000000000001 R14: 00007f0c366b6080 R15: 00007ffcc7df6158 [ 132.060998][T10298] [ 132.395294][T10320] loop1: detected capacity change from 0 to 2048 [ 132.409728][T10320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.423327][T10320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.641005][T10347] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1585'. [ 132.650024][T10347] batadv0: entered promiscuous mode [ 132.704055][T10351] loop9: detected capacity change from 0 to 2048 [ 132.718269][T10351] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.731179][T10351] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.894154][T10360] lo speed is unknown, defaulting to 1000 [ 132.904572][T10362] netlink: 'syz.6.1590': attribute type 1 has an invalid length. [ 133.076870][T10381] loop6: detected capacity change from 0 to 2048 [ 133.116771][T10381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.148852][T10381] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.155420][T10400] syzkaller0: entered promiscuous mode [ 133.163411][T10400] syzkaller0: entered allmulticast mode [ 133.435016][T10454] loop5: detected capacity change from 0 to 512 [ 133.470647][T10454] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.479947][T10454] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 133.499739][T10454] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 133.522595][T10454] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 133.542064][T10454] System zones: 0-2, 18-18, 34-35 [ 133.545140][T10475] loop1: detected capacity change from 0 to 1764 [ 133.556049][T10475] iso9660: Bad value for 'session' [ 133.557555][T10454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.590834][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.793871][T10524] loop6: detected capacity change from 0 to 512 [ 133.829196][T10524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.842242][T10524] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.854201][T10524] FAULT_INJECTION: forcing a failure. [ 133.854201][T10524] name failslab, interval 1, probability 0, space 0, times 0 [ 133.866972][T10524] CPU: 0 UID: 0 PID: 10524 Comm: syz.6.1636 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 133.867025][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.867040][T10524] Call Trace: [ 133.867048][T10524] [ 133.867057][T10524] __dump_stack+0x1d/0x30 [ 133.867083][T10524] dump_stack_lvl+0xe8/0x140 [ 133.867179][T10524] dump_stack+0x15/0x1b [ 133.867201][T10524] should_fail_ex+0x265/0x280 [ 133.867227][T10524] should_failslab+0x8c/0xb0 [ 133.867254][T10524] __kmalloc_noprof+0xa5/0x3e0 [ 133.867299][T10524] ? find_tree_dqentry+0x3e/0x8c0 [ 133.867335][T10524] find_tree_dqentry+0x3e/0x8c0 [ 133.867438][T10524] ? __brelse+0x32/0x60 [ 133.867468][T10524] ? from_kuid+0x139/0x320 [ 133.867492][T10524] ? ext4_quota_read+0x22b/0x260 [ 133.867528][T10524] find_tree_dqentry+0x4c9/0x8c0 [ 133.867649][T10524] qtree_read_dquot+0x35c/0x4a0 [ 133.867712][T10524] v2_read_dquot+0x98/0xd0 [ 133.867782][T10524] dquot_acquire+0xce/0x2b0 [ 133.867809][T10524] ext4_acquire_dquot+0x15f/0x200 [ 133.867846][T10524] dqget+0x532/0x8d0 [ 133.867873][T10524] __dquot_initialize+0x27f/0x7c0 [ 133.867975][T10524] ? __d_rehash+0x139/0x1f0 [ 133.868080][T10524] dquot_initialize+0x1a/0x30 [ 133.868107][T10524] ext4_create+0x49/0x2f0 [ 133.868171][T10524] ? __pfx_ext4_create+0x10/0x10 [ 133.868221][T10524] path_openat+0x1102/0x2170 [ 133.868254][T10524] do_filp_open+0x109/0x230 [ 133.868354][T10524] do_sys_openat2+0xa6/0x110 [ 133.868463][T10524] __x64_sys_openat+0xf2/0x120 [ 133.868501][T10524] x64_sys_call+0x1af/0x2fb0 [ 133.868526][T10524] do_syscall_64+0xd2/0x200 [ 133.868557][T10524] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.868680][T10524] ? clear_bhb_loop+0x40/0x90 [ 133.868704][T10524] ? clear_bhb_loop+0x40/0x90 [ 133.868729][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.868753][T10524] RIP: 0033:0x7f49ebf2e969 [ 133.868825][T10524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.868906][T10524] RSP: 002b:00007f49ea597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.868928][T10524] RAX: ffffffffffffffda RBX: 00007f49ec155fa0 RCX: 00007f49ebf2e969 [ 133.868941][T10524] RDX: 0000000000103042 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 133.868956][T10524] RBP: 00007f49ea597090 R08: 0000000000000000 R09: 0000000000000000 [ 133.868970][T10524] R10: 5d9f61795f7ff7ff R11: 0000000000000246 R12: 0000000000000001 [ 133.868984][T10524] R13: 0000000000000000 R14: 00007f49ec155fa0 R15: 00007ffc10cf0fe8 [ 133.869004][T10524] [ 133.869018][T10524] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1636: Failed to acquire dquot type 0 [ 134.148739][ T8448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.209369][T10580] FAULT_INJECTION: forcing a failure. [ 134.209369][T10580] name failslab, interval 1, probability 0, space 0, times 0 [ 134.222193][T10580] CPU: 1 UID: 0 PID: 10580 Comm: syz.6.1641 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 134.222227][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.222272][T10580] Call Trace: [ 134.222280][T10580] [ 134.222333][T10580] __dump_stack+0x1d/0x30 [ 134.222359][T10580] dump_stack_lvl+0xe8/0x140 [ 134.222383][T10580] dump_stack+0x15/0x1b [ 134.222402][T10580] should_fail_ex+0x265/0x280 [ 134.222426][T10580] should_failslab+0x8c/0xb0 [ 134.222527][T10580] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 134.222598][T10580] ? sidtab_sid2str_get+0xa0/0x130 [ 134.222630][T10580] kmemdup_noprof+0x2b/0x70 [ 134.222668][T10580] sidtab_sid2str_get+0xa0/0x130 [ 134.222770][T10580] security_sid_to_context_core+0x1eb/0x2e0 [ 134.222868][T10580] security_sid_to_context+0x27/0x40 [ 134.222899][T10580] selinux_lsmprop_to_secctx+0x67/0xf0 [ 134.222997][T10580] security_lsmprop_to_secctx+0x43/0x80 [ 134.223037][T10580] audit_log_task_context+0x77/0x190 [ 134.223060][T10580] audit_log_task+0xf4/0x250 [ 134.223159][T10580] audit_seccomp+0x61/0x100 [ 134.223191][T10580] ? __seccomp_filter+0x68c/0x10d0 [ 134.223266][T10580] __seccomp_filter+0x69d/0x10d0 [ 134.223296][T10580] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 134.223336][T10580] ? vfs_write+0x75e/0x8e0 [ 134.223366][T10580] __secure_computing+0x82/0x150 [ 134.223393][T10580] syscall_trace_enter+0xcf/0x1e0 [ 134.223422][T10580] do_syscall_64+0xac/0x200 [ 134.223571][T10580] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.223597][T10580] ? clear_bhb_loop+0x40/0x90 [ 134.223627][T10580] ? clear_bhb_loop+0x40/0x90 [ 134.223660][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.223683][T10580] RIP: 0033:0x7f49ebf2e969 [ 134.223700][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.223721][T10580] RSP: 002b:00007f49ea597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 134.223764][T10580] RAX: ffffffffffffffda RBX: 00007f49ec155fa0 RCX: 00007f49ebf2e969 [ 134.223778][T10580] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 134.223791][T10580] RBP: 00007f49ea597090 R08: 0000000000000000 R09: 0000000000000000 [ 134.223803][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.223815][T10580] R13: 0000000000000000 R14: 00007f49ec155fa0 R15: 00007ffc10cf0fe8 [ 134.223836][T10580] [ 134.542853][T10601] loop6: detected capacity change from 0 to 1024 [ 134.557562][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 134.557591][ T29] audit: type=1326 audit(1748818851.324:22632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 134.587581][ T29] audit: type=1326 audit(1748818851.324:22633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 134.619361][ T29] audit: type=1326 audit(1748818851.324:22634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 134.643278][ T29] audit: type=1326 audit(1748818851.324:22635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 134.643684][T10604] loop1: detected capacity change from 0 to 2048 [ 134.666858][ T29] audit: type=1326 audit(1748818851.324:22636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 134.696910][ T29] audit: type=1326 audit(1748818851.324:22637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 134.720606][ T29] audit: type=1326 audit(1748818851.324:22638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 134.744694][ T29] audit: type=1326 audit(1748818851.324:22639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 134.768546][ T29] audit: type=1326 audit(1748818851.324:22640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 134.777968][T10601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.792141][ T29] audit: type=1326 audit(1748818851.324:22641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c3648e969 code=0x7ffc0000 [ 134.813433][T10601] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.839677][T10604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.857403][T10604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.073673][T10642] syzkaller0: entered promiscuous mode [ 135.079273][T10642] syzkaller0: entered allmulticast mode [ 135.156318][T10624] loop1: detected capacity change from 0 to 128 [ 135.162840][T10624] vfat: Unknown parameter '' [ 135.187777][T10646] loop1: detected capacity change from 0 to 256 [ 135.219591][T10648] loop5: detected capacity change from 0 to 2048 [ 135.247939][T10648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.260907][T10648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.298087][T10652] loop5: detected capacity change from 0 to 764 [ 135.305751][T10652] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 135.315834][T10652] Symlink component flag not implemented [ 135.321632][T10652] Symlink component flag not implemented [ 135.327846][T10652] Symlink component flag not implemented (128) [ 135.334103][T10652] Symlink component flag not implemented (122) [ 135.355868][T10656] __nla_validate_parse: 9 callbacks suppressed [ 135.355887][T10656] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1666'. [ 135.456387][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1671'. [ 135.465461][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1671'. [ 135.497229][T10671] syzkaller0: entered promiscuous mode [ 135.502772][T10671] syzkaller0: entered allmulticast mode [ 135.546099][T10684] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1677'. [ 135.585575][T10692] FAULT_INJECTION: forcing a failure. [ 135.585575][T10692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.598772][T10692] CPU: 1 UID: 0 PID: 10692 Comm: syz.9.1680 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 135.598803][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.598815][T10692] Call Trace: [ 135.598822][T10692] [ 135.598830][T10692] __dump_stack+0x1d/0x30 [ 135.598927][T10692] dump_stack_lvl+0xe8/0x140 [ 135.598952][T10692] dump_stack+0x15/0x1b [ 135.598971][T10692] should_fail_ex+0x265/0x280 [ 135.598992][T10692] should_fail+0xb/0x20 [ 135.599059][T10692] should_fail_usercopy+0x1a/0x20 [ 135.599086][T10692] _copy_from_user+0x1c/0xb0 [ 135.599142][T10692] ___sys_sendmsg+0xc1/0x1d0 [ 135.599188][T10692] __x64_sys_sendmsg+0xd4/0x160 [ 135.599257][T10692] x64_sys_call+0x2999/0x2fb0 [ 135.599281][T10692] do_syscall_64+0xd2/0x200 [ 135.599310][T10692] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.599405][T10692] ? clear_bhb_loop+0x40/0x90 [ 135.599425][T10692] ? clear_bhb_loop+0x40/0x90 [ 135.599445][T10692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.599477][T10692] RIP: 0033:0x7f6ad494e969 [ 135.599492][T10692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.599511][T10692] RSP: 002b:00007f6ad2fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.599530][T10692] RAX: ffffffffffffffda RBX: 00007f6ad4b75fa0 RCX: 00007f6ad494e969 [ 135.599543][T10692] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000006 [ 135.599578][T10692] RBP: 00007f6ad2fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.599590][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.599601][T10692] R13: 0000000000000000 R14: 00007f6ad4b75fa0 R15: 00007ffc85a754f8 [ 135.599632][T10692] [ 135.805883][T10698] loop9: detected capacity change from 0 to 512 [ 135.813234][T10694] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1679'. [ 135.822148][T10698] EXT4-fs: Ignoring removed oldalloc option [ 135.839296][T10698] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.1681: error while reading EA inode 32 err=-116 [ 135.865332][T10698] EXT4-fs (loop9): Remounting filesystem read-only [ 135.872030][T10698] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 135.883260][T10698] EXT4-fs (loop9): 1 orphan inode deleted [ 135.891529][T10698] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.904917][T10710] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1684'. [ 135.906025][T10698] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.934339][T10698] pim6reg: entered allmulticast mode [ 135.977041][T10698] pim6reg: left allmulticast mode [ 135.986470][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1688'. [ 135.995712][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1688'. [ 136.047567][T10739] netlink: 472 bytes leftover after parsing attributes in process `syz.8.1692'. [ 136.083321][T10746] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1693'. [ 136.171679][T10760] loop9: detected capacity change from 0 to 2048 [ 136.189924][T10760] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.202661][T10760] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.379235][T10798] netlink: 'syz.8.1704': attribute type 1 has an invalid length. [ 136.539633][T10810] loop5: detected capacity change from 0 to 128 [ 136.570009][T10810] vfat: Unknown parameter '' [ 136.731667][T10849] bond0: (slave dummy0): Releasing backup interface [ 136.741980][T10849] bridge_slave_0: left allmulticast mode [ 136.747958][T10849] bridge_slave_0: left promiscuous mode [ 136.753828][T10849] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.763582][T10849] bridge_slave_1: left allmulticast mode [ 136.769507][T10849] bridge_slave_1: left promiscuous mode [ 136.775213][T10849] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.792370][T10849] bond0: (slave bond_slave_0): Releasing backup interface [ 136.809196][T10849] bond0: (slave bond_slave_1): Releasing backup interface [ 136.819087][T10849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.828057][T10849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.848822][T10861] bridge0: entered promiscuous mode [ 136.861831][T10861] bridge0: port 3(macvlan2) entered blocking state [ 136.868506][T10861] bridge0: port 3(macvlan2) entered disabled state [ 136.880363][T10861] macvlan2: entered allmulticast mode [ 136.885846][T10861] bridge0: entered allmulticast mode [ 136.892868][T10861] macvlan2: left allmulticast mode [ 136.898199][T10861] bridge0: left allmulticast mode [ 136.909943][T10861] bridge0: left promiscuous mode [ 136.947075][T10857] lo speed is unknown, defaulting to 1000 [ 136.995955][T10887] loop9: detected capacity change from 0 to 2048 [ 137.045297][T10887] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.066969][T10887] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.119210][T10903] loop8: detected capacity change from 0 to 512 [ 137.153910][T10903] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.163148][T10903] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 137.186751][T10903] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 137.198319][T10903] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 137.221651][T10903] System zones: 0-2, 18-18, 34-35 [ 137.236539][T10903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.319438][T10899] loop5: detected capacity change from 0 to 128 [ 137.326170][T10899] vfat: Unknown parameter '' [ 137.367187][T10936] netlink: 'syz.5.1732': attribute type 1 has an invalid length. [ 137.445570][T10953] loop5: detected capacity change from 0 to 2048 [ 137.452139][T10354] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 137.478028][T10953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.491096][T10953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.541403][T10963] loop5: detected capacity change from 0 to 1764 [ 137.549624][T10963] iso9660: Bad value for 'session' [ 137.585944][T10969] loop9: detected capacity change from 0 to 512 [ 137.593139][T10969] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 137.603518][T10969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 137.611887][T10969] EXT4-fs (loop9): orphan cleanup on readonly fs [ 137.618731][T10969] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 33619980: comm syz.9.1745: invalid block [ 137.630746][T10969] EXT4-fs (loop9): Remounting filesystem read-only [ 137.637531][T10969] EXT4-fs (loop9): 1 truncate cleaned up [ 137.643685][T10969] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 137.657927][T10969] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.1745: dx entry: limit 0 != root limit 125 [ 137.669774][T10969] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1745: Corrupt directory, running e2fsck is recommended [ 137.684699][T10969] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.1745: dx entry: limit 0 != root limit 125 [ 137.696618][T10969] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1745: Corrupt directory, running e2fsck is recommended [ 137.737140][T10976] netlink: 'syz.5.1747': attribute type 1 has an invalid length. [ 137.795453][T10982] FAULT_INJECTION: forcing a failure. [ 137.795453][T10982] name failslab, interval 1, probability 0, space 0, times 0 [ 137.808173][T10982] CPU: 1 UID: 0 PID: 10982 Comm: syz.5.1750 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 137.808202][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.808212][T10982] Call Trace: [ 137.808218][T10982] [ 137.808225][T10982] __dump_stack+0x1d/0x30 [ 137.808247][T10982] dump_stack_lvl+0xe8/0x140 [ 137.808263][T10982] dump_stack+0x15/0x1b [ 137.808308][T10982] should_fail_ex+0x265/0x280 [ 137.808324][T10982] should_failslab+0x8c/0xb0 [ 137.808348][T10982] kmem_cache_alloc_noprof+0x50/0x310 [ 137.808375][T10982] ? posix_lock_inode+0x162/0x2380 [ 137.808517][T10982] ? avc_has_perm+0xd3/0x150 [ 137.808550][T10982] posix_lock_inode+0x162/0x2380 [ 137.808580][T10982] ? file_has_perm+0x324/0x370 [ 137.808717][T10982] fcntl_setlk+0x61f/0x950 [ 137.808780][T10982] do_fcntl+0x5dd/0xdf0 [ 137.808812][T10982] ? selinux_file_fcntl+0x1cb/0x1e0 [ 137.808878][T10982] __se_sys_fcntl+0xb1/0x120 [ 137.808911][T10982] __x64_sys_fcntl+0x43/0x50 [ 137.808939][T10982] x64_sys_call+0x1f1d/0x2fb0 [ 137.809045][T10982] do_syscall_64+0xd2/0x200 [ 137.809065][T10982] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 137.809084][T10982] ? clear_bhb_loop+0x40/0x90 [ 137.809179][T10982] ? clear_bhb_loop+0x40/0x90 [ 137.809204][T10982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.809229][T10982] RIP: 0033:0x7ff1f131e969 [ 137.809246][T10982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.809305][T10982] RSP: 002b:00007ff1ef987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 137.809319][T10982] RAX: ffffffffffffffda RBX: 00007ff1f1545fa0 RCX: 00007ff1f131e969 [ 137.809328][T10982] RDX: 0000200000000380 RSI: 0000000000000026 RDI: 0000000000000004 [ 137.809337][T10982] RBP: 00007ff1ef987090 R08: 0000000000000000 R09: 0000000000000000 [ 137.809345][T10982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.809354][T10982] R13: 0000000000000000 R14: 00007ff1f1545fa0 R15: 00007ffce7016748 [ 137.809367][T10982] [ 138.036804][ T8354] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.290224][T11013] loop1: detected capacity change from 0 to 512 [ 138.290229][T11012] netlink: 'syz.8.1759': attribute type 1 has an invalid length. [ 138.290313][T11013] ================================================================== [ 138.290344][T11013] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 138.290371][T11013] [ 138.290380][T11013] write to 0xffffffff88e6782e of 18 bytes by task 11012 on cpu 0: [ 138.290401][T11013] vsnprintf+0x2ce/0x890 [ 138.290426][T11013] vscnprintf+0x41/0x90 [ 138.290451][T11013] printk_sprint+0x30/0x2d0 [ 138.290473][T11013] vprintk_store+0x599/0x860 [ 138.290496][T11013] vprintk_emit+0x178/0x650 [ 138.290517][T11013] vprintk_default+0x26/0x30 [ 138.290536][T11013] vprintk+0x1d/0x30 [ 138.290561][T11013] _printk+0x79/0xa0 [ 138.290588][T11013] __nla_validate_parse+0x1227/0x1d00 [ 138.290633][T11013] __nla_parse+0x40/0x60 [ 138.290657][T11013] genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 138.290689][T11013] genl_family_rcv_msg_doit+0x48/0x1b0 [ 138.290713][T11013] genl_rcv_msg+0x422/0x460 [ 138.290732][T11013] netlink_rcv_skb+0x120/0x220 [ 138.290760][T11013] genl_rcv+0x28/0x40 [ 138.290788][T11013] netlink_unicast+0x59e/0x670 [ 138.290818][T11013] netlink_sendmsg+0x58b/0x6b0 [ 138.290850][T11013] __sock_sendmsg+0x145/0x180 [ 138.290876][T11013] ____sys_sendmsg+0x31e/0x4e0 [ 138.290910][T11013] ___sys_sendmsg+0x17b/0x1d0 [ 138.290943][T11013] __x64_sys_sendmsg+0xd4/0x160 [ 138.290976][T11013] x64_sys_call+0x2999/0x2fb0 [ 138.290998][T11013] do_syscall_64+0xd2/0x200 [ 138.291026][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.291052][T11013] [ 138.291061][T11013] read to 0xffffffff88e67830 of 8 bytes by task 11013 on cpu 1: [ 138.291083][T11013] data_push_tail+0xfd/0x420 [ 138.291106][T11013] data_alloc+0xbf/0x2b0 [ 138.291140][T11013] prb_reserve+0x808/0xaf0 [ 138.291177][T11013] vprintk_store+0x56d/0x860 [ 138.291200][T11013] vprintk_emit+0x178/0x650 [ 138.291223][T11013] vprintk_default+0x26/0x30 [ 138.291245][T11013] vprintk+0x1d/0x30 [ 138.291268][T11013] _printk+0x79/0xa0 [ 138.291294][T11013] set_capacity_and_notify+0x14c/0x1f0 [ 138.291322][T11013] loop_set_size+0x2e/0x70 [ 138.291349][T11013] loop_configure+0x8d3/0xa50 [ 138.291372][T11013] lo_ioctl+0x559/0x15d0 [ 138.291395][T11013] blkdev_ioctl+0x34f/0x440 [ 138.291420][T11013] __se_sys_ioctl+0xcb/0x140 [ 138.291443][T11013] __x64_sys_ioctl+0x43/0x50 [ 138.291482][T11013] x64_sys_call+0x19a8/0x2fb0 [ 138.291509][T11013] do_syscall_64+0xd2/0x200 [ 138.291545][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.291571][T11013] [ 138.291579][T11013] value changed: 0x00000000ffffed0e -> 0x7562697274746120 [ 138.291596][T11013] [ 138.291612][T11013] Reported by Kernel Concurrency Sanitizer on: [ 138.291628][T11013] CPU: 1 UID: 0 PID: 11013 Comm: syz.1.1762 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 138.291658][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.291671][T11013] ================================================================== [ 138.587472][ T8406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 138.587600][T11013] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.605573][T11013] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 138.616733][T11013] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 138.626549][T11013] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 138.634565][T11013] System zones: 0-2, 18-18, 34-35 [ 138.641182][T11013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.664171][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.697309][ T8448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.