last executing test programs: 34.590383541s ago: executing program 1 (id=61): readahead(0xffffffffffffffff, 0x4, 0x7) 34.518323563s ago: executing program 1 (id=65): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 34.508977623s ago: executing program 1 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x19, 0x8, 0x70051b8, "8f5151239582"}}) syz_open_dev$sg(&(0x7f0000000000), 0xffffffffffffffff, 0x40) r2 = io_uring_setup(0x5269, &(0x7f00000004c0)={0x0, 0x87e6, 0x40, 0x1, 0x1f8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000240), 0x1) r3 = open$dir(0x0, 0x483, 0x289) vmsplice(r3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000004800210628bd7000fcdbdf250a008000", @ANYRES32, @ANYBLOB="db05000014000100fe800000000000000000000000000014080002"], 0x90}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) 34.436999023s ago: executing program 1 (id=68): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRES64=0xffffffffffffffff, @ANYRESDEC, @ANYRES8], 0x1, 0x11ef, &(0x7f0000003980)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300093400000000000000000000000300060000000e00020000007f000001000000000000000002000100000000000300020100000000030005000000000002000000e0000001000000000000000002000a0003"], 0x1a0}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, 0x0, &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x81e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) 34.296168755s ago: executing program 1 (id=70): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async) bind$can_raw(r0, &(0x7f00000005c0), 0x10) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x7}], 0x2, 0x2, 0x0) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') (async) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) (async) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x44018) (async) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x6c, 0x2) 34.084947408s ago: executing program 1 (id=72): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@nogrpid}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x7798}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0xfffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000000c0)=@sg0, 0x0, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) semget$private(0x0, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000240)=0x5, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmmsg$unix(r1, 0x0, 0x0, 0xc090) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 33.994018619s ago: executing program 32 (id=72): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@nogrpid}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x7798}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0xfffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000000c0)=@sg0, 0x0, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) semget$private(0x0, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000240)=0x5, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmmsg$unix(r1, 0x0, 0x0, 0xc090) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 32.547509507s ago: executing program 2 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r6, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r5, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r3, @ANYRES8, @ANYRES32, @ANYRES32=r6, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000002c0000000000000001000000010000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xe8, 0x200400d1}, 0x80) r11 = getuid() r12 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000100)=ANY=[@ANYRES64=r11, @ANYRESDEC=r10, @ANYRES32=r9], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000fc0)=0xfffffffffffffe2b) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000480), 0x1020, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r3, @ANYRESHEX, @ANYBLOB="2c64666c746769643ddebfbfc61e71ad7db91b6b34b25011f418125578cac23d8ab1ef42c2d7a401d74bcbb9704bc5fb3b4bf2d9ce25cc14ef4ac7913895c89b88cf18dedbde11c6c1e722570dd491fd7125d192620c7ca11be810", @ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=r11, @ANYBLOB=',obj_role=,silent,fscontext=user_u,euid', @ANYRESDEC=r13]) statx(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x400, 0x80, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r16 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r16, &(0x7f0000000000)=0x921, 0x12) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000a80)=0x0) r18 = fcntl$getown(r2, 0x9) r19 = getuid() getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)="fb9cbed4e378861a74b18f746a57e413b68cca7621ea36553bb4e3be5d4ec534e70c15204a4fb98bc7fa1cb5803482962d3f1e9514f25f8c8fc62a9bf59d5e7c", 0x40}, {&(0x7f0000001000)="bec7e5187348c477423f038a76e4697487074e", 0x13}], 0x2, &(0x7f0000001100)=ANY=[@ANYRES32=r18, @ANYRESOCT=r8, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRESHEX=r12, @ANYRES32=r16, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r19, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x24004000}, 0x4c000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x1, 0x2a8, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x20) r20 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r20, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r20, &(0x7f0000000140)='./control\x00', 0x200) 32.111644823s ago: executing program 2 (id=103): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/14], 0x50) 31.803285777s ago: executing program 2 (id=108): mount$9p_rdma(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB]) 31.769443847s ago: executing program 2 (id=109): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000b80)={'filter\x00', 0x4, "25cf96f2"}, &(0x7f0000000bc0)=0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x10, 0xa, 0xa05, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r3 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) fcntl$setstatus(r3, 0x4, 0x6100) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000200), 0x175d9003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r7, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) (async) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000100081640581d00"/25, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0xe, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f0000000740), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) sendmmsg$inet6(r6, &(0x7f0000000a00)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x9, @loopback, 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000340)="2ea7dd59e2f8f00a6f7b13c863e7b9e6c37848b84c34420b27aa325c49ae5399ad69ab670c772f011acff1a6a712ca42aa2fb772a4e5ea27e391b2f2e9b976a449c37a308c183622bc540f804f26e45b4413221990f63bde79871fb047b9", 0x5e}], 0x1, &(0x7f0000000900)=[@pktinfo={{0x24, 0x29, 0x32, {@private0, r10}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}, @hoplimit={{0x14, 0x29, 0x34, 0xc}}, @hopopts={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}]}}}], 0xa8}}], 0x1, 0x20000000) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='.\x00', r9}, 0x18) (async) io_destroy(r7) 31.432863142s ago: executing program 2 (id=118): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000740)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'vxcan1\x00', {0x1}, 0x882b}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$key(0xf, 0x3, 0x2) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [], 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0xfd}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@mh={{0x28}, {"aa5c"}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) perf_event_open(&(0x7f0000000800)={0x5, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 30.304041106s ago: executing program 2 (id=140): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000380)=ANY=[], 0x36) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) lsm_set_self_attr(0x64, 0x0, 0xe3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r5, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x20000000}, 0x64) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4a, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x58, 0x2, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x5, 0x5, 0x1}, @broadcast, @broadcast, 0xff000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r1, 0x4, 0x7, 0x7fffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) setsockopt$inet6_opts(r9, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB="5c04040203c0030000000000000000000000000000000001000000000000000000000000000000001bea9a8ab0ef5b4aabd94704d53213a56b32fcfccae0f85df3e4a356047c2b0c7735937474698011ee47a0fd5432e8281963bd8d8a82cfc04a059fd6c520c8d857837d7fad8c4f6540247dfbe30354f921643036c42e8386950be1c7a093fe8a3cc6eea1e7a0d00f99542641555985a5c830edda977bf15e4d0111c879bb0593d73fb4c1ac22cee0724d329a151bb74ffb5c741a0279f7c26e3b974b202880328742274b6855fa"], 0x28) 30.243352657s ago: executing program 33 (id=140): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000380)=ANY=[], 0x36) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) lsm_set_self_attr(0x64, 0x0, 0xe3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r5, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x20000000}, 0x64) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4a, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x58, 0x2, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x5, 0x5, 0x1}, @broadcast, @broadcast, 0xff000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r1, 0x4, 0x7, 0x7fffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) setsockopt$inet6_opts(r9, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB="5c04040203c0030000000000000000000000000000000001000000000000000000000000000000001bea9a8ab0ef5b4aabd94704d53213a56b32fcfccae0f85df3e4a356047c2b0c7735937474698011ee47a0fd5432e8281963bd8d8a82cfc04a059fd6c520c8d857837d7fad8c4f6540247dfbe30354f921643036c42e8386950be1c7a093fe8a3cc6eea1e7a0d00f99542641555985a5c830edda977bf15e4d0111c879bb0593d73fb4c1ac22cee0724d329a151bb74ffb5c741a0279f7c26e3b974b202880328742274b6855fa"], 0x28) 6.781641284s ago: executing program 5 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) rename(&(0x7f0000000280)='./bus\x00', &(0x7f0000000400)='./bus\x00') recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, 0x0, &(0x7f00000000c0)=""/22}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SSz+97Ma9/7dua1781rAxhZU9mfJGJrRPwZERP1bHOBqfq/q5fPLly7fHYhiWr13X+SWrkrl88uFEU35f+35M85nUakXySxu029K6fPHJ+vVJZO5fnZ1RMfza6cPvPCsRPzR5eOLp3cf+jQwQNzL7+0/8W+xJm16cquT5f37Hzrg2/ePvxVU/wtcfTJVLeDT1erfa5uuLY1pJOxITaEDSlFRHa6yrX+PxGlWDt5E/Hm50NtHDBQ1Wq1uqXz4XNV4C6WRHNel4dRUXzQZ/PfYmsdBLw6uOHH0F16rT4ByuK+mm/1I2OR5mXKLfPbfpqKiPfP/ftdtsVg7kMAADT5KRv/PN9u/JfGQw3l7svXhiYj4v6I2B4RD0TEjoh4MKJW9uGIeGSD9bcuktw4/kkv9hTYOmXjv1fyta3m8V8x+ovJUp7bVou/nBw5Vlnal78m01HelOXnutTx8xt/fN3pWOP4L9uy+ouxYN6Oi2Obmh+zOL86fysxN7p0PmLXWLv4k+srAUlE7IyIXT3WcezZH/Z0Onbz+LvowzpT9fuIZ+rn/1y0xF9Iuq9Pzt4TlaV9s8VVcaPffr/wTqf6byn+PsjO/71tr//r8U8mjeu1Kxuv48JfX3ac0/R6/Y8n79XS4/m+T+ZXV0/NRYwnh+uNbty/f+2xRb4on8U/vbd9/98ea6/E7ojILuJHI+KxiHg8b/sTEfFkROztEv+vrz/1Ye/xD1YW/+KGzv9aYjxa97RPlI7/8mNTpZM3xH+t+/k/WEtN53vW8/63nnb1djUDAADA/08aEVsjSWeup9N0Zqb+ffkdEWlleWX1uSPLH59crP9GYDLKaXGna6LhfuhcPq2v589HRP2rBcXxA/l9429Lm2v5mYXlyuKwg4cRt6VD/8/8XRp264CB83stGF36P4wu/R9Gl/4Po6tN/988jHYAt1+7z//PhtAO4PZr6f+W/WCEmP/D6NL/YXTp/zCSVjbHzX8k3zVRPFOPD79rE1G+I5oxsESkd0QzJAaUGO77EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQL/8FwAA///lkeDY") r7 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) inotify_add_watch(r8, &(0x7f0000000040)='./bus\x00', 0x882) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r10}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x18, 0x0, "50e4d101a949f3f4d3479fb3110fbb83dc7a2414e74ef9c682c427e1a542df3531062020eb16da11d6707d82272beab27a1da6e527cceef0e7db687b56729c203d01b7693f6d4c81a64de132e818dea3"}, 0xd8) 5.820913776s ago: executing program 5 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x18, 0x0, "50e4d101a949f3f4d3479fb3110fbb83dc7a2414e74ef9c682c427e1a542df3531062020eb16da11d6707d82272beab27a1da6e527cceef0e7db687b56729c203d01b7693f6d4c81a64de132e818dea3"}, 0xd8) 4.810519559s ago: executing program 5 (id=623): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000008579000000000000000000010500000010000000000000000000000a02"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x4}, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x14, 0x2, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4040000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000004000000fd09"], 0x50) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x80, 0x8000, 0x0, 0xb9ff, 0x15}) syz_open_pts(0xffffffffffffffff, 0x101000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffe, 0x4000000000000000}, {0xfffffffffffffff9, 0x0, 0x80000000, 0x8}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x2, 0x3c}, 0xa, @in6=@empty, 0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffc, 0x1002}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 4.451911433s ago: executing program 5 (id=630): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000400)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8, 0xc0, 0x7, 0x10, {{0x8, 0x4, 0x1, 0x25, 0x20, 0x67, 0x0, 0x8c, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xbe, 0x3, 0x4, [{@rand_addr=0x64010100, 0xfffffffb}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000a5000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ptrace$getregset(0x4205, r9, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000049c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x18, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe6}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa9}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3.535123065s ago: executing program 5 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r3) 2.727863875s ago: executing program 5 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r1, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) 2.727767095s ago: executing program 34 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r1, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) 2.252103071s ago: executing program 0 (id=687): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[], 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000045c0)={0x0, @initdev, @remote}, &(0x7f0000004600)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffee}, {0xfff1, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) 1.955449395s ago: executing program 0 (id=690): r0 = socket(0x40000000015, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1c3000, 0x14) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") 1.918690626s ago: executing program 6 (id=693): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1.876504406s ago: executing program 6 (id=695): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.789126887s ago: executing program 6 (id=697): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/128, 0x80, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000861000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x4, 0x3}, 0x10, r5, r2, 0x1, &(0x7f0000000a80)=[r4, r1, r3, r4], &(0x7f0000000140)=[{0x3, 0x5, 0x9, 0x2}], 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000040ae550f00000000080000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYBLOB="53ba63c6cfb3e161a2d9e9c1b8c0b8cd12e3e5a46eb9e407dc74d3f0046f06bae62c144ac7c469862a20aa2fc2b0ce74cf4f32ae5f23ac9c8834ce0fbec5", @ANYRES32=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_read_part_table(0x634, &(0x7f0000000000)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000000040)=0x1) 1.685486738s ago: executing program 3 (id=699): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/14], 0x50) 1.58362647s ago: executing program 3 (id=701): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 1.421497572s ago: executing program 3 (id=702): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1.420768192s ago: executing program 3 (id=703): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socket$kcm(0x1e, 0x4, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xe, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) creat(&(0x7f00000002c0)='./file0\x00', 0x6) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffff7ffffe9}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40) setreuid(0x0, r3) syz_io_uring_setup(0x78e, &(0x7f0000000400)={0x0, 0x0, 0x4002, 0x3, 0x9a}, 0x0, 0x0) 1.376112092s ago: executing program 4 (id=704): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c91c, &(0x7f0000000400)={[{@debug}, {@noblock_validity}, {@sb={'sb', 0x3d, 0xf}}, {@nodioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@discard}, {@nojournal_checksum}, {@nodelalloc, 0x32}]}, 0x1, 0x4e1, &(0x7f0000001a40)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) accept4$packet(r2, 0x0, &(0x7f0000000080), 0x80000) poll(0x0, 0x0, 0x7fffffff) write$cgroup_int(r2, &(0x7f0000000000)=0x700, 0x12) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000004c0)='./file0\x00', 0x100420, &(0x7f0000000680)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}], [{@context={'context', 0x3d, 'root'}}, {@appraise}, {@flag='lazytime'}, {@audit}]}, 0x0, 0x5e8, &(0x7f0000000900)="$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") syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/106, 0x6a}], 0x1, 0x7ff, 0x40000) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000", @ANYRES32=0x0, @ANYRES32], 0x48) 1.347397903s ago: executing program 3 (id=705): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) wait4(0x0, 0x0, 0x40000000, 0x0) setresgid(0xee00, 0xffffffffffffffff, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x1) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_disconnect(0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000000040)=[{r4, 0xa400}, {r6, 0x2000}], 0x2, 0xffffffffffbffff8) dup2(r3, r7) fcntl$setown(r3, 0x8, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000e27f0000011e00000000000065413758020a08e6b7592e2e75221c3ecda9847c3d4c6073272969d7cf661b270eb5dad0491d2f73796b0e3e059d07e9a9c3355b78df00e907b73ad2c7a38be50e3e5180e20dfaf526696b299d831166377cc6ea6977e92bbf1b79fafe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000400"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='spmi_write_end\x00', r9, 0x0, 0x6}, 0x18) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r10, 0x4b68, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 1.080012766s ago: executing program 0 (id=706): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') syz_open_dev$usbfs(0x0, 0x6e, 0x2c0180) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0xffffffffffffffff, 0x0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x2f, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @remote, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x17}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0xa, 0x80, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="64000000ce000a1600030072742c6e6574000000050001000702000005000100000000000000020073797a1100001400078008000840000000f1080000000000000000000000000000000000004f0dfe5b5f215dbd657d67db0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r7 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc5, 0x2000, 0x2, 0x1ac}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000003a4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='pmap_register\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) syz_usb_connect$uac1(0x0, 0xbd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 867.446459ms ago: executing program 6 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 839.795969ms ago: executing program 6 (id=708): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x533, &(0x7f0000001280)="$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") 774.6626ms ago: executing program 6 (id=709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) connect$unix(r6, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 564.235993ms ago: executing program 7 (id=669): socket(0x10, 0x80002, 0x0) r0 = memfd_create(0x0, 0x3) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x2, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x2000, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x6}, 0x10, 0x4, 0xe76, 0x9, 0xbbe, 0xd5, 0x40, 0x0, 0xffffffff, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x4, 0x4, 0xff, 0x1, 0x0, 0x6, 0x40022, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x5040, 0xc, 0x7b, 0x4, 0x4f, 0x3ff, 0x200, 0x0, 0x4, 0x0, 0x368}, r1, 0x2, r2, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000280)="2c649f1bdcede66b73f61b4504554f7e51bbfbecd56812685e4ae48cf386bf2a056b3a2150cbc0b0b57a982475a0de9ec8b8aac97c0c348af85e0c589fed3075a9ac76fd93dbb0d2e0b4350456ebf1e16f46da34a84f98d12104e22662ebd67d9bce50bb8401ecbcc99cd06959a3765c2dc870f50ffc5695015f368389b87d3e7d0a1c843ad53d7c22d9e30a4e575301276b07b4a164d9e43be4c1a091630bfe1bd8db20b07f34e5ef8ea6f5a5536de18c2ff4c4f39aee0afdf8b3960f9328adaf11af4dac34e4ae1eca737913b51e5b21c2df0980c567b2e734", 0xda}, {&(0x7f0000000100)="f87c687543795e3834645ec0fe513b3ad328e23b4f", 0x15}, {&(0x7f0000000380)="bf0cd7f2de16356d0567f094c8c64f90bad516aee5718359fbb9180e2da3f8e621236d51416d14b5d976c0ba158af7d625d9d290db5bbc99f775acab27b5f74ddf1b3cf28d6f828c12b7356901db6a3590e9dd0a71c9f94e120268e07142693274b333133c4486551be1dd24f514508605585df2f042f8e8b1f131277806b1cf5152b3493b65eef87f890cc46c74410789c07cfc56078e39fd52", 0x9a}, {&(0x7f0000000440)="33aaf9bc5829a631ea4007a0c0c64b1158687397caff90a0543dba9184e4c587375178b53b291ab048ccdf48d07810d54b4286c94d5950ee5bf6b9c64d812abb5603ff0c76f6b37711600d544c61fdd6b9b011e9b387cb4c7eed7f2828bbfc664a0ab07c57e026c25e0aa9c40dc778b93f85c2", 0x73}, {&(0x7f00000004c0)="4d7bc2dede68d0b2f35ac47dbe7fe90a1662edf9097db1ad3ef1809d0e7c006f30b266ec50f1bc1feac8eb4cd0917e4d62caef0f22a09cfaf870b28a08c06833380681c4e6f7dfa18a811b0088ac18fed56cdbf74ec8ed2ecd7f8c1f5619e027292e8249dca49a329820e2e9b9996eb6a8d77d357ea8dbf79d619a577c8f01072de15fda8fd71d51c46e35f14e3b14b9da09aea67b6973fb0c9f71c685aa8f39dddb36412bf982300c2646", 0xab}, {&(0x7f0000000580)="68ec0372c6b728910f20b316", 0xc}], 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1100000000000000000000000100000080000000000000001100000000000000000000000100000008000000000000001400000000000000000000000700000094040000000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="640101000a010102000000ee130000000000000000000000020000000400000000000000"], 0x80}, 0x24000804) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f00000000c0)={0x19980330, r8}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 539.086423ms ago: executing program 0 (id=710): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24000804) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/14], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) 479.362854ms ago: executing program 7 (id=711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b743000000000000850000020000000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x80, 0x0, 0x8, 0xffffffff, 0x7fffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='system.advise\x00', &(0x7f00000003c0)=""/59, 0x3b) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x300, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000, 0x7fffffff, 0x0, 0x3}, {}, {0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x3}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x100000}, {0x0, 0x4000}, {0xfffffffe}, {0x1}, {0xd5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x1}, {0x2000000}, {}, {0x0, 0x1}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x4}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x400000}, {0x814, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0xfffffff9}, {}, {0x0, 0x0, 0x0, 0x100, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x1, 0x0, 0xd}], [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000b800000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r8}, 0x18) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x40000000000}, 0x18) r10 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) syz_read_part_table(0x5e0, &(0x7f0000000000)="$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") write$selinux_access(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) write$P9_RLERRORu(r6, &(0x7f0000000140)={0xe, 0x7, 0x1, {{0x1, '\x00'}, 0xc0}}, 0xe) 476.496094ms ago: executing program 4 (id=712): quotactl$Q_QUOTAON(0x0, &(0x7f0000001400)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000000400)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x100) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x3c, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xe}, {0x0, 0xa}}, [{0x8, 0xb, 0x400}, {0x8}, {0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400ccd4}, 0x20008050) 400.661025ms ago: executing program 7 (id=713): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$eJzs0zGIU3ccB/Bf0jNXBRE7uTVchliXEzJer2BDfBwBcwSLDiK62SGLTh1iAoaKg2eHiOByDpbCGSq0TiKCIOLFQcgkinZREYciuFjFpuTu3XItB4UctPD5wHuP/+//+70vfx4v+F/Lxu/D4TATEcPJDdqGrdE9t778zVJl/1x+fl/9YEQmjkTE9+//+GG0k1kbTN86la6fpevSrYnG+aXk7EJ3+64b+Q8PsrEa0I5YuV72Lx8d5znZHLtP7bmTaQ923qzGlU9jeWZb4/CJXvGLbO/h+9H2n+nn3rJuLD+u/Ouz93ac6ZxMvsxFPEqaz5NX2bdvkgOXFqdzF1r14uu9ad+xcQWu0/h4KHft6t1y58XW0v1qrdb9+cnFQrNyu3N60C88fnfueNr3dKO/CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4zdp/bc+Twz2HmzGleWv1qe2dY4fKJXLLd6D+d//frH/E9TkVnpm96k/Ouz93ac6ZxMFr6b/fZR0nyevMq+fZMcuLQ4nbvQqhdf7037jv3DbG4M+Y2Ph3LXrt4td15sLd2v1mrdLXGx0Kzc7pwe9AuP3507Hp/9Uq5GPJ0cxWXHkAgAAAAAAAAAAAAAAAAAAAB/V9k/l5/fVz8YkYkjETGzOPdkVB9Ormx/stY3lT6frdajdGuicX4pObvQ3b7rRv7Dg9/Sejsb0Y6Il/3LRzdOnticA/Gv/BUAAP//FI2HuA==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000045c0)={0x0, @initdev, @remote}, &(0x7f0000004600)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffee}, {0xfff1, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) 323.555286ms ago: executing program 4 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000020183e7de22cd4285ba1741da9a0e0404000280040001800c00"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) 315.316856ms ago: executing program 0 (id=715): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x800, 0xfe9, 0x0, 0x80, 0x1ff, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x606c) socket(0x1e, 0x4, 0x7c69b913) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000000)) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r5, 0x2, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2778) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) pread64(r6, &(0x7f000001a240)=""/102386, 0x18ff2, 0x5) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000ff010000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200353e000000b7030000000000c6ea00000087000000bf0900000000000055090100000000ce1c09aa3be06853e6531344a1009500000002000000bf91000000000000b702040001000000cd00000085000000b700000000000000950000000000000060220c214f01fd813ce4f0070542d9fef9862c287f6f678ea31897f341a1e004df12945902757f44a49b5b2a3812f7cff7cf7026f6e8ca18a505f5bb660e50b104a7a9"], 0x0, 0x8, 0xba, &(0x7f0000000640)=""/186, 0x41100, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x5, 0xd, 0x2}, {0x4, 0x2, 0x5, 0xc}], 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYRES8=r7], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socket$inet6(0xa, 0x1, 0x9) set_robust_list(&(0x7f0000000400), 0x18) 304.523476ms ago: executing program 4 (id=716): socket(0x200000000000011, 0x2, 0xd) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x7]}, &(0x7f0000000180), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[{0x5, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r2, 0x0) 230.663277ms ago: executing program 4 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 208.849217ms ago: executing program 4 (id=718): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x401c8c8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8927, &(0x7f0000000280)={'wg2\x00'}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000140)=0x9, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0x505, 0x4) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, &(0x7f0000000040)=[{0x0, 0xf4}, {&(0x7f0000000000)="919d", 0x2}], 0x2, 0x12, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10}, 0x18) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r12, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r12, 0x100) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r12, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8) sendmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) 183.976308ms ago: executing program 0 (id=719): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], &(0x7f0000001f40)=""/4094, 0x3e, 0xffe, 0xa, 0x7ff, 0x0, @void, @value}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) close(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000040)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d"], 0xa8}}, 0x0) 0s ago: executing program 3 (id=720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') syz_open_dev$usbfs(0x0, 0x6e, 0x2c0180) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0xffffffffffffffff, 0x0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x2f, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @remote, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x17}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0xa, 0x80, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="64000000ce000a1600030072742c6e6574000000050001000702000005000100000000000000020073797a1100001400078008000840000000f1080000000000000000000000000000000000004f0dfe5b5f215dbd657d67db0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r7 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc5, 0x2000, 0x2, 0x1ac}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000003a4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='pmap_register\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) syz_usb_connect$uac1(0x0, 0xbd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): ackets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.879423][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.902059][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.909007][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.934999][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.946921][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.962295][ T3318] team0: Port device team_slave_0 added [ 28.969129][ T3318] team0: Port device team_slave_1 added [ 28.975403][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.982397][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.008361][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.024414][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.072567][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.079812][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.105762][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.132555][ T3319] hsr_slave_0: entered promiscuous mode [ 29.138712][ T3319] hsr_slave_1: entered promiscuous mode [ 29.144791][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.152449][ T3319] Cannot create hsr debugfs directory [ 29.158102][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.165116][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.191183][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.208633][ T3313] hsr_slave_0: entered promiscuous mode [ 29.214660][ T3313] hsr_slave_1: entered promiscuous mode [ 29.220790][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.228389][ T3313] Cannot create hsr debugfs directory [ 29.234665][ T3321] team0: Port device team_slave_0 added [ 29.241299][ T3321] team0: Port device team_slave_1 added [ 29.271365][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.278384][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.304369][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.317427][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.324429][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.350395][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.403859][ T3318] hsr_slave_0: entered promiscuous mode [ 29.409864][ T3318] hsr_slave_1: entered promiscuous mode [ 29.415624][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.423231][ T3318] Cannot create hsr debugfs directory [ 29.473848][ T3321] hsr_slave_0: entered promiscuous mode [ 29.479806][ T3321] hsr_slave_1: entered promiscuous mode [ 29.485690][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.493327][ T3321] Cannot create hsr debugfs directory [ 29.576840][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.592148][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.607423][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.617836][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.659636][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.669577][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.681666][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.691022][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.722131][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.741667][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.750971][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.760385][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.770232][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.779629][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.788300][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.802841][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.841200][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.850114][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.858526][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.869053][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.879874][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.910328][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.924715][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.935514][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.942648][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.961928][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.968960][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.981604][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.998369][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.008513][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.030908][ T1693] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.037960][ T1693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.047843][ T1693] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.054996][ T1693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.063358][ T1693] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.070457][ T1693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.079973][ T1693] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.087110][ T1693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.106334][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.140130][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.150996][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.161497][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.186476][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.193591][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.202915][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.209970][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.223923][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.250998][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.263961][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.271081][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.293777][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.308157][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.318730][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.333340][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.340410][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.375296][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.391463][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.462092][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.500088][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.550440][ T3313] veth0_vlan: entered promiscuous mode [ 30.564638][ T3313] veth1_vlan: entered promiscuous mode [ 30.603025][ T3313] veth0_macvtap: entered promiscuous mode [ 30.614978][ T3321] veth0_vlan: entered promiscuous mode [ 30.626819][ T3313] veth1_macvtap: entered promiscuous mode [ 30.634330][ T3321] veth1_vlan: entered promiscuous mode [ 30.647672][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.672971][ T3319] veth0_vlan: entered promiscuous mode [ 30.683293][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.703250][ T3319] veth1_vlan: entered promiscuous mode [ 30.709864][ T3321] veth0_macvtap: entered promiscuous mode [ 30.718171][ T3314] veth0_vlan: entered promiscuous mode [ 30.733386][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.742134][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.751168][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.759890][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.770759][ T3321] veth1_macvtap: entered promiscuous mode [ 30.786821][ T3314] veth1_vlan: entered promiscuous mode [ 30.795267][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.805717][ T3318] veth0_vlan: entered promiscuous mode [ 30.818069][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.832591][ T3319] veth0_macvtap: entered promiscuous mode [ 30.840825][ T3321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.849689][ T3321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.858481][ T3321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.867300][ T3321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.878524][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.882365][ T3314] veth0_macvtap: entered promiscuous mode [ 30.899481][ T3318] veth1_vlan: entered promiscuous mode [ 30.905896][ T3314] veth1_macvtap: entered promiscuous mode [ 30.921361][ T3319] veth1_macvtap: entered promiscuous mode [ 30.935265][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.948653][ C0] hrtimer: interrupt took 48745 ns [ 30.952436][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.970769][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.983425][ T3318] veth0_macvtap: entered promiscuous mode [ 30.990971][ T3314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.999746][ T3314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.008438][ T3314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.017685][ T3314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.032895][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.047482][ T3318] veth1_macvtap: entered promiscuous mode [ 31.060292][ T3319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.069074][ T3319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.077871][ T3319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.086710][ T3319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.110779][ T3459] loop2: detected capacity change from 0 to 2048 [ 31.123265][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.138403][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.156104][ T3318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.164917][ T3318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.173660][ T3318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.182454][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.198495][ T3459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.308676][ T3468] ======================================================= [ 31.308676][ T3468] WARNING: The mand mount option has been deprecated and [ 31.308676][ T3468] and is ignored by this kernel. Remove the mand [ 31.308676][ T3468] option from the mount to silence this warning. [ 31.308676][ T3468] ======================================================= [ 31.318580][ T3470] loop3: detected capacity change from 0 to 512 [ 31.350589][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 31.350650][ T29] audit: type=1326 audit(1748235659.441:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca2ace969 code=0x7ffc0000 [ 31.351276][ T3468] 9pnet_fd: p9_fd_create_unix (3468): problem connecting socket: ./file0: -111 [ 31.356735][ T29] audit: type=1326 audit(1748235659.441:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca2ace969 code=0x7ffc0000 [ 31.411932][ T29] audit: type=1326 audit(1748235659.441:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ca2ace969 code=0x7ffc0000 [ 31.434923][ T29] audit: type=1326 audit(1748235659.441:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca2ace969 code=0x7ffc0000 [ 31.458067][ T29] audit: type=1326 audit(1748235659.441:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7ca2ace969 code=0x7ffc0000 [ 31.469094][ T3476] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 31.481010][ T29] audit: type=1400 audit(1748235659.441:178): avc: denied { setopt } for pid=3466 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.509824][ T29] audit: type=1326 audit(1748235659.441:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca2ace969 code=0x7ffc0000 [ 31.519858][ T3470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.532956][ T29] audit: type=1326 audit(1748235659.441:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ca2ace969 code=0x7ffc0000 [ 31.539591][ T3470] ext4: Unknown parameter 'nodelalloc2' [ 31.562712][ T29] audit: type=1400 audit(1748235659.441:181): avc: denied { create } for pid=3466 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.588593][ T29] audit: type=1326 audit(1748235659.441:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca2ace969 code=0x7ffc0000 [ 31.667190][ T3478] loop0: detected capacity change from 0 to 512 [ 31.686941][ T3478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.693668][ T3478] ext4: Unknown parameter 'nodelalloc2' [ 31.863263][ T3481] hub 9-0:1.0: USB hub found [ 31.868157][ T3481] hub 9-0:1.0: 8 ports detected [ 32.599530][ T3486] syz.0.8: attempt to access beyond end of device [ 32.599530][ T3486] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 32.613009][ T3487] syz.3.4: attempt to access beyond end of device [ 32.613009][ T3487] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 32.765384][ T3486] loop0: detected capacity change from 0 to 1024 [ 32.785621][ T3487] loop3: detected capacity change from 0 to 1024 [ 32.877285][ T3392] IPVS: starting estimator thread 0... [ 33.043605][ T3493] IPVS: using max 2688 ests per chain, 134400 per kthread [ 33.199750][ T3506] loop4: detected capacity change from 0 to 2048 [ 33.425442][ T3304] loop4: p1 < > p3 [ 33.458996][ T3304] loop4: p3 size 134217728 extends beyond EOD, truncated [ 33.730357][ T3392] IPVS: starting estimator thread 0... [ 33.767144][ T3506] loop4: p1 < > p3 [ 33.795813][ T3506] loop4: p3 size 134217728 extends beyond EOD, truncated [ 33.813905][ T3521] loop0: detected capacity change from 0 to 2048 [ 33.819327][ T3522] IPVS: using max 2352 ests per chain, 117600 per kthread [ 33.860178][ T3307] loop0: p1 < > p3 [ 33.864772][ T3307] loop0: p3 size 134217728 extends beyond EOD, truncated [ 33.876327][ T3521] loop0: p1 < > p3 [ 33.883210][ T3521] loop0: p3 size 134217728 extends beyond EOD, truncated [ 34.076858][ T3525] loop3: detected capacity change from 0 to 2048 [ 34.158273][ T3525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 34.484270][ T3537] hub 9-0:1.0: USB hub found [ 34.491062][ T3537] hub 9-0:1.0: 8 ports detected [ 34.791722][ T3549] xt_hashlimit: max too large, truncated to 1048576 [ 34.813006][ T3549] netlink: 'syz.0.30': attribute type 3 has an invalid length. [ 34.999807][ T3551] loop1: detected capacity change from 0 to 2048 [ 35.050068][ T3551] loop1: p1 < > p3 [ 35.054757][ T3551] loop1: p3 size 134217728 extends beyond EOD, truncated [ 35.071659][ T3005] loop1: p1 < > p3 [ 35.076107][ T3005] loop1: p3 size 134217728 extends beyond EOD, truncated [ 35.326994][ T3565] Illegal XDP return value 450474368 on prog (id 34) dev N/A, expect packet loss! [ 35.543905][ T3581] hub 9-0:1.0: USB hub found [ 35.556364][ T3581] hub 9-0:1.0: 8 ports detected [ 35.597395][ T3565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=3565 comm=syz.4.36 [ 35.757061][ T3593] loop1: detected capacity change from 0 to 512 [ 35.763946][ T3593] EXT4-fs: Ignoring removed oldalloc option [ 35.793287][ T3593] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.47: Parent and EA inode have the same ino 15 [ 35.807023][ T3593] EXT4-fs (loop1): Remounting filesystem read-only [ 35.813778][ T3593] EXT4-fs (loop1): 1 orphan inode deleted [ 35.828135][ T3593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.861706][ T3587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=3587 comm=syz.0.45 [ 35.907329][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.133078][ T3598] FAULT_INJECTION: forcing a failure. [ 36.133078][ T3598] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.146198][ T3598] CPU: 0 UID: 0 PID: 3598 Comm: syz.1.48 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 36.146269][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.146283][ T3598] Call Trace: [ 36.146290][ T3598] [ 36.146297][ T3598] __dump_stack+0x1d/0x30 [ 36.146323][ T3598] dump_stack_lvl+0xe8/0x140 [ 36.146344][ T3598] dump_stack+0x15/0x1b [ 36.146363][ T3598] should_fail_ex+0x265/0x280 [ 36.146484][ T3598] should_fail+0xb/0x20 [ 36.146518][ T3598] should_fail_usercopy+0x1a/0x20 [ 36.146539][ T3598] _copy_from_user+0x1c/0xb0 [ 36.146566][ T3598] ___sys_recvmsg+0xaa/0x370 [ 36.146634][ T3598] do_recvmmsg+0x1ef/0x540 [ 36.146657][ T3598] ? fput+0x8f/0xc0 [ 36.146676][ T3598] __x64_sys_recvmmsg+0xe5/0x170 [ 36.146703][ T3598] x64_sys_call+0x1c6a/0x2fb0 [ 36.146727][ T3598] do_syscall_64+0xd0/0x1a0 [ 36.146763][ T3598] ? clear_bhb_loop+0x40/0x90 [ 36.146820][ T3598] ? clear_bhb_loop+0x40/0x90 [ 36.146840][ T3598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.146862][ T3598] RIP: 0033:0x7f40313ce969 [ 36.146883][ T3598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.146902][ T3598] RSP: 002b:00007f402fa37038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 36.146919][ T3598] RAX: ffffffffffffffda RBX: 00007f40315f5fa0 RCX: 00007f40313ce969 [ 36.147011][ T3598] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 36.147025][ T3598] RBP: 00007f402fa37090 R08: 0000000000000000 R09: 0000000000000000 [ 36.147035][ T3598] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 36.147045][ T3598] R13: 0000000000000000 R14: 00007f40315f5fa0 R15: 00007ffe098dd9b8 [ 36.147060][ T3598] [ 36.341356][ T3600] loop4: detected capacity change from 0 to 512 [ 36.348050][ T3600] EXT4-fs: Ignoring removed oldalloc option [ 36.367058][ T3600] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.49: Parent and EA inode have the same ino 15 [ 36.380866][ T3600] EXT4-fs (loop4): Remounting filesystem read-only [ 36.388684][ T3600] EXT4-fs (loop4): 1 orphan inode deleted [ 36.395114][ T3600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.416783][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 36.416798][ T29] audit: type=1400 audit(1748235664.511:468): avc: denied { create } for pid=3606 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.442361][ T29] audit: type=1400 audit(1748235664.531:469): avc: denied { bind } for pid=3606 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.444315][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.471787][ T29] audit: type=1400 audit(1748235664.571:470): avc: denied { write } for pid=3606 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.502050][ T2968] IPVS: starting estimator thread 0... [ 36.589668][ T3610] IPVS: using max 2736 ests per chain, 136800 per kthread [ 36.602833][ T3621] loop1: detected capacity change from 0 to 512 [ 36.617438][ T29] audit: type=1326 audit(1748235664.711:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9cae969 code=0x7ffc0000 [ 36.640722][ T29] audit: type=1326 audit(1748235664.711:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd6e9cae969 code=0x7ffc0000 [ 36.663780][ T29] audit: type=1326 audit(1748235664.711:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9cae969 code=0x7ffc0000 [ 36.687179][ T29] audit: type=1326 audit(1748235664.711:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e9cae969 code=0x7ffc0000 [ 36.710734][ T29] audit: type=1326 audit(1748235664.711:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9cae969 code=0x7ffc0000 [ 36.711658][ T3621] EXT4-fs: Ignoring removed oldalloc option [ 36.738314][ T29] audit: type=1326 audit(1748235664.711:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd6e9cae969 code=0x7ffc0000 [ 36.748660][ T3626] mmap: syz.2.55 (3626) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.763273][ T29] audit: type=1326 audit(1748235664.721:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3622 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9cae969 code=0x7ffc0000 [ 36.802674][ T3628] netlink: 360 bytes leftover after parsing attributes in process `syz.3.60'. [ 36.817469][ T3628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.60'. [ 36.818110][ T3621] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.58: Parent and EA inode have the same ino 15 [ 36.828297][ T3623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=3623 comm=syz.0.59 [ 36.839132][ T3621] EXT4-fs (loop1): Remounting filesystem read-only [ 36.839205][ T3621] EXT4-fs (loop1): 1 orphan inode deleted [ 36.839754][ T3621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.878273][ T3628] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 36.887101][ T3628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 36.895949][ T3628] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 36.904849][ T3628] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 36.924603][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.005561][ T3642] netlink: 88 bytes leftover after parsing attributes in process `syz.1.67'. [ 37.089323][ T3645] loop1: detected capacity change from 0 to 8192 [ 37.371908][ T3313] syz-executor (3313) used greatest stack depth: 10808 bytes left [ 37.388677][ T1693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.441790][ T3647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=3647 comm=syz.3.66 [ 37.535808][ T1693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.570677][ T3656] loop4: detected capacity change from 0 to 8192 [ 37.615941][ T1693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.619885][ T3304] loop4: p3 p4 < > [ 37.647119][ T3304] loop4: p3 start 619312 is beyond EOD, truncated [ 37.664901][ T3656] loop4: p3 p4 < > [ 37.673003][ T1693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.683953][ T3656] loop4: p3 start 619312 is beyond EOD, truncated [ 37.788472][ T3005] loop4: p3 p4 < > [ 37.790090][ T1693] bridge_slave_1: left allmulticast mode [ 37.798078][ T1693] bridge_slave_1: left promiscuous mode [ 37.801183][ T3005] loop4: p3 start 619312 is beyond EOD, truncated [ 37.803855][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.875519][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 37.901782][ T1693] bridge_slave_0: left allmulticast mode [ 37.907803][ T1693] bridge_slave_0: left promiscuous mode [ 37.913600][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.913994][ T3693] FAULT_INJECTION: forcing a failure. [ 37.913994][ T3693] name failslab, interval 1, probability 0, space 0, times 1 [ 37.933333][ T3693] CPU: 0 UID: 0 PID: 3693 Comm: syz.2.80 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 37.933362][ T3693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.933376][ T3693] Call Trace: [ 37.933383][ T3693] [ 37.933390][ T3693] __dump_stack+0x1d/0x30 [ 37.933410][ T3693] dump_stack_lvl+0xe8/0x140 [ 37.933436][ T3693] dump_stack+0x15/0x1b [ 37.933453][ T3693] should_fail_ex+0x265/0x280 [ 37.933487][ T3693] should_failslab+0x8c/0xb0 [ 37.933600][ T3693] kmem_cache_alloc_node_noprof+0x57/0x320 [ 37.933679][ T3693] ? __alloc_skb+0x101/0x320 [ 37.933760][ T3693] __alloc_skb+0x101/0x320 [ 37.933796][ T3693] netlink_alloc_large_skb+0xba/0xf0 [ 37.933905][ T3693] netlink_sendmsg+0x3cf/0x6b0 [ 37.933925][ T3693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.933942][ T3693] __sock_sendmsg+0x142/0x180 [ 37.933967][ T3693] ____sys_sendmsg+0x31e/0x4e0 [ 37.934009][ T3693] ___sys_sendmsg+0x17b/0x1d0 [ 37.934070][ T3693] __x64_sys_sendmsg+0xd4/0x160 [ 37.934097][ T3693] x64_sys_call+0x2999/0x2fb0 [ 37.934119][ T3693] do_syscall_64+0xd0/0x1a0 [ 37.934144][ T3693] ? clear_bhb_loop+0x40/0x90 [ 37.934182][ T3693] ? clear_bhb_loop+0x40/0x90 [ 37.934204][ T3693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.934231][ T3693] RIP: 0033:0x7f119a27e969 [ 37.934274][ T3693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.934292][ T3693] RSP: 002b:00007f11988e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.934312][ T3693] RAX: ffffffffffffffda RBX: 00007f119a4a5fa0 RCX: 00007f119a27e969 [ 37.934325][ T3693] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 37.934338][ T3693] RBP: 00007f11988e7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.934350][ T3693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.934380][ T3693] R13: 0000000000000000 R14: 00007f119a4a5fa0 R15: 00007ffc9b230d98 [ 37.934399][ T3693] [ 38.158642][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 38.239917][ T10] IPVS: starting estimator thread 0... [ 38.263891][ T1693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.275613][ T1693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.286110][ T1693] bond0 (unregistering): Released all slaves [ 38.303842][ T3713] hub 9-0:1.0: USB hub found [ 38.313664][ T3713] hub 9-0:1.0: 8 ports detected [ 38.339398][ T3711] IPVS: using max 2160 ests per chain, 108000 per kthread [ 38.364619][ T1693] hsr_slave_0: left promiscuous mode [ 38.381183][ T1693] hsr_slave_1: left promiscuous mode [ 38.386792][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.394308][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.435796][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.443271][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.453574][ T3736] loop4: detected capacity change from 0 to 1024 [ 38.460082][ T1693] veth1_macvtap: left promiscuous mode [ 38.469612][ T1693] veth0_macvtap: left promiscuous mode [ 38.470539][ T3736] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 38.470539][ T3736] [ 38.475114][ T1693] veth1_vlan: left promiscuous mode [ 38.485793][ T3736] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 38.519302][ T1693] veth0_vlan: left promiscuous mode [ 38.578691][ T3743] netlink: 'syz.4.91': attribute type 10 has an invalid length. [ 38.586488][ T3743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.91'. [ 38.622114][ T1693] team0 (unregistering): Port device team_slave_1 removed [ 38.638637][ T1693] team0 (unregistering): Port device team_slave_0 removed [ 38.650308][ T3744] loop3: detected capacity change from 0 to 2048 [ 38.699992][ T3744] loop3: p1 < > p3 [ 38.715717][ T3744] loop3: p3 size 134217728 extends beyond EOD, truncated [ 38.755915][ T3736] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.763158][ T3736] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.829857][ T3736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.839612][ T3736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.870434][ T3736] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.879535][ T3736] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.888477][ T3736] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.897650][ T3736] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.929412][ T3758] netlink: 360 bytes leftover after parsing attributes in process `syz.0.98'. [ 38.938813][ T3758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.98'. [ 38.952127][ T3743] dummy0: entered promiscuous mode [ 38.973164][ T3743] bridge0: port 3(dummy0) entered blocking state [ 38.979687][ T3743] bridge0: port 3(dummy0) entered disabled state [ 38.991908][ T3743] dummy0: entered allmulticast mode [ 39.009923][ T3664] chnl_net:caif_netlink_parms(): no params data found [ 39.070862][ T3760] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.081155][ T3760] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.135552][ T3773] loop2: detected capacity change from 0 to 2048 [ 39.171365][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.178512][ T3664] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.194631][ T3773] block device autoloading is deprecated and will be removed. [ 39.220494][ T3773] syz.2.99: attempt to access beyond end of device [ 39.220494][ T3773] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 39.242163][ T3664] bridge_slave_0: entered allmulticast mode [ 39.270444][ T3664] bridge_slave_0: entered promiscuous mode [ 39.288170][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.293938][ T3785] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.295316][ T3664] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.314257][ T3664] bridge_slave_1: entered allmulticast mode [ 39.320851][ T3664] bridge_slave_1: entered promiscuous mode [ 39.384770][ T3760] syz.2.99 (3760) used greatest stack depth: 10728 bytes left [ 39.398787][ T1693] IPVS: stop unused estimator thread 0... [ 39.406185][ T3664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.424195][ T3664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.463860][ T3664] team0: Port device team_slave_0 added [ 39.470476][ T3664] team0: Port device team_slave_1 added [ 39.513973][ T3664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.521059][ T3664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.547106][ T3664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.559871][ T3664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.566818][ T3664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.592849][ T3664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.632068][ T3664] hsr_slave_0: entered promiscuous mode [ 39.638069][ T3664] hsr_slave_1: entered promiscuous mode [ 39.661566][ T3664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.679203][ T3664] Cannot create hsr debugfs directory [ 39.687943][ T3811] loop0: detected capacity change from 0 to 2048 [ 39.784873][ T3819] loop2: detected capacity change from 0 to 4096 [ 39.835954][ T3819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.856942][ T3811] syz.0.106 (3811) used greatest stack depth: 10576 bytes left [ 39.875156][ T3825] @: renamed from vlan0 [ 40.005994][ T3842] hub 9-0:1.0: USB hub found [ 40.021801][ T3842] hub 9-0:1.0: 8 ports detected [ 40.028065][ T3664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.037621][ T3321] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 40.085172][ T3664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.101942][ T3664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.125615][ T3664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.138137][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 40.171844][ T3860] can0: slcan on ttyS3. [ 40.195381][ T3321] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 40.214657][ T3321] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 40.237390][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 40.272304][ T3865] loop3: detected capacity change from 0 to 2048 [ 40.274696][ T3321] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 40.291300][ T3321] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 40.314626][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 40.326938][ T3664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.347813][ T3321] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 40.349470][ T3859] can0 (unregistered): slcan off ttyS3. [ 40.377530][ T3664] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.390202][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.397267][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.411006][ T3321] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 40.434325][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 40.454568][ T3321] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 40.500650][ T3321] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /22/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 40.502308][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.528931][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.535329][ T3321] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 40.572392][ T3321] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 40.618624][ T3321] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 40.640367][ T3664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.650794][ T3664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.665100][ T3321] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 40.730666][ T3321] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 40.765643][ T3905] pimreg: entered allmulticast mode [ 40.773815][ T3321] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 40.786959][ T3664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.801520][ T3321] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 40.818667][ T3905] pimreg: left allmulticast mode [ 41.067238][ T3664] veth0_vlan: entered promiscuous mode [ 41.086902][ T3664] veth1_vlan: entered promiscuous mode [ 41.113206][ T3664] veth0_macvtap: entered promiscuous mode [ 41.130164][ T3664] veth1_macvtap: entered promiscuous mode [ 41.131308][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.168717][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.194138][ T3664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.217015][ T3664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.235547][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.259700][ T3664] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.268632][ T3664] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.277441][ T3664] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.286351][ T3664] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.365175][ T9] IPVS: starting estimator thread 0... [ 41.383576][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.420151][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 41.420163][ T29] audit: type=1400 audit(1748235669.521:1012): avc: denied { mounton } for pid=3664 comm="syz-executor" path="/root/syzkaller.EV6yoj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.457731][ T29] audit: type=1400 audit(1748235669.551:1013): avc: denied { mounton } for pid=3664 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.480714][ T29] audit: type=1400 audit(1748235669.551:1014): avc: denied { mount } for pid=3664 comm="syz-executor" name="/" dev="gadgetfs" ino=4372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.489411][ T3981] IPVS: using max 2112 ests per chain, 105600 per kthread [ 41.511562][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.614500][ T51] bridge_slave_1: left allmulticast mode [ 41.620238][ T51] bridge_slave_1: left promiscuous mode [ 41.625934][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.659895][ T51] bridge_slave_0: left allmulticast mode [ 41.665597][ T51] bridge_slave_0: left promiscuous mode [ 41.671401][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.684505][ T4009] loop0: detected capacity change from 0 to 128 [ 41.691579][ T4009] vfat: Unknown parameter './file1' [ 41.724328][ T4011] loop4: detected capacity change from 0 to 1024 [ 41.730901][ T29] audit: type=1400 audit(1748235669.811:1015): avc: denied { write } for pid=4010 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.750966][ T29] audit: type=1400 audit(1748235669.811:1016): avc: denied { nlmsg_write } for pid=4010 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.752681][ T4011] EXT4-fs: Ignoring removed orlov option [ 41.771767][ T29] audit: type=1400 audit(1748235669.811:1017): avc: denied { setopt } for pid=4010 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.805007][ T4011] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 41.863734][ T4011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.879659][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.901742][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.925158][ T51] bond0 (unregistering): Released all slaves [ 41.931530][ T29] audit: type=1400 audit(1748235670.021:1018): avc: denied { mount } for pid=4010 comm="syz.4.152" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.977958][ T4011] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.981334][ T29] audit: type=1400 audit(1748235670.061:1019): avc: denied { add_name } for pid=4010 comm="syz.4.152" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.011564][ T29] audit: type=1400 audit(1748235670.061:1020): avc: denied { create } for pid=4010 comm="syz.4.152" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.031892][ T29] audit: type=1400 audit(1748235670.061:1021): avc: denied { append } for pid=4010 comm="syz.4.152" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.075489][ T4025] @: renamed from vlan0 (while UP) [ 42.088074][ T51] hsr_slave_0: left promiscuous mode [ 42.096759][ T51] hsr_slave_1: left promiscuous mode [ 42.117722][ T4030] __nla_validate_parse: 9 callbacks suppressed [ 42.117736][ T4030] netlink: 32 bytes leftover after parsing attributes in process `syz.5.159'. [ 42.133341][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.147088][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.154596][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.223329][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.230927][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.294098][ T51] veth1_vlan: left promiscuous mode [ 42.313093][ T51] veth0_vlan: left promiscuous mode [ 42.468068][ T51] team0 (unregistering): Port device team_slave_1 removed [ 42.484756][ T51] team0 (unregistering): Port device team_slave_0 removed [ 42.518857][ T4039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31080 sclass=netlink_route_socket pid=4039 comm=syz.5.162 [ 42.574273][ T4067] @: renamed from vlan0 (while UP) [ 42.583730][ T4073] loop4: detected capacity change from 0 to 1024 [ 42.650290][ T4080] FAULT_INJECTION: forcing a failure. [ 42.650290][ T4080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.663515][ T4080] CPU: 0 UID: 0 PID: 4080 Comm: syz.0.172 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 42.663537][ T4080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.663617][ T4080] Call Trace: [ 42.663622][ T4080] [ 42.663630][ T4080] __dump_stack+0x1d/0x30 [ 42.663648][ T4080] dump_stack_lvl+0xe8/0x140 [ 42.663664][ T4080] dump_stack+0x15/0x1b [ 42.663677][ T4080] should_fail_ex+0x265/0x280 [ 42.663791][ T4080] should_fail+0xb/0x20 [ 42.663823][ T4080] should_fail_usercopy+0x1a/0x20 [ 42.663840][ T4080] _copy_to_user+0x20/0xa0 [ 42.663865][ T4080] simple_read_from_buffer+0xb5/0x130 [ 42.663927][ T4080] proc_fail_nth_read+0x100/0x140 [ 42.663954][ T4080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.664027][ T4080] vfs_read+0x19d/0x6f0 [ 42.664059][ T4080] ? __sys_setsockopt+0x18e/0x200 [ 42.664084][ T4080] ? __rcu_read_unlock+0x4f/0x70 [ 42.664192][ T4080] ? __fget_files+0x184/0x1c0 [ 42.664227][ T4080] ksys_read+0xda/0x1a0 [ 42.664264][ T4080] __x64_sys_read+0x40/0x50 [ 42.664309][ T4080] x64_sys_call+0x2d77/0x2fb0 [ 42.664338][ T4080] do_syscall_64+0xd0/0x1a0 [ 42.664370][ T4080] ? clear_bhb_loop+0x40/0x90 [ 42.664400][ T4080] ? clear_bhb_loop+0x40/0x90 [ 42.664439][ T4080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.664477][ T4080] RIP: 0033:0x7fd6e9cad37c [ 42.664491][ T4080] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 42.664513][ T4080] RSP: 002b:00007fd6e82f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.664537][ T4080] RAX: ffffffffffffffda RBX: 00007fd6e9ed6080 RCX: 00007fd6e9cad37c [ 42.664622][ T4080] RDX: 000000000000000f RSI: 00007fd6e82f60a0 RDI: 0000000000000004 [ 42.664639][ T4080] RBP: 00007fd6e82f6090 R08: 0000000000000000 R09: 0000000000000000 [ 42.664655][ T4080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.664671][ T4080] R13: 0000000000000001 R14: 00007fd6e9ed6080 R15: 00007ffd380e5ae8 [ 42.664698][ T4080] [ 43.045376][ T3976] chnl_net:caif_netlink_parms(): no params data found [ 43.119973][ T4039] x_tables: duplicate underflow at hook 1 [ 43.132854][ T51] IPVS: stop unused estimator thread 0... [ 43.154118][ T4073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 43.184196][ T4112] loop5: detected capacity change from 0 to 128 [ 43.198676][ T4112] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.216855][ T4112] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.255089][ T4118] loop0: detected capacity change from 0 to 512 [ 43.255958][ T4112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.177'. [ 43.261864][ T4118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.276918][ T4118] ext4: Unknown parameter 'nodelalloc2' [ 43.283709][ T3976] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.290890][ T3976] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.307963][ T3976] bridge_slave_0: entered allmulticast mode [ 43.314844][ T3976] bridge_slave_0: entered promiscuous mode [ 43.427383][ T3976] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.434634][ T3976] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.443228][ T3976] bridge_slave_1: entered allmulticast mode [ 43.449744][ T3976] bridge_slave_1: entered promiscuous mode [ 43.478125][ T3976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.505561][ T3976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.560243][ T3976] team0: Port device team_slave_0 added [ 43.580405][ T4129] syz.0.178: attempt to access beyond end of device [ 43.580405][ T4129] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 43.605224][ T4129] loop0: detected capacity change from 0 to 1024 [ 43.699351][ T3976] team0: Port device team_slave_1 added [ 43.855367][ T4132] loop3: detected capacity change from 0 to 2048 [ 43.895982][ T3976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.903029][ T3976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.929116][ T3976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.978497][ T3976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.985553][ T3976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.011673][ T3976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.065056][ T4151] loop4: detected capacity change from 0 to 512 [ 44.072325][ T4132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'. [ 44.073604][ T4151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.087909][ T4151] ext4: Unknown parameter 'nodelalloc2' [ 44.204297][ T3976] hsr_slave_0: entered promiscuous mode [ 44.229776][ T3976] hsr_slave_1: entered promiscuous mode [ 44.240614][ T3976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.248232][ T3976] Cannot create hsr debugfs directory [ 44.428394][ T4168] syz.4.183: attempt to access beyond end of device [ 44.428394][ T4168] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 44.453390][ T4168] loop4: detected capacity change from 0 to 1024 [ 44.622088][ T3976] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 44.706818][ T3976] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 44.715454][ T3976] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 44.730941][ T3976] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 44.828397][ T3976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.849376][ T3976] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.860025][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.867155][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.893283][ T3976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.903736][ T3976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.923679][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.930809][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.937775][ T4186] loop0: detected capacity change from 0 to 2048 [ 45.027244][ T3976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.040968][ T4003] loop0: p1 < > p3 [ 45.052922][ T4003] loop0: p3 size 134217728 extends beyond EOD, truncated [ 45.086413][ T4186] loop0: p1 < > p3 [ 45.092706][ T4186] loop0: p3 size 134217728 extends beyond EOD, truncated [ 45.136287][ T4191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=4191 comm=syz.3.192 [ 45.347278][ T3664] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.381588][ T3976] veth0_vlan: entered promiscuous mode [ 45.395888][ T4235] loop5: detected capacity change from 0 to 512 [ 45.403424][ T3976] veth1_vlan: entered promiscuous mode [ 45.427761][ T3976] veth0_macvtap: entered promiscuous mode [ 45.447068][ T4235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.450800][ T3976] veth1_macvtap: entered promiscuous mode [ 45.453809][ T4235] ext4: Unknown parameter 'nodelalloc2' [ 45.476391][ T3976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.498068][ T3976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.534224][ T3976] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.543122][ T3976] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.552003][ T3976] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.560741][ T3976] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.763579][ T4269] syz.5.195: attempt to access beyond end of device [ 45.763579][ T4269] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 45.780998][ T4269] loop5: detected capacity change from 0 to 1024 [ 45.834776][ T4274] @: renamed from vlan0 (while UP) [ 45.867260][ T4283] openvswitch: netlink: Message has 6 unknown bytes. [ 45.914889][ T4287] loop3: detected capacity change from 0 to 512 [ 45.984184][ T4289] loop0: detected capacity change from 0 to 512 [ 45.999114][ T4289] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.014871][ T4289] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.205: bg 0: block 248: padding at end of block bitmap is not set [ 46.032626][ T4289] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.205: Failed to acquire dquot type 1 [ 46.046587][ T4289] EXT4-fs (loop0): 1 truncate cleaned up [ 46.054083][ T4289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.085622][ T4302] loop4: detected capacity change from 0 to 2048 [ 46.092169][ T4289] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 46.097476][ T4304] loop6: detected capacity change from 0 to 128 [ 46.126282][ T4304] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 46.145620][ T4289] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 46.154774][ T4003] loop4: p1 < > p3 [ 46.174879][ T4003] loop4: p3 size 134217728 extends beyond EOD, truncated [ 46.198784][ T4302] loop4: p1 < > p3 [ 46.207946][ T4304] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.219200][ T4302] loop4: p3 size 134217728 extends beyond EOD, truncated [ 46.239508][ T4304] EXT4-fs (loop6): shut down requested (1) [ 46.263105][ T3976] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.273421][ T4289] syz.0.205 (4289) used greatest stack depth: 9360 bytes left [ 46.299712][ T3005] loop4: p1 < > p3 [ 46.305981][ T3005] loop4: p3 size 134217728 extends beyond EOD, truncated [ 46.334983][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.352778][ T4325] loop6: detected capacity change from 0 to 1024 [ 46.401058][ T4325] EXT4-fs: Ignoring removed bh option [ 46.470210][ T4332] pimreg: entered allmulticast mode [ 46.475959][ T4325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.498703][ T4332] pimreg: left allmulticast mode [ 46.515071][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 46.515087][ T29] audit: type=1400 audit(1748235674.611:1321): avc: denied { setattr } for pid=4323 comm="syz.6.208" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.569211][ T3976] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.593867][ T29] audit: type=1326 audit(1748235674.681:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b2d8e969 code=0x7ffc0000 [ 46.617259][ T29] audit: type=1326 audit(1748235674.681:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b2d8e969 code=0x7ffc0000 [ 46.713122][ T4352] netlink: 32 bytes leftover after parsing attributes in process `syz.5.217'. [ 46.732944][ T4355] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.759354][ T29] audit: type=1326 audit(1748235674.741:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58b2d8e969 code=0x7ffc0000 [ 46.782698][ T29] audit: type=1326 audit(1748235674.741:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b2d8e969 code=0x7ffc0000 [ 46.806158][ T29] audit: type=1326 audit(1748235674.741:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b2d8e969 code=0x7ffc0000 [ 46.829566][ T29] audit: type=1326 audit(1748235674.751:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f58b2d8e969 code=0x7ffc0000 [ 46.852986][ T29] audit: type=1326 audit(1748235674.751:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b2d8e969 code=0x7ffc0000 [ 46.876344][ T29] audit: type=1326 audit(1748235674.751:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58b2d8e969 code=0x7ffc0000 [ 46.899983][ T29] audit: type=1326 audit(1748235674.751:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.5.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b2d8e969 code=0x7ffc0000 [ 46.968456][ T4352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.217'. [ 47.122462][ T4380] pimreg: entered allmulticast mode [ 47.136652][ T4380] pimreg: left allmulticast mode [ 47.156688][ T4384] netlink: 32 bytes leftover after parsing attributes in process `syz.5.227'. [ 47.182101][ T4384] loop5: detected capacity change from 0 to 128 [ 47.197055][ T4384] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.219931][ T4384] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.355944][ T4392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.229'. [ 47.361306][ T3664] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.364968][ T4392] netlink: 108 bytes leftover after parsing attributes in process `syz.3.229'. [ 47.385333][ T4395] netlink: 64 bytes leftover after parsing attributes in process `syz.3.229'. [ 47.394543][ T4392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.229'. [ 47.458661][ T4392] netlink: 108 bytes leftover after parsing attributes in process `syz.3.229'. [ 47.467688][ T4392] netlink: 84 bytes leftover after parsing attributes in process `syz.3.229'. [ 47.579161][ T4405] loop5: detected capacity change from 0 to 2048 [ 47.641342][ T4405] loop5: p1 < > p3 [ 47.647935][ T4405] loop5: p3 size 134217728 extends beyond EOD, truncated [ 47.675183][ T3005] loop5: p1 < > p3 [ 47.682199][ T3005] loop5: p3 size 134217728 extends beyond EOD, truncated [ 47.712148][ T4416] loop0: detected capacity change from 0 to 2048 [ 47.771573][ T4425] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 47.828348][ T4423] netlink: 44 bytes leftover after parsing attributes in process `syz.4.239'. [ 47.837790][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 48.460963][ T4447] hub 9-0:1.0: USB hub found [ 48.476240][ T4447] hub 9-0:1.0: 8 ports detected [ 48.731977][ T4464] loop5: detected capacity change from 0 to 512 [ 48.742823][ T4464] EXT4-fs (loop5): orphan cleanup on readonly fs [ 48.750189][ T4464] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.250: bg 0: block 248: padding at end of block bitmap is not set [ 48.764887][ T4464] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.250: Failed to acquire dquot type 1 [ 48.781168][ T4464] EXT4-fs (loop5): 1 truncate cleaned up [ 48.787792][ T4464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.849837][ T3664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.883416][ T4471] loop4: detected capacity change from 0 to 512 [ 48.897389][ T4471] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 48.905529][ T4471] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 48.914513][ T4471] EXT4-fs (loop4): 1 truncate cleaned up [ 48.920685][ T4471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.936023][ T4471] Zero length message leads to an empty skb [ 48.942448][ T4471] : renamed from bond0 [ 48.974107][ T4355] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.994121][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.031335][ T4482] loop4: detected capacity change from 0 to 2048 [ 49.097923][ T4482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 49.378448][ T4498] pimreg: entered allmulticast mode [ 49.467415][ T4355] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.594137][ T4355] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.730069][ T4355] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.812012][ T4355] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.838780][ T4355] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.867828][ T4355] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.880966][ T4502] Invalid ELF header magic: != ELF [ 49.889369][ T4354] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.890862][ T4502] sd 0:0:1:0: device reset [ 49.940063][ T4512] FAULT_INJECTION: forcing a failure. [ 49.940063][ T4512] name failslab, interval 1, probability 0, space 0, times 0 [ 49.952861][ T4512] CPU: 1 UID: 0 PID: 4512 Comm: syz.4.268 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 49.952888][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.952902][ T4512] Call Trace: [ 49.952907][ T4512] [ 49.952912][ T4512] __dump_stack+0x1d/0x30 [ 49.952982][ T4512] dump_stack_lvl+0xe8/0x140 [ 49.952997][ T4512] dump_stack+0x15/0x1b [ 49.953009][ T4512] should_fail_ex+0x265/0x280 [ 49.953063][ T4512] should_failslab+0x8c/0xb0 [ 49.953119][ T4512] kmem_cache_alloc_noprof+0x50/0x310 [ 49.953136][ T4512] ? getname_flags+0x80/0x3b0 [ 49.953161][ T4512] getname_flags+0x80/0x3b0 [ 49.953240][ T4512] __x64_sys_link+0x33/0x70 [ 49.953261][ T4512] x64_sys_call+0x2af9/0x2fb0 [ 49.953277][ T4512] do_syscall_64+0xd0/0x1a0 [ 49.953295][ T4512] ? clear_bhb_loop+0x40/0x90 [ 49.953340][ T4512] ? clear_bhb_loop+0x40/0x90 [ 49.953356][ T4512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.953372][ T4512] RIP: 0033:0x7f7ca2ace969 [ 49.953403][ T4512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.953416][ T4512] RSP: 002b:00007f7ca1137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 49.953431][ T4512] RAX: ffffffffffffffda RBX: 00007f7ca2cf5fa0 RCX: 00007f7ca2ace969 [ 49.953440][ T4512] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 00002000000000c0 [ 49.953449][ T4512] RBP: 00007f7ca1137090 R08: 0000000000000000 R09: 0000000000000000 [ 49.953458][ T4512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.953467][ T4512] R13: 0000000000000000 R14: 00007f7ca2cf5fa0 R15: 00007ffc17efc518 [ 49.953482][ T4512] [ 50.161027][ T4354] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.213773][ T4354] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.321417][ T4354] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.396241][ T4515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=4515 comm=syz.3.269 [ 50.415203][ T4540] pimreg: entered allmulticast mode [ 50.422420][ T4540] pimreg: left allmulticast mode [ 51.267537][ T4570] tipc: Started in network mode [ 51.272654][ T4570] tipc: Node identity 52a5810119d3, cluster identity 4711 [ 51.279867][ T4570] tipc: Enabled bearer , priority 0 [ 51.292548][ T4570] loop0: detected capacity change from 0 to 512 [ 51.303756][ T4570] EXT4-fs: dax option not supported [ 51.320490][ T4570] syzkaller0: MTU too low for tipc bearer [ 51.326486][ T4570] tipc: Disabling bearer [ 51.403840][ T4578] hub 9-0:1.0: USB hub found [ 51.408548][ T4578] hub 9-0:1.0: 8 ports detected [ 51.498861][ T4584] syz.0.299 uses obsolete (PF_INET,SOCK_PACKET) [ 51.593913][ T4588] loop3: detected capacity change from 0 to 512 [ 51.600721][ T4588] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.607685][ T4588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.630743][ T4588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.643399][ T4588] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.666250][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.702650][ T29] kauditd_printk_skb: 899 callbacks suppressed [ 51.702664][ T29] audit: type=1326 audit(1748235679.801:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 51.751541][ T4596] loop3: detected capacity change from 0 to 2048 [ 51.759391][ T29] audit: type=1326 audit(1748235679.831:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 51.782838][ T29] audit: type=1326 audit(1748235679.831:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 51.806232][ T29] audit: type=1326 audit(1748235679.841:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 51.830073][ T29] audit: type=1326 audit(1748235679.841:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 51.853419][ T29] audit: type=1326 audit(1748235679.841:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 51.876890][ T29] audit: type=1326 audit(1748235679.841:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 51.900214][ T29] audit: type=1326 audit(1748235679.841:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 51.923462][ T29] audit: type=1326 audit(1748235679.841:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 51.946803][ T29] audit: type=1326 audit(1748235679.841:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 52.163512][ T4620] __nla_validate_parse: 4 callbacks suppressed [ 52.163525][ T4620] netlink: 32 bytes leftover after parsing attributes in process `syz.3.311'. [ 52.208753][ T4622] netlink: 32 bytes leftover after parsing attributes in process `syz.4.310'. [ 52.622380][ T4626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=4626 comm=syz.4.312 [ 52.748649][ T4631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=4631 comm=syz.3.313 [ 52.835369][ T4665] loop5: detected capacity change from 0 to 2048 [ 52.905522][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.321'. [ 52.959846][ T4684] netlink: 32 bytes leftover after parsing attributes in process `syz.5.322'. [ 53.044692][ T4691] loop5: detected capacity change from 0 to 512 [ 53.053451][ T4691] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 53.062852][ T4691] EXT4-fs (loop5): orphan cleanup on readonly fs [ 53.072094][ T4691] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.323: invalid indirect mapped block 256 (level 2) [ 53.086826][ T4691] EXT4-fs (loop5): 2 truncates cleaned up [ 53.095937][ T4691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.129807][ T3664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.177862][ T4704] loop5: detected capacity change from 0 to 512 [ 53.188865][ T4704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.195592][ T4704] ext4: Unknown parameter 'nodelalloc2' [ 53.470191][ T4715] syz.5.325: attempt to access beyond end of device [ 53.470191][ T4715] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 53.495019][ T4715] loop5: detected capacity change from 0 to 1024 [ 53.746784][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 53.838911][ T4733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.333'. [ 53.840095][ T4728] loop4: detected capacity change from 0 to 2048 [ 53.945602][ T4728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 54.107759][ T4765] hub 9-0:1.0: USB hub found [ 54.116460][ T4765] hub 9-0:1.0: 8 ports detected [ 54.191417][ T4779] netlink: 32 bytes leftover after parsing attributes in process `syz.3.345'. [ 54.290332][ T4791] loop0: detected capacity change from 0 to 512 [ 54.321149][ T4791] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.347: Failed to acquire dquot type 1 [ 54.333699][ T4791] EXT4-fs (loop0): 1 truncate cleaned up [ 54.339877][ T4791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.355029][ T4791] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.362415][ T4795] loop3: detected capacity change from 0 to 2048 [ 54.367683][ T4769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=4769 comm=syz.5.343 [ 54.430244][ T4791] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.347: deleted inode referenced: 12 [ 54.442457][ T4791] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.347: deleted inode referenced: 12 [ 54.462143][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 54.496707][ T4813] hub 9-0:1.0: USB hub found [ 54.502381][ T4813] hub 9-0:1.0: 8 ports detected [ 54.533300][ T4815] loop3: detected capacity change from 0 to 1024 [ 54.586137][ T4815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.618598][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.643348][ T4823] hub 9-0:1.0: USB hub found [ 54.648125][ T4823] hub 9-0:1.0: 8 ports detected [ 54.661416][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.672062][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.699876][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.712158][ T4830] netlink: 32 bytes leftover after parsing attributes in process `syz.4.357'. [ 54.728593][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.843998][ T4843] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 54.893757][ T4850] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 55.028689][ T4866] tipc: Enabling of bearer rejected, failed to enable media [ 55.037729][ T4864] loop3: detected capacity change from 0 to 2048 [ 55.047654][ T4866] loop5: detected capacity change from 0 to 512 [ 55.055166][ T4866] EXT4-fs: dax option not supported [ 55.071359][ T4864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.109065][ T4871] syzkaller0: entered promiscuous mode [ 55.114654][ T4871] syzkaller0: entered allmulticast mode [ 55.254482][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.484674][ T4909] loop0: detected capacity change from 0 to 512 [ 55.495910][ T4354] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.506059][ T4909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.512755][ T4909] ext4: Unknown parameter 'nodelalloc2' [ 55.524453][ T4354] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.551073][ T4354] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.563026][ T4354] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.630771][ T4914] No such timeout policy "syz1" [ 55.693994][ T3392] IPVS: starting estimator thread 0... [ 55.829091][ T4929] syz.0.385: attempt to access beyond end of device [ 55.829091][ T4929] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 55.854148][ T4929] loop0: detected capacity change from 0 to 1024 [ 55.951046][ T4921] IPVS: using max 1680 ests per chain, 84000 per kthread [ 56.104488][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.249044][ T4942] pimreg: entered allmulticast mode [ 56.326601][ T4950] netlink: 'syz.5.400': attribute type 6 has an invalid length. [ 56.374381][ T4955] FAULT_INJECTION: forcing a failure. [ 56.374381][ T4955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.387510][ T4955] CPU: 0 UID: 0 PID: 4955 Comm: syz.6.403 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 56.387541][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.387555][ T4955] Call Trace: [ 56.387561][ T4955] [ 56.387569][ T4955] __dump_stack+0x1d/0x30 [ 56.387591][ T4955] dump_stack_lvl+0xe8/0x140 [ 56.387611][ T4955] dump_stack+0x15/0x1b [ 56.387625][ T4955] should_fail_ex+0x265/0x280 [ 56.387680][ T4955] should_fail+0xb/0x20 [ 56.387714][ T4955] should_fail_usercopy+0x1a/0x20 [ 56.387736][ T4955] _copy_from_user+0x1c/0xb0 [ 56.387761][ T4955] ___sys_sendmsg+0xc1/0x1d0 [ 56.387876][ T4955] __x64_sys_sendmsg+0xd4/0x160 [ 56.387974][ T4955] x64_sys_call+0x2999/0x2fb0 [ 56.387996][ T4955] do_syscall_64+0xd0/0x1a0 [ 56.388015][ T4955] ? clear_bhb_loop+0x40/0x90 [ 56.388088][ T4955] ? clear_bhb_loop+0x40/0x90 [ 56.388216][ T4955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.388233][ T4955] RIP: 0033:0x7fcd1bc8e969 [ 56.388249][ T4955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.388269][ T4955] RSP: 002b:00007fcd1a2f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.388350][ T4955] RAX: ffffffffffffffda RBX: 00007fcd1beb5fa0 RCX: 00007fcd1bc8e969 [ 56.388365][ T4955] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 56.388382][ T4955] RBP: 00007fcd1a2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.388395][ T4955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.388405][ T4955] R13: 0000000000000000 R14: 00007fcd1beb5fa0 R15: 00007ffc3c3c0b48 [ 56.388429][ T4955] [ 56.610845][ T4964] tipc: Enabling of bearer rejected, failed to enable media [ 56.642536][ T4964] loop0: detected capacity change from 0 to 512 [ 56.671663][ T4964] EXT4-fs: dax option not supported [ 56.678267][ T3392] IPVS: starting estimator thread 0... [ 56.712115][ T29] kauditd_printk_skb: 1083 callbacks suppressed [ 56.712202][ T29] audit: type=1326 audit(1748235684.811:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 56.741769][ T29] audit: type=1326 audit(1748235684.811:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 56.782801][ T4981] loop3: detected capacity change from 0 to 2048 [ 56.789342][ T4973] IPVS: using max 2544 ests per chain, 127200 per kthread [ 56.797762][ T29] audit: type=1326 audit(1748235684.811:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 56.821158][ T29] audit: type=1326 audit(1748235684.811:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 56.844539][ T29] audit: type=1326 audit(1748235684.811:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 56.868026][ T29] audit: type=1326 audit(1748235684.811:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 56.891427][ T29] audit: type=1326 audit(1748235684.811:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 56.914837][ T29] audit: type=1326 audit(1748235684.811:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 56.938200][ T29] audit: type=1326 audit(1748235684.811:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 56.938227][ T29] audit: type=1326 audit(1748235684.861:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x7ffc0000 [ 57.000347][ T4003] loop3: p1 < > p4 [ 57.005723][ T4003] loop3: p4 size 8388608 extends beyond EOD, truncated [ 57.070625][ T4981] loop3: p1 < > p4 [ 57.095589][ T5006] bridge_slave_0: left allmulticast mode [ 57.101295][ T5006] bridge_slave_0: left promiscuous mode [ 57.106983][ T5006] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.117079][ T4981] loop3: p4 size 8388608 extends beyond EOD, truncated [ 57.126249][ T5006] bridge_slave_1: left allmulticast mode [ 57.131934][ T5006] bridge_slave_1: left promiscuous mode [ 57.137737][ T5006] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.183470][ T5006] bond0: (slave bond_slave_0): Releasing backup interface [ 57.197330][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 57.197369][ T4003] udevd[4003]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 57.235000][ T5006] bond0: (slave bond_slave_1): Releasing backup interface [ 57.259105][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 57.270268][ T4003] udevd[4003]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 57.272090][ T5006] team0: Port device team_slave_0 removed [ 57.318032][ T5006] team0: Port device team_slave_1 removed [ 57.330488][ T5006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.337957][ T5006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.350299][ T5006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.357743][ T5006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.443702][ T5040] @: renamed from vlan0 (while UP) [ 57.473869][ T5047] FAULT_INJECTION: forcing a failure. [ 57.473869][ T5047] name failslab, interval 1, probability 0, space 0, times 0 [ 57.486681][ T5047] CPU: 1 UID: 0 PID: 5047 Comm: syz.3.432 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 57.486705][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.486720][ T5047] Call Trace: [ 57.486727][ T5047] [ 57.486736][ T5047] __dump_stack+0x1d/0x30 [ 57.486760][ T5047] dump_stack_lvl+0xe8/0x140 [ 57.486809][ T5047] dump_stack+0x15/0x1b [ 57.486830][ T5047] should_fail_ex+0x265/0x280 [ 57.486871][ T5047] ? __se_sys_mount+0xef/0x2e0 [ 57.486967][ T5047] should_failslab+0x8c/0xb0 [ 57.487006][ T5047] __kmalloc_cache_noprof+0x4c/0x320 [ 57.487034][ T5047] ? memdup_user+0x99/0xd0 [ 57.487058][ T5047] __se_sys_mount+0xef/0x2e0 [ 57.487158][ T5047] ? fput+0x8f/0xc0 [ 57.487182][ T5047] ? ksys_write+0x16e/0x1a0 [ 57.487217][ T5047] __x64_sys_mount+0x67/0x80 [ 57.487251][ T5047] x64_sys_call+0xd36/0x2fb0 [ 57.487277][ T5047] do_syscall_64+0xd0/0x1a0 [ 57.487324][ T5047] ? clear_bhb_loop+0x40/0x90 [ 57.487343][ T5047] ? clear_bhb_loop+0x40/0x90 [ 57.487363][ T5047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.487386][ T5047] RIP: 0033:0x7ff63b0ce969 [ 57.487404][ T5047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.487490][ T5047] RSP: 002b:00007ff639737038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.487514][ T5047] RAX: ffffffffffffffda RBX: 00007ff63b2f5fa0 RCX: 00007ff63b0ce969 [ 57.487529][ T5047] RDX: 00002000000006c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 57.487544][ T5047] RBP: 00007ff639737090 R08: 0000200000000280 R09: 0000000000000000 [ 57.487559][ T5047] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 57.487574][ T5047] R13: 0000000000000000 R14: 00007ff63b2f5fa0 R15: 00007fff67f14e38 [ 57.487652][ T5047] [ 57.705555][ T5060] loop6: detected capacity change from 0 to 512 [ 57.716502][ T5060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.723258][ T5060] ext4: Unknown parameter 'nodelalloc2' [ 57.898447][ T5077] loop0: detected capacity change from 0 to 2048 [ 57.916467][ T5079] SELinux: failed to load policy [ 58.036768][ T5094] loop6: detected capacity change from 0 to 1024 [ 58.174442][ T5099] __nla_validate_parse: 9 callbacks suppressed [ 58.174461][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 58.381157][ T5109] loop4: detected capacity change from 0 to 2048 [ 58.416384][ T5109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.462057][ T5120] netlink: 32 bytes leftover after parsing attributes in process `syz.3.449'. [ 58.518399][ T5127] netlink: 32 bytes leftover after parsing attributes in process `syz.0.451'. [ 58.676514][ T5144] netlink: 32 bytes leftover after parsing attributes in process `syz.6.455'. [ 58.802898][ T5160] loop3: detected capacity change from 0 to 2048 [ 58.911694][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 58.984879][ T5163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=5163 comm=syz.5.458 [ 59.274171][ T5199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=5199 comm=syz.0.467 [ 59.332935][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.443074][ T5236] FAULT_INJECTION: forcing a failure. [ 59.443074][ T5236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.456251][ T5236] CPU: 0 UID: 0 PID: 5236 Comm: syz.4.481 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 59.456287][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.456303][ T5236] Call Trace: [ 59.456365][ T5236] [ 59.456434][ T5236] __dump_stack+0x1d/0x30 [ 59.456466][ T5236] dump_stack_lvl+0xe8/0x140 [ 59.456565][ T5236] dump_stack+0x15/0x1b [ 59.456587][ T5236] should_fail_ex+0x265/0x280 [ 59.456628][ T5236] should_fail+0xb/0x20 [ 59.456666][ T5236] should_fail_usercopy+0x1a/0x20 [ 59.456699][ T5236] _copy_from_user+0x1c/0xb0 [ 59.456762][ T5236] sk_setsockopt+0x1f5/0x1eb0 [ 59.456843][ T5236] ? selinux_socket_setsockopt+0x1ad/0x1e0 [ 59.456883][ T5236] sock_setsockopt+0x40/0x50 [ 59.456927][ T5236] __sys_setsockopt+0x13a/0x200 [ 59.456955][ T5236] __x64_sys_setsockopt+0x64/0x80 [ 59.457046][ T5236] x64_sys_call+0x2bd5/0x2fb0 [ 59.457075][ T5236] do_syscall_64+0xd0/0x1a0 [ 59.457174][ T5236] ? clear_bhb_loop+0x40/0x90 [ 59.457275][ T5236] ? clear_bhb_loop+0x40/0x90 [ 59.457304][ T5236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.457331][ T5236] RIP: 0033:0x7f7ca2ace969 [ 59.457355][ T5236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.457378][ T5236] RSP: 002b:00007f7ca1137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.457472][ T5236] RAX: ffffffffffffffda RBX: 00007f7ca2cf5fa0 RCX: 00007f7ca2ace969 [ 59.457488][ T5236] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000006 [ 59.457504][ T5236] RBP: 00007f7ca1137090 R08: 0000000000000010 R09: 0000000000000000 [ 59.457592][ T5236] R10: 00002000000a2000 R11: 0000000000000246 R12: 0000000000000001 [ 59.457607][ T5236] R13: 0000000000000000 R14: 00007f7ca2cf5fa0 R15: 00007ffc17efc518 [ 59.457660][ T5236] [ 59.785788][ T5261] loop6: detected capacity change from 0 to 128 [ 59.795804][ T5261] /dev/loop6: Can't open blockdev [ 59.902226][ T5276] Cannot find del_set index 0 as target [ 59.925927][ T5279] 9pnet_fd: Insufficient options for proto=fd [ 60.050060][ T5290] tipc: Started in network mode [ 60.055144][ T5290] tipc: Node identity 0a12646dd4cb, cluster identity 4711 [ 60.062462][ T5290] tipc: Enabled bearer , priority 0 [ 60.077097][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'. [ 60.079891][ T5298] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 60.085947][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'. [ 60.107988][ T5290] loop5: detected capacity change from 0 to 512 [ 60.109851][ T5298] SELinux: failed to load policy [ 60.121679][ T5290] EXT4-fs: dax option not supported [ 60.121781][ T5297] loop0: detected capacity change from 0 to 256 [ 60.140301][ T5287] tipc: Disabling bearer [ 60.146487][ T5297] msdos: Unknown parameter ' [ 60.146487][ T5297] iscard' [ 60.335683][ T5292] SELinux: failed to load policy [ 60.564625][ T5309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=5309 comm=syz.4.506 [ 60.596551][ T5325] loop5: detected capacity change from 0 to 2048 [ 60.748541][ T5334] syz.5.512 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 60.800463][ T5335] netlink: 3 bytes leftover after parsing attributes in process `syz.6.515'. [ 60.824767][ T5335] 0ªX¹¦À: renamed from caif0 [ 60.841713][ T5335] 0ªX¹¦À: entered allmulticast mode [ 60.847007][ T5335] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 61.211247][ T5365] loop4: detected capacity change from 0 to 512 [ 61.218289][ T5365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.225027][ T5365] ext4: Unknown parameter 'nodelalloc2' [ 61.373052][ T5367] loop5: detected capacity change from 0 to 128 [ 61.542184][ T5374] syz.4.516: attempt to access beyond end of device [ 61.542184][ T5374] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 61.566676][ T5374] loop4: detected capacity change from 0 to 1024 [ 61.872444][ T29] kauditd_printk_skb: 460 callbacks suppressed [ 61.872457][ T29] audit: type=1400 audit(1748235689.971:3789): avc: denied { tracepoint } for pid=5380 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.904875][ T29] audit: type=1400 audit(1748235690.001:3790): avc: denied { cpu } for pid=5380 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.961368][ T5381] vlan0: entered allmulticast mode [ 61.966504][ T5381] bridge_slave_0: entered allmulticast mode [ 61.972891][ T29] audit: type=1400 audit(1748235690.051:3791): avc: denied { bind } for pid=5380 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.992159][ T29] audit: type=1400 audit(1748235690.051:3792): avc: denied { name_bind } for pid=5380 comm="syz.0.521" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 62.014062][ T29] audit: type=1400 audit(1748235690.051:3793): avc: denied { node_bind } for pid=5380 comm="syz.0.521" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 62.035771][ T29] audit: type=1400 audit(1748235690.051:3794): avc: denied { write } for pid=5380 comm="syz.0.521" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.057009][ T29] audit: type=1400 audit(1748235690.051:3795): avc: denied { name_connect } for pid=5380 comm="syz.0.521" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 62.079040][ T29] audit: type=1400 audit(1748235690.051:3796): avc: denied { ioctl } for pid=5380 comm="syz.0.521" path="socket:[10837]" dev="sockfs" ino=10837 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.174096][ T29] audit: type=1326 audit(1748235690.271:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5387 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca2ace969 code=0x7ffc0000 [ 62.197462][ T29] audit: type=1326 audit(1748235690.271:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5387 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca2ace969 code=0x7ffc0000 [ 62.411845][ T5325] syz.5.512 (5325) used greatest stack depth: 7000 bytes left [ 62.487724][ T5414] tipc: Started in network mode [ 62.492686][ T5414] tipc: Node identity b2d1eb9e05f, cluster identity 4711 [ 62.499806][ T5414] tipc: Enabled bearer , priority 0 [ 62.520787][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.536'. [ 62.529672][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.536'. [ 62.558949][ T5414] loop6: detected capacity change from 0 to 512 [ 62.586657][ T5414] EXT4-fs: dax option not supported [ 62.600657][ T5414] syzkaller0: MTU too low for tipc bearer [ 62.606404][ T5414] tipc: Disabling bearer [ 62.695908][ T5422] loop0: detected capacity change from 0 to 2048 [ 62.721198][ T5425] tipc: Started in network mode [ 62.726092][ T5425] tipc: Node identity 560de8d28ace, cluster identity 4711 [ 62.733369][ T5425] tipc: Enabled bearer , priority 0 [ 62.747611][ T5425] loop4: detected capacity change from 0 to 512 [ 62.757159][ T5425] EXT4-fs: dax option not supported [ 62.789725][ T5425] syzkaller0: MTU too low for tipc bearer [ 62.795556][ T5425] tipc: Disabling bearer [ 62.947542][ T5458] tipc: Enabled bearer , priority 0 [ 62.964534][ T5458] loop6: detected capacity change from 0 to 512 [ 62.976775][ T5458] EXT4-fs: dax option not supported [ 62.992083][ T5458] syzkaller0: MTU too low for tipc bearer [ 62.997841][ T5458] tipc: Disabling bearer [ 63.103740][ T5470] capability: warning: `syz.0.557' uses deprecated v2 capabilities in a way that may be insecure [ 63.122309][ T5447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=5447 comm=syz.5.547 [ 63.153970][ T5473] serio: Serial port ptm0 [ 63.177034][ T5470] SELinux: syz.0.557 (5470) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 63.221735][ T5484] tmpfs: Unknown parameter 'defcontextC' [ 63.640136][ T5496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=5496 comm=syz.3.567 [ 63.753011][ T5501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=5501 comm=syz.0.569 [ 63.899074][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.907778][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.922064][ T5507] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 64.110835][ T5517] tipc: Enabled bearer , priority 0 [ 64.118163][ T5517] __nla_validate_parse: 5 callbacks suppressed [ 64.118219][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 64.133238][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 64.150518][ T5517] loop4: detected capacity change from 0 to 512 [ 64.178402][ T5517] EXT4-fs: dax option not supported [ 64.213691][ T5517] syzkaller0: MTU too low for tipc bearer [ 64.219475][ T5517] tipc: Disabling bearer [ 64.310852][ T5533] netem: change failed [ 64.329108][ T5533] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8755 sclass=netlink_xfrm_socket pid=5533 comm=syz.0.582 [ 64.348681][ T5533] loop0: detected capacity change from 0 to 512 [ 64.365419][ T5535] FAULT_INJECTION: forcing a failure. [ 64.365419][ T5535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.378545][ T5535] CPU: 1 UID: 0 PID: 5535 Comm: syz.4.583 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 64.378590][ T5535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.378603][ T5535] Call Trace: [ 64.378610][ T5535] [ 64.378617][ T5535] __dump_stack+0x1d/0x30 [ 64.378640][ T5535] dump_stack_lvl+0xe8/0x140 [ 64.378662][ T5535] dump_stack+0x15/0x1b [ 64.378682][ T5535] should_fail_ex+0x265/0x280 [ 64.378736][ T5535] should_fail+0xb/0x20 [ 64.378841][ T5535] should_fail_usercopy+0x1a/0x20 [ 64.378888][ T5535] _copy_from_user+0x1c/0xb0 [ 64.378914][ T5535] ___sys_sendmsg+0xc1/0x1d0 [ 64.378954][ T5535] __x64_sys_sendmsg+0xd4/0x160 [ 64.379060][ T5535] x64_sys_call+0x2999/0x2fb0 [ 64.379135][ T5535] do_syscall_64+0xd0/0x1a0 [ 64.379155][ T5535] ? clear_bhb_loop+0x40/0x90 [ 64.379177][ T5535] ? clear_bhb_loop+0x40/0x90 [ 64.379269][ T5535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.379288][ T5535] RIP: 0033:0x7f7ca2ace969 [ 64.379300][ T5535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.379380][ T5535] RSP: 002b:00007f7ca1137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.379395][ T5535] RAX: ffffffffffffffda RBX: 00007f7ca2cf5fa0 RCX: 00007f7ca2ace969 [ 64.379406][ T5535] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 64.379418][ T5535] RBP: 00007f7ca1137090 R08: 0000000000000000 R09: 0000000000000000 [ 64.379431][ T5535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.379443][ T5535] R13: 0000000000000000 R14: 00007f7ca2cf5fa0 R15: 00007ffc17efc518 [ 64.379497][ T5535] [ 64.551156][ T5526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=5526 comm=syz.6.580 [ 64.589599][ T5533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.612320][ T5533] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.657581][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.883879][ T5580] loop3: detected capacity change from 0 to 512 [ 64.892703][ T5580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.899489][ T5580] ext4: Unknown parameter 'nodelalloc2' [ 64.913671][ T5573] loop5: detected capacity change from 0 to 512 [ 64.939475][ T5573] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.952514][ T5573] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.013503][ T5573] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 65.022014][ T5573] EXT4-fs (loop5): orphan cleanup on readonly fs [ 65.028471][ T5573] EXT4-fs (loop5): 1 truncate cleaned up [ 65.034744][ T5573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 65.035716][ T5591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.602'. [ 65.064387][ T5591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5591 comm=syz.4.602 [ 65.188314][ T5594] loop3: detected capacity change from 0 to 1024 [ 65.516604][ T5603] loop0: detected capacity change from 0 to 256 [ 65.524426][ T5603] vfat: Unknown parameter 'cpuset.effective_cpus' [ 65.646841][ T5613] loop4: detected capacity change from 0 to 512 [ 65.654033][ T3664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.685385][ T5613] EXT4-fs (loop4): too many log groups per flexible block group [ 65.693109][ T5613] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 65.701371][ T5613] EXT4-fs (loop4): mount failed [ 65.820166][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 65.828991][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 65.837894][ T5613] netlink: 'syz.4.610': attribute type 12 has an invalid length. [ 65.938895][ T5624] loop5: detected capacity change from 0 to 512 [ 65.955151][ T5624] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.968383][ T5636] loop6: detected capacity change from 0 to 512 [ 65.977824][ T5624] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 65.991066][ T5624] EXT4-fs (loop5): orphan cleanup on readonly fs [ 65.997567][ T5636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.997714][ T5624] EXT4-fs (loop5): 1 truncate cleaned up [ 66.012190][ T5624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 66.036670][ T5636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.049617][ T5645] loop4: detected capacity change from 0 to 512 [ 66.050571][ T5636] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.071015][ T5645] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 66.080395][ T5645] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 66.096392][ T5645] EXT4-fs (loop4): 1 truncate cleaned up [ 66.096805][ T3976] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.105073][ T5645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.125042][ T5629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=5629 comm=syz.3.614 [ 66.166736][ T5648] loop6: detected capacity change from 0 to 512 [ 66.176738][ T5648] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.212565][ T5648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.225468][ T5648] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.252374][ T3976] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.455523][ T5660] veth1_to_bond: entered promiscuous mode [ 66.462283][ T5660] netlink: 28 bytes leftover after parsing attributes in process `syz.6.622'. [ 66.478131][ T5660] veth1_to_bond (unregistering): left promiscuous mode [ 66.488120][ T5660] bond0: (slave bond_slave_1): Releasing backup interface [ 66.679927][ T3664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.878591][ T5670] process 'syz.3.626' launched './file1' with NULL argv: empty string added [ 66.887396][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 66.887408][ T29] audit: type=1400 audit(1748235694.971:4233): avc: denied { execute } for pid=5667 comm="syz.3.626" name="file1" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.920465][ T29] audit: type=1400 audit(1748235695.011:4234): avc: denied { execute_no_trans } for pid=5667 comm="syz.3.626" path="/127/file1" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.946386][ T5671] loop0: detected capacity change from 0 to 128 [ 66.953128][ T5671] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.966356][ T5671] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.976376][ T5670] SELinux: Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped). [ 66.987772][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.988257][ T29] audit: type=1400 audit(1748235695.081:4235): avc: denied { relabelto } for pid=5667 comm="syz.3.626" name="syz3" dev="cgroup2" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0" [ 67.023420][ T29] audit: type=1400 audit(1748235695.081:4236): avc: denied { associate } for pid=5667 comm="syz.3.626" name="syz3" dev="cgroup2" ino=119 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:kmsg_device_t:s0" [ 67.092464][ T5678] loop5: detected capacity change from 0 to 512 [ 67.105851][ T29] audit: type=1400 audit(1748235695.171:4237): avc: denied { lock } for pid=5677 comm="syz.5.630" path="socket:[11677]" dev="sockfs" ino=11677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 67.115906][ T5678] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.129744][ T1693] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.145738][ T5678] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.173764][ T5687] random: crng reseeded on system resumption [ 67.240928][ T5678] EXT4-fs (loop5): 1 truncate cleaned up [ 67.246647][ T29] audit: type=1326 audit(1748235695.341:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.3.634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63b0ce969 code=0x0 [ 67.270066][ T5678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.292230][ T29] audit: type=1400 audit(1748235695.391:4239): avc: denied { name_connect } for pid=5690 comm=04 dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 67.385045][ T29] audit: type=1326 audit(1748235695.481:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1bc8e969 code=0x7ffc0000 [ 67.410139][ T29] audit: type=1326 audit(1748235695.481:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd1bc8e969 code=0x7ffc0000 [ 67.433759][ T29] audit: type=1326 audit(1748235695.481:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.6.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1bc8e969 code=0x7ffc0000 [ 67.458778][ T5685] FAULT_INJECTION: forcing a failure. [ 67.458778][ T5685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.472016][ T5685] CPU: 0 UID: 0 PID: 5685 Comm: syz.0.633 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) [ 67.472121][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.472135][ T5685] Call Trace: [ 67.472142][ T5685] [ 67.472150][ T5685] __dump_stack+0x1d/0x30 [ 67.472173][ T5685] dump_stack_lvl+0xe8/0x140 [ 67.472195][ T5685] dump_stack+0x15/0x1b [ 67.472213][ T5685] should_fail_ex+0x265/0x280 [ 67.472258][ T5685] should_fail+0xb/0x20 [ 67.472290][ T5685] should_fail_usercopy+0x1a/0x20 [ 67.472310][ T5685] strncpy_from_user+0x25/0x230 [ 67.472337][ T5685] ? kmem_cache_alloc_noprof+0x186/0x310 [ 67.472364][ T5685] ? getname_flags+0x80/0x3b0 [ 67.472401][ T5685] getname_flags+0xae/0x3b0 [ 67.472466][ T5685] getname_uflags+0x21/0x30 [ 67.472500][ T5685] __x64_sys_execveat+0x5d/0x90 [ 67.472530][ T5685] x64_sys_call+0x2dae/0x2fb0 [ 67.472550][ T5685] do_syscall_64+0xd0/0x1a0 [ 67.472618][ T5685] ? clear_bhb_loop+0x40/0x90 [ 67.472689][ T5685] ? clear_bhb_loop+0x40/0x90 [ 67.472715][ T5685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.472737][ T5685] RIP: 0033:0x7fd6e9cae969 [ 67.472752][ T5685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.472832][ T5685] RSP: 002b:00007fd6e8317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 67.472849][ T5685] RAX: ffffffffffffffda RBX: 00007fd6e9ed5fa0 RCX: 00007fd6e9cae969 [ 67.472860][ T5685] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 67.472913][ T5685] RBP: 00007fd6e8317090 R08: 0000000000000000 R09: 0000000000000000 [ 67.472927][ T5685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.472938][ T5685] R13: 0000000000000000 R14: 00007fd6e9ed5fa0 R15: 00007ffd380e5ae8 [ 67.472956][ T5685] [ 67.664568][ T5698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=5698 comm=syz.6.637 [ 67.699097][ T5704] loop3: detected capacity change from 0 to 2048 [ 67.731110][ T5708] hub 9-0:1.0: USB hub found [ 67.744553][ T5708] hub 9-0:1.0: 8 ports detected [ 67.753942][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 67.895465][ T5728] loop0: detected capacity change from 0 to 1024 [ 67.902241][ T5728] EXT4-fs: inline encryption not supported [ 67.919568][ T3664] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /84/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 67.959594][ T5728] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.978164][ T3664] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 67.998791][ T3664] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /84/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 68.008143][ T5728] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.040317][ T3664] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 68.080861][ T3664] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /84/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 68.081047][ T5734] capability: warning: `syz.4.651' uses 32-bit capabilities (legacy support in use) [ 68.107671][ T3664] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 68.141075][ T5728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000] [ 68.181351][ T3664] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /84/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 68.209400][ T3664] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 68.239562][ T3664] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /84/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 68.262204][ T3664] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 68.265298][ T5728] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.646: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.359872][ T5741] loop6: detected capacity change from 0 to 2048 [ 68.368877][ T5728] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.646: Invalid inode bitmap blk 0 in block_group 0 [ 68.382194][ T5728] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 68.408507][ T5728] EXT4-fs (loop0): 1 orphan inode deleted [ 68.424820][ T5728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.443965][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.654'. [ 68.685510][ T5701] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.763543][ T1693] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.801941][ T1693] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.820363][ T5772] loop6: detected capacity change from 0 to 2048 [ 68.840963][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.871983][ T1693] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.921975][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.670'. [ 68.961793][ T1693] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.088643][ T1693] bridge_slave_1: left allmulticast mode [ 69.094447][ T1693] bridge_slave_1: left promiscuous mode [ 69.100269][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.111827][ T1693] bridge_slave_0: left allmulticast mode [ 69.114056][ T5815] loop0: detected capacity change from 0 to 512 [ 69.117469][ T1693] bridge_slave_0: left promiscuous mode [ 69.117655][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.161207][ T5815] EXT4-fs (loop0): too many log groups per flexible block group [ 69.168917][ T5815] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 69.184651][ T5815] EXT4-fs (loop0): mount failed [ 69.252566][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.685'. [ 69.264386][ T1693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.274235][ T1693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.283884][ T1693] bond0 (unregistering): Released all slaves [ 69.323705][ T5829] loop0: detected capacity change from 0 to 2048 [ 69.335000][ T1693] tipc: Left network mode [ 69.341636][ T1693] IPVS: stopping master sync thread 5507 ... [ 69.353966][ T1693] hsr_slave_0: left promiscuous mode [ 69.360853][ T1693] hsr_slave_1: left promiscuous mode [ 69.366503][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.374096][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.384749][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.392264][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.402596][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 69.402645][ T1693] veth1_vlan: left promiscuous mode [ 69.416668][ T1693] veth0_vlan: left promiscuous mode [ 69.467093][ T1693] team0 (unregistering): Port device team_slave_1 removed [ 69.476475][ T1693] team0 (unregistering): Port device team_slave_0 removed [ 69.565708][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 69.615879][ T5850] loop0: detected capacity change from 0 to 256 [ 69.627979][ T5850] FAT-fs (loop0): bogus number of FAT sectors [ 69.634172][ T5850] FAT-fs (loop0): Can't find a valid FAT filesystem [ 69.671994][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.679074][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.717295][ T5774] bridge_slave_0: entered allmulticast mode [ 69.723801][ T5774] bridge_slave_0: entered promiscuous mode [ 69.730700][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.737744][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.744924][ T5774] bridge_slave_1: entered allmulticast mode [ 69.765589][ T5774] bridge_slave_1: entered promiscuous mode [ 69.809790][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.826480][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.897175][ T5868] loop4: detected capacity change from 0 to 2048 [ 69.905457][ T5774] team0: Port device team_slave_0 added [ 69.921381][ T5774] team0: Port device team_slave_1 added [ 69.921543][ T1693] IPVS: stop unused estimator thread 0... [ 69.948816][ T5869] loop6: detected capacity change from 0 to 2048 [ 69.956220][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.963215][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.989201][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.001677][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.008646][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.034765][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.035841][ T5869] loop6: p1 < > p3 [ 70.054828][ T5869] loop6: p3 size 134217728 extends beyond EOD, truncated [ 70.087742][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 70.146102][ T5880] loop4: detected capacity change from 0 to 512 [ 70.160793][ T5774] hsr_slave_0: entered promiscuous mode [ 70.166404][ T5880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.166464][ T5880] ext4: Unknown parameter 'nodelalloc2' [ 70.176756][ T5774] hsr_slave_1: entered promiscuous mode [ 70.285309][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.292972][ T5774] Cannot create hsr debugfs directory [ 70.371357][ T5883] syz.4.704: attempt to access beyond end of device [ 70.371357][ T5883] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 70.376147][ T5774] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 70.395804][ T5883] loop4: detected capacity change from 0 to 1024 [ 70.406145][ T5774] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 70.415347][ T5774] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 70.428126][ T5774] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 70.447462][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.454518][ T5774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.461874][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.468940][ T5774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.497840][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.510555][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.518361][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.530242][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.539648][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.546716][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.558042][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.565170][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.648834][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.672780][ T5898] loop6: detected capacity change from 0 to 512 [ 70.691463][ T5898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.705808][ T5898] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.728576][ T3976] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.776038][ T5774] veth0_vlan: entered promiscuous mode [ 70.783990][ T5774] veth1_vlan: entered promiscuous mode [ 70.800865][ T5774] veth0_macvtap: entered promiscuous mode [ 70.807865][ T5774] veth1_macvtap: entered promiscuous mode [ 70.821207][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.822070][ T5914] netlink: 'syz.6.709': attribute type 10 has an invalid length. [ 70.838044][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.851629][ T5914] team0 (unregistering): Port device team_slave_0 removed [ 70.860798][ T5914] team0 (unregistering): Port device team_slave_1 removed [ 70.872388][ T5774] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.881184][ T5774] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.889938][ T5774] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.898648][ T5774] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.045772][ T5921] veth1_to_bond: entered promiscuous mode [ 71.051973][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.712'. [ 71.054735][ T5923] loop7: detected capacity change from 0 to 128 [ 71.068021][ T5921] veth1_to_bond (unregistering): left promiscuous mode [ 71.077925][ T5921] : (slave bond_slave_1): Releasing backup interface [ 71.122569][ T5926] loop7: detected capacity change from 0 to 2048 [ 71.166150][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.7.713'. [ 71.227477][ T5930] SELinux: failed to load policy [ 71.262330][ T5930] usb usb8: usbfs: process 5930 (syz.0.715) did not claim interface 0 before use [ 71.584225][ T5910] ================================================================== [ 71.592319][ T5910] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 71.600032][ T5910] [ 71.602344][ T5910] write to 0xffff88810b94f798 of 8 bytes by task 5912 on cpu 1: [ 71.609956][ T5910] fasync_remove_entry+0xcc/0x120 [ 71.614976][ T5910] fasync_helper+0x97/0xc0 [ 71.619386][ T5910] sock_fasync+0x58/0xc0 [ 71.623622][ T5910] __fput+0x5e6/0x650 [ 71.627599][ T5910] ____fput+0x1c/0x30 [ 71.631567][ T5910] task_work_run+0x12e/0x1a0 [ 71.636150][ T5910] resume_user_mode_work+0x6a/0x70 [ 71.641269][ T5910] syscall_exit_to_user_mode+0x77/0xb0 [ 71.646726][ T5910] do_syscall_64+0xdd/0x1a0 [ 71.651230][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.657123][ T5910] [ 71.659438][ T5910] read to 0xffff88810b94f798 of 8 bytes by task 5910 on cpu 0: [ 71.666976][ T5910] sock_wake_async+0x29/0x110 [ 71.671658][ T5910] unix_write_space+0x13b/0x140 [ 71.676508][ T5910] sock_wfree+0x14b/0x3c0 [ 71.680833][ T5910] unix_destruct_scm+0xc3/0xf0 [ 71.685594][ T5910] skb_release_head_state+0xb7/0x1a0 [ 71.690871][ T5910] __kfree_skb+0x18/0x150 [ 71.695203][ T5910] sk_skb_reason_drop+0xbd/0x270 [ 71.700139][ T5910] unix_release_sock+0x5d3/0x720 [ 71.705080][ T5910] unix_release+0x58/0x80 [ 71.709413][ T5910] sock_close+0x68/0x150 [ 71.713657][ T5910] __fput+0x298/0x650 [ 71.717637][ T5910] ____fput+0x1c/0x30 [ 71.721616][ T5910] task_work_run+0x12e/0x1a0 [ 71.726207][ T5910] resume_user_mode_work+0x6a/0x70 [ 71.731315][ T5910] syscall_exit_to_user_mode+0x77/0xb0 [ 71.736770][ T5910] do_syscall_64+0xdd/0x1a0 [ 71.741273][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.747167][ T5910] [ 71.749483][ T5910] value changed: 0xffff888117283c30 -> 0x0000000000000000 [ 71.756581][ T5910] [ 71.758913][ T5910] Reported by Kernel Concurrency Sanitizer on: [ 71.765062][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: syz.6.709 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 71.777388][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.787439][ T5910] ================================================================== [ 72.222549][ T51] dummy0: left allmulticast mode [ 72.227669][ T51] bridge0: port 3(dummy0) entered disabled state [ 72.234627][ T51] bridge_slave_1: left allmulticast mode [ 72.240375][ T51] bridge_slave_1: left promiscuous mode [ 72.246021][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.253830][ T51] bridge_slave_0: left allmulticast mode [ 72.259505][ T51] bridge_slave_0: left promiscuous mode [ 72.265139][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.311114][ T51]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.319802][ T51]  (unregistering): Released all slaves [ 72.380520][ T51] tipc: Left network mode [ 72.385857][ T51] hsr_slave_0: left promiscuous mode [ 72.391483][ T51] hsr_slave_1: left promiscuous mode [ 72.397003][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.404514][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.424302][ T51] team0 (unregistering): Port device team_slave_1 removed [ 72.433866][ T51] team0 (unregistering): Port device team_slave_0 removed [ 72.705179][ T51] IPVS: stop unused estimator thread 0... [ 72.751578][ T51] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.800784][ T51] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.850588][ T51] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.892326][ T51] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.991225][ T51] bridge_slave_1: left allmulticast mode [ 72.996855][ T51] bridge_slave_1: left promiscuous mode [ 73.002564][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.010225][ T51] bridge_slave_0: left allmulticast mode [ 73.015860][ T51] bridge_slave_0: left promiscuous mode [ 73.021583][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.111707][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.121005][ T51] bond0 (unregistering): Released all slaves [ 73.200572][ T51] tipc: Left network mode [ 73.206620][ T51] hsr_slave_0: left promiscuous mode [ 73.212152][ T51] hsr_slave_1: left promiscuous mode [ 73.217728][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.225262][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.232994][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.240522][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.250320][ T51] veth1_vlan: left promiscuous mode [ 73.255656][ T51] veth0_vlan: left promiscuous mode [ 73.603915][ T51] IPVS: stop unused estimator thread 0... [ 74.632966][ T51] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.681695][ T51] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.741413][ T51] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.791516][ T51] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.842608][ T51] bridge_slave_1: left allmulticast mode [ 74.848308][ T51] bridge_slave_1: left promiscuous mode [ 74.854018][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.861693][ T51] bridge_slave_0: left allmulticast mode [ 74.867323][ T51] bridge_slave_0: left promiscuous mode [ 74.872939][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.941444][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.950957][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.960491][ T51] bond0 (unregistering): Released all slaves [ 75.002027][ T51] hsr_slave_0: left promiscuous mode [ 75.007566][ T51] hsr_slave_1: left promiscuous mode [ 75.013121][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.020567][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.027931][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.035330][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.045439][ T51] veth1_vlan: left promiscuous mode [ 75.050690][ T51] veth0_vlan: left promiscuous mode [ 75.101073][ T51] team0 (unregistering): Port device team_slave_1 removed [ 75.112191][ T51] team0 (unregistering): Port device team_slave_0 removed