last executing test programs: 10m40.057549647s ago: executing program 32 (id=3245): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x1694, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000500000018"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a01020000000000000000010000000900010073797a30000800000900020073797a300000000008000740000000014000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001006261746164763000000000000000"], 0xbc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() 10m29.793536592s ago: executing program 33 (id=3411): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r0}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x937, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0xb334134013ad792e, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000180)=""/3) 10m29.100025879s ago: executing program 3 (id=3426): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x40, 0x7, 0x2, 0x0, 0x0, 0x20000}, 0x10}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r7) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7408e04d973d66642c726a646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r12, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) write$nci(r9, &(0x7f00000007c0)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x1, 0x1}, 0x4) r13 = socket$netlink(0x10, 0x3, 0x0) io_cancel(0x0, 0x0, 0x0) sendmsg$netlink(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002d000100fcffffffef0226da08000000", @ANYRES32], 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) 10m28.982661919s ago: executing program 34 (id=3427): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x40, 0x7, 0x2, 0x0, 0x0, 0x20000}, 0x10}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r7) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7408e04d973d66642c726a646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r11, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) write$nci(r8, &(0x7f00000007c0)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x1, 0x1}, 0x4) r12 = socket$netlink(0x10, 0x3, 0x0) io_cancel(0x0, 0x0, 0x0) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002d000100fcffffffef0226da08000000", @ANYRES32], 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) 10m27.213177923s ago: executing program 2 (id=3434): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x41000000, r2}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000029c0)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0xf0, 0x0, 0xffffffff, 0x0, 0x210, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, &(0x7f0000000380), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x401, {0x8}}}}, {{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0xff, 0xff000000], [0xff000000, 0x7fffff00, 0xff, 0xffffff00], 'ip6gretap0\x00', 'team0\x00', {}, {0x7b0e694f88c9095a}, 0x62, 0x9, 0x2, 0x4}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x7f, 0x7], 0x101, 0x20}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@local, @ipv6=@private0, @port=0x4e20, @port=0x4e21}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'caif0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x0, 0x4, 0x4, 0x28}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x2, 0x0, [0xea3, 0xf55, 0x1ff, 0x800, 0x70e, 0x9, 0x8001, 0x401, 0x80, 0xeb, 0xa0d5, 0x1, 0x0, 0x1, 0x80, 0x5], 0x10}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv4=@private=0xa010101, @ipv6=@empty, @port=0x4e20, @port=0x4e23}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffff00], 'wlan0\x00', 'caif0\x00', {}, {0xff}, 0x89, 0x0, 0x7, 0x48}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x2eb8, 0x2, 0x1, [0xfff9, 0x3, 0x6, 0x5, 0x6, 0x8, 0x0, 0x1, 0x7, 0x1, 0x8408, 0x7, 0x2, 0xfff, 0xffff, 0x9], 0x9}}, @common=@ipv6header={{0x28}, {0x7, 0xc4, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv4=@remote, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}, @gre_key=0x3ff, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x7f, 0x4, 0x7, 0x2, 0xa3eb, 0x8, 0x40d}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r3, 0x5421, &(0x7f0000000480)=0x7) accept4(r7, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x6d, &(0x7f0000000600)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000640)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x11, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000500"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r6}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) 10m27.117481473s ago: executing program 2 (id=3435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pB \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 10m27.097600883s ago: executing program 2 (id=3436): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xbe0}, 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 10m26.859604342s ago: executing program 2 (id=3437): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 10m26.829303702s ago: executing program 2 (id=3438): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc88c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x2000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 10m26.669861041s ago: executing program 3 (id=3440): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xbe0}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 10m26.479069071s ago: executing program 3 (id=3441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r4, 0xffffffffffffffff, {}, 0xfe}, 0x18) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x3, {0x1, 0xf0, 0x2}, 0x2}, 0x18) 10m26.47842347s ago: executing program 6 (id=3412): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYBLOB="00000600003b48c26097aa5558a470c30c99ec96bfb797b55d3c5cdc10698e0000001c000216f371fa0e566f996f9e36c6c98d165bc4a91420f5c44ee1ce4e58c364fe56d43cf619e908a4c2def44f3493803836ff447b6f67181920ce69ba62dce90687ebd98e1d17395221c6c9ddfa07d8b66680c311a6dee15201dd1ed6c7fb9b23dcd2094b1bae4649da96a8377c6ceec8f2fb102cb0b0fcf1f3eec88810ba59ecb88d08dc5e6e9e013ece148e4caa704d6b8f58437f3c24e303"], 0x3c}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m26.40830238s ago: executing program 3 (id=3443): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x620101) fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x1, &(0x7f0000000a80)={0x0, 0x6, 0x2}, &(0x7f0000000ac0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000b00)={{0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26) 10m26.40771145s ago: executing program 6 (id=3444): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x620101) fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x1, &(0x7f0000000a80)={0x0, 0x6, 0x2}, &(0x7f0000000ac0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000b00)={{0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 10m26.35794799s ago: executing program 2 (id=3445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x100000000000000}, 0x20040054) 10m26.34287689s ago: executing program 35 (id=3445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x100000000000000}, 0x20040054) 10m26.33669236s ago: executing program 3 (id=3447): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100100, 0x100, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbb007864010100ac1414aa000000001a00007800d8621b002c17a900000000000000000000000000000000000000000000c02a57e81a5aa72806aa6f3a7783201a8abd992eacc57d474088129ba76449a62d0dffff81c4e0de70cf878afde551c3b022737e2fcf99b0ae3b2d51f7e73d49105748b794a66d9cf6306d295deb274db0fe0b11191a8ff9e651f688830ed5e70ab058dc51ac79accbea8609bd10d7fe713f566e50a1081143c3dc1c5bf6095e9285ed8839170060014901ac962d6175ad8701d75e4257"], 0x0) set_mempolicy(0x3, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="79630000000000000055000004000000"], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000004b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x9, 0xaa, 0xfffff004}, {0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="060000000400000500"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1600000000000000040000000300000000000000f5334a083a8a1fc51ed555a3e2e7065eac0f232babc7fc674e10bf78f217ddf5858e77c4d3c0a8bd368f0bde1ddc23fafcb49d1ab303fab302186768bab00200cbcf2f1bca8e60cae5ffe5a0e68c", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000002a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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", @ANYRES32, @ANYRES64], 0x8, 0x302, &(0x7f0000000c00)="$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") 10m26.30533635s ago: executing program 6 (id=3448): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x40, 0x7, 0x2, 0x0, 0x0, 0x20000}, 0x10}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r7) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7408e04d973d66642c726a646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r12, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) write$nci(r9, &(0x7f00000007c0)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x1, 0x1}, 0x4) r13 = socket$netlink(0x10, 0x3, 0x0) io_cancel(0x0, 0x0, 0x0) sendmsg$netlink(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002d000100fcffffffef0226da08000000", @ANYRES32], 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) 10m25.985905079s ago: executing program 3 (id=3450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r4, 0xffffffffffffffff, {}, 0xfe}, 0x18) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x3, {0x1, 0xf0, 0x2}, 0x2}, 0x18) 10m25.985683389s ago: executing program 36 (id=3450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r4, 0xffffffffffffffff, {}, 0xfe}, 0x18) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x3, {0x1, 0xf0, 0x2}, 0x2}, 0x18) 10m25.139443806s ago: executing program 6 (id=3458): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0xa10809, &(0x7f0000000040), 0xfe, 0x504, &(0x7f0000000a40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="19002000", @ANYRES16=r2, @ANYBLOB="010000000000000000000d000000"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 10m25.139217946s ago: executing program 37 (id=3458): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0xa10809, &(0x7f0000000040), 0xfe, 0x504, &(0x7f0000000a40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="19002000", @ANYRES16=r2, @ANYBLOB="010000000000000000000d000000"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 5m57.688131358s ago: executing program 7 (id=8176): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1, 0x3}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x3abe, 0x0, 0xffffffffffffffff, 0x300, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @local}, 0x1c, 0x0}, 0x84) 5m57.657488308s ago: executing program 7 (id=8177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='kfree\x00', r3, 0x0, 0x400000006}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 5m57.417495717s ago: executing program 7 (id=8181): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5m57.349649516s ago: executing program 7 (id=8183): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x48000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@delalloc}, {@nodioread_nolock}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f0000000900)="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", 0x45c) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000803f0000000000000000007000009"], 0x14}, 0x1, 0x0, 0x0, 0x9000}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) 5m57.157938176s ago: executing program 7 (id=8189): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) creat(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200410, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5m56.819679535s ago: executing program 7 (id=8195): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$vcsa(&(0x7f00000055c0), 0xb, 0x120700) readv(r1, &(0x7f00000059c0)=[{&(0x7f0000005740)=""/25, 0x19}, {&(0x7f0000005780)=""/176, 0xb0}], 0x2) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_ts_info={0x4a}}) sync() r9 = signalfd4(r2, &(0x7f0000000080)={[0x3]}, 0x8, 0x40800) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r11, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r11}}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000200)={0x300, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='fusectl\x00', 0x9c1000, &(0x7f0000000640)='+\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000380)=[{0x30, 0x0, [0x8, 0x7, 0xb29, 0xff, 0xffffffff, 0x3116, 0x8000, 0xe, 0xf, 0x3, 0xc, 0x9, 0x7, 0x2, 0x8b61, 0x2]}, {0x20, 0x0, [0x0, 0xfffffffe, 0x7, 0x6, 0x2, 0x4, 0xe, 0x0, 0x55, 0x85, 0x3, 0x3, 0x5, 0xf4, 0x8, 0xff]}, {0x2, 0x0, [0x5, 0x3, 0x99e, 0x3, 0x7, 0x0, 0x2, 0x3718ed2e, 0xe260, 0x9, 0xf0b, 0x7, 0x9, 0xb, 0x7, 0x3]}, {0x1, 0x0, [0xa, 0x1000, 0x2, 0xf, 0xe4fc, 0x0, 0x3, 0x0, 0xfffffeff, 0x4, 0x0, 0x200, 0x80, 0x8, 0x3, 0x8]}, {0x0, 0x0, [0xae, 0x1, 0x2, 0xb, 0x7, 0xf, 0x6, 0x200, 0x1, 0x5, 0x12, 0x1000, 0x8, 0x5, 0x1, 0x2f9]}, {0x20, 0x0, [0xc4, 0x3ff, 0x4, 0x6, 0x1, 0x3, 0x281c, 0x5, 0x69785ed1, 0xd9, 0xe, 0x6, 0xe, 0x0, 0x8, 0x5]}], r11, 0x1, 0x1, 0x1b0}}, 0x20) 5m56.819183325s ago: executing program 38 (id=8195): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$vcsa(&(0x7f00000055c0), 0xb, 0x120700) readv(r1, &(0x7f00000059c0)=[{&(0x7f0000005740)=""/25, 0x19}, {&(0x7f0000005780)=""/176, 0xb0}], 0x2) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_ts_info={0x4a}}) sync() r9 = signalfd4(r2, &(0x7f0000000080)={[0x3]}, 0x8, 0x40800) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r11, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r11}}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000200)={0x300, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='fusectl\x00', 0x9c1000, &(0x7f0000000640)='+\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000380)=[{0x30, 0x0, [0x8, 0x7, 0xb29, 0xff, 0xffffffff, 0x3116, 0x8000, 0xe, 0xf, 0x3, 0xc, 0x9, 0x7, 0x2, 0x8b61, 0x2]}, {0x20, 0x0, [0x0, 0xfffffffe, 0x7, 0x6, 0x2, 0x4, 0xe, 0x0, 0x55, 0x85, 0x3, 0x3, 0x5, 0xf4, 0x8, 0xff]}, {0x2, 0x0, [0x5, 0x3, 0x99e, 0x3, 0x7, 0x0, 0x2, 0x3718ed2e, 0xe260, 0x9, 0xf0b, 0x7, 0x9, 0xb, 0x7, 0x3]}, {0x1, 0x0, [0xa, 0x1000, 0x2, 0xf, 0xe4fc, 0x0, 0x3, 0x0, 0xfffffeff, 0x4, 0x0, 0x200, 0x80, 0x8, 0x3, 0x8]}, {0x0, 0x0, [0xae, 0x1, 0x2, 0xb, 0x7, 0xf, 0x6, 0x200, 0x1, 0x5, 0x12, 0x1000, 0x8, 0x5, 0x1, 0x2f9]}, {0x20, 0x0, [0xc4, 0x3ff, 0x4, 0x6, 0x1, 0x3, 0x281c, 0x5, 0x69785ed1, 0xd9, 0xe, 0x6, 0xe, 0x0, 0x8, 0x5]}], r11, 0x1, 0x1, 0x1b0}}, 0x20) 4m25.461316402s ago: executing program 0 (id=9539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x7, 0x8, 0x8, 0x25800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000008000000080000000000010000004d10b1a60b5036c79365fff7982f97a66be2e7347005dfa325e6d88aba5d2456af64ceb17e6ccb2dca3e5085731bf3e883c243ae719addbb423e4e3c0e9bba0be074c2356d89f1c4e82118ad811f4a3df21f85436429ad747724fea165c33b4f7df0", @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="180000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000100b7040000000000008500000033000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002f000000d40000002000000095000000000000007bac32b25ef8fa1700215c9f0ecae5731ffa5975e80e9efd118a60a86a6afd6e7bb79dc57a0983ca3752"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000380)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0) 4m25.402473241s ago: executing program 0 (id=9541): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4m25.329094101s ago: executing program 0 (id=9542): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x17, 0x107, &(0x7f00000000c0)="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"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf8}, 0x14) r2 = getpid() syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f70102070109"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='qgroup_meta_reserve\x00', 0xffffffffffffffff, 0x0, 0x1ff}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x16, 0xa01}, 0x14}}, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) syz_pidfd_open(r2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r10, 0x0, 0xb) fcntl$setpipe(r9, 0x407, 0x0) read$char_usb(r9, &(0x7f0000000840)=""/150, 0x96) 4m22.385249121s ago: executing program 0 (id=9555): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000400)='./bus\x00', 0x100000, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16=r0, @ANYBLOB="ee632eff9f55380c651d0fb734bd23277f4acfcedc0cab254efbee36e9eb7a765b9861776828a6352d03eda7cc20b122", @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xdb, 0x0, &(0x7f0000000400)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$tmpfs(0x0, &(0x7f00000040c0)='./file0\x00', 0x810000, 0x0, 0x6, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="119f38b9a7e280ff4c03d7c357b22ad13532b96b2e097a8372a6dbb4d15e3efdff90ec77e0ddaaf1316df7054048416c6ec2de49eae31f45abf856720ed99ad8b0187d6cf43605282b0b996d45a51b0ddf183a0777fc5e", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0xffffff05) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0xffffffff, @remote, 0x8}, 0x1c) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000740000000000069078644bf460e0d3de826d010101", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c02000290780000080a00000007000007ff0512000006b4000000060000005d00000008030301fe0eb94d1a7de055337607890cc41312bb5eafd41dec7aaf2caabdd1db82d5a1080a0000000800000051000000"], 0x0) syz_emit_ethernet(0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000029000000000006907864010101ac1414aa00ff0f222f528fdfcedf82d19e7fbd7138a9", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000d2"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r6, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 4m21.539443318s ago: executing program 0 (id=9559): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x40, 0x7, 0x2, 0x0, 0x0, 0x20000}, 0x10}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r7) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7408e04d973d66642c726a646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',']) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r12, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) write$nci(r9, &(0x7f00000007c0)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x1, 0x1}, 0x4) r13 = socket$netlink(0x10, 0x3, 0x0) io_cancel(0x0, 0x0, 0x0) sendmsg$netlink(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002d000100fcffffffef0226da08000000", @ANYRES32], 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) 4m21.302050737s ago: executing program 0 (id=9565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 4m21.301807587s ago: executing program 39 (id=9565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 4.870573807s ago: executing program 9 (id=15453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x7}}) 4.565809746s ago: executing program 9 (id=15455): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x40, 0x7, 0x2, 0x0, 0x0, 0x20000}, 0x10}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r7) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7408e04d973d66642c726a646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r12, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) write$nci(r9, &(0x7f00000007c0)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x1, 0x1}, 0x4) r13 = socket$netlink(0x10, 0x3, 0x0) io_cancel(0x0, 0x0, 0x0) sendmsg$netlink(r13, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 1.369555395s ago: executing program 9 (id=15509): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x4008090) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, &(0x7f0000000380)=0x1e) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x47, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4b6, &(0x7f0000000f00)="$eJzs3cFvG1kZAPBvJkmTzWY3WdgDIGDLslBQVTtxd6PVnoqQQKiqhKg4cWhD4kZR7DiKndKEHtL/AYlKnOBP4IDEAakn7tzgxqUckApUoAapB6MZT9I0sZOoTW0R/37SaObNs/29F2vecz4n8wIYWhcjYiciLkTE7YiYLs4nxRbXOlv2uGdP7y/uPr2/mES7ffOfSV6fnYsDz8m8XbzmRET86PsRP02Oxm1uba8u1GrVjaJcbtXXy82t7Ssr9YXl6nJ1rVKZn5uf/fTqJ5Uz6+sH9d8++d7K9R//4fdfefynnW//PGvWVFF3sB9nqdP1sf04mdGIuP4mgg3ASNGfC4NuCK8kjYjPRcSH+fU/HSP5uwkAnGft9nS0pw+WAYDzLs1zYElaKnIBU5GmpVInh/d+TKa1RrN1+U5jc22pkyubibH0zkqtOlvkCmdiLMnKc/nxi3LlUPlqRLwXEb8YfysvlxYbtaVBfvABgCH29qH5/z/jnfkfADjnJgbdAACg78z/ADB8zP8AMHzM/wAwfMz/ADB8zP8AMHzM/wAwVH5440a2tXeL+18v3d3aXG3cvbJUba6W6puLpcXGxnppudFYzu/ZUz/p9WqNxvrcx7F5r9yqNlvl5tb2rXpjc611K7+v963qWF96BQAc570PHv0liYidz97KtziwloO5Gs63dNANAAZm5NWf+ry4hfBZNgfoI6t9wfDyOz7QZYnel/T8E6GHZ98WoD8ufVH+H4aV/D8Mr9fI/wP/5+T/YXi124k1/wFgyMjxA/vf/3+3e73v/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCoqXxL0lKxFvhUpGmpFPFORMzEWHJnpVadjYh3I+LP42PjWXlu0I0GAF5T+vekWP/r0vRHU4drLyT/Hc/3EfGzX9385b2FVmtjLjv/r/3zrYfF+cog2g8AnGRvnt6bx/c8e3p/cW/rZ3uefKezuGgWd7fYOjWjMZrvJ2IsIib/nRTljuzzysgZxN95EBFf6Nb/JM+NzBQrnx6On8V+p6/x05fip3ldZ5/9LD5/Bm2BYfMoG3+udbv+0riY77tf/xP5CPX69sa/3SPjX7o//o30GP8unjbGx3/8Qc+6BxFfGu0WP9mPn/SI/9Ep4//1y1/9sFdd+9cRl6J7/IOxyq36erm5tX1lpb6wXF2urlUq83Pzs59e/aRSznPU5b1M9VH/+Ozyu8f1f7JH/IkT+v+NU/b/N89v/+Rrx8T/1te7v//vHxM/mxO/ecr4C5O/67l8dxZ/qUf/T3r/L58y/uO/bS+d8qEAQB80t7ZXF2q16oYDBw4c7B8MemQC3rQXF/2gWwIAAAAAAAAAAAAAAPTSj38nGnQfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL/+FwAA//9ZROF4") lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x40}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r7, 0x0, r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x11, &(0x7f0000000280)=0x2, 0x4) r8 = io_uring_setup(0x1694, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 786.717213ms ago: executing program 1 (id=15526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000043480010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0) fgetxattr(r2, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="1010000000000000000000004c02000003ab91db0691ca0b634e2eecfa92209ff3d655c6f90f2ee12a5330ec2781d93a8ef893721669cbb9c5c2a1a55a31c8b9e7d8430bdec1955deb7d290cd3bba7c64f616a539f7e5aa0d7a26582eb09f2bae150816dc1db4ddf0d88587b0d073d09fe7380b9f0eed92065cf00f59142614259a95fda0a6a352749d13c24344386d87232131bd9ebd2b7446cdd3322752740e0cd72f563917ffd8cca0351ea419c00cc2f08a720675c8248f42741743f40fd0a80f360992f010c7b3327cec98174b4f8a94f810600fdc8268da3f6cf6818487ef9b56f3f91559e69a450580e7962e8708cf52abf21d05d54848bee96f74b231984d120fbb15da4db6d753ac6a7ec7791064fa0caf154548f3b192df97c603153772f4b57b4888b0d99fa9141720a6aa3c2565c41a3d426fe371b786c4a709c8da9f31b4c9714e031458f8022d5f6b3baeb8483dfb8d60975683574c5176454d217940ed978561c559e0865b18601a488dfba895a00dbc0ebb7fe1b93df926f740015b281ccc5783bd7707ae873f8a6fe47fd1644a80fc80fdddd1585fdd0f9282df79cda5439557bb8d3f8b28954cf09d1f33cdbed776456cc22ede41f30d0dea128c884707d11d495328136ab774830c7d6610199cc94303f37ec51614bfa6be38aca5b6fc9b76e01261a5de6a5f28cc0451e20b2e3b2266b1c31e2c92ea220e491ebf5033a42e7d4e9af36c6c91498e7998fe96fdff5104306995246df7fcb4b4825abc1421c4332f23bcbef7d8e7507b49a699d1bd35009e49617806d93d7882b55b7ef4a014363dc6fc047ab2b16a3786ac195c6a08616fd008f2bd339e0ff5aeb1796dcb099a0e84f18b21d67ff64f29ba0a483b96b838b03f8d226f47bdda6b39888e205141ba3269d6c1a206707722c1b4c868b3bdd7dcaabb12ce07f4153dcd8d906fa4638eab1d12cc41f5b9281971b34f411f8e13bbf02a44435208b3eb51829cc85edae482ff522292e445e5a19b75e90e2e0d58bc4c397eed1f290a2e1cb37c115666d646b30d806000000ff64b52e270d234c354890842686c0feb5a9b09fb06f7d29bc06727ec9fad2298bb153528683370f165eee76c4d4958c4733beeb7b5a293811d01ac6fbd8291acc4e25a98a68a9e728c1a4e337fc882a76f32bbe3b8478a062f20f7968de1fcdb3eb77884d9e85cf5172660c6bc4b0e8c4741c1f39a10dfb50c3a77ca2653f2f9f24dc6beb6cecb3cee2cb78e471de2faf4a50282f91536515cd76033dc9b6d23ae7576daee03c2f930f700d08a7ca5a23bec3302db7d0cb5e9f9fa265e7cb04c53295aee37b637badb0c835819637f0a05b10715149af0047ed450349cd15db1498b5f3eab83cebcadb0f88919d2e5a11dce57cd7cbba50507337bb3eec18efa6e68adb00d0f34382ea6900d162ec241cd9b8ef83a3c6f745e7d2e4543058b43b91962804063c9f16a025a24fa79bfaf11021d0635b1969904c0a66bef59c6ced49cc8a7fab9a6024623266c066bbb3e528beef60f86ad00185a74ad6c3bccd4997a50e7161ef94d144bc3e1c89c2b0b8a9efb2ca35726f7f8839302104ab4a77aee3fb1549e51495a20986fb6eb087544be61f872e9edfef99d149065a7892c919e76bfc7f9a37fc2c4de3961452e228f2d7a16ef244189f54571b391f4a42c5e4538ad0b3cdcdcbedcb73dc45e625efdcc9715f7c1c4ccac563e69c81fb298b40ff942abdcd3b033fbf6bf7c4abbb8ead2197f9fed3df12674829a9f9a5a1862c296b0812a9371bfb25649cbd2e6ccc7ec090d64609def453172d202df46dbb370eac007b8501b6478b161975bb966953ba63adf1b584cf0cc24fd19406f613a96eb2b34430a42e54e4f837b0853e4db9818ea0e518ffcb543a6c24ede6ba189b56e5fd84449f18910aced096c17176fa37557eee8aac9a43c38538eeb24e620bfb7535014488ce6dfefe05b690f37d35995e563e81f6e5af69055f24897dd67af470883115c6a0937c08458e85ef86f4d822ef7420fc2a0ca6b6c1b5e105cd9f7a2540f3c1958b0560c3e0e9070eb7e2038c2cdeaf1e9072696ed91c75864acb47b4de4c30ea2e963e48577bb0aa73db692f257d23e2087a43fc35ae96e5a3e51ad078352e67ef827551d07354c85f495d5623d8dd07d7bb9e8a4b67c1f39e612da30c39c1b78fbd8998c3571d95c9cca860f5b07bcceefc4ad4e42f50d02f1e47a41be9dd7f60df9454ed00ee17d2f925457e6d958118651023e450a02b25d894815f93299be934540cce10110294d08bd989c47b8a86eb755eff294afd030d223b5bbb8ea14cc0e6122dd4e8a45e84db5ed04f6bd5d5d8d4bcf3a1227e3d4ac0190af19ea55917152a6b1ad86ea5946a5569f201174c48dd52cb025ccf862b034984df09f140e64ac23f83669aaebc51445ab263401dc53681c88c337ebc9bde19d611f345c19af965dd89a3cad131ebcfe37c2b1f83ffdf44a3d00e7ac45a4765afbfb51f0f555dd9118790bed87b8788c2bc4ecdbc479eae701bb61aadb2d32e0af0a6a9f4a32f7acf328db0d068d38c2028858c7cf3a42619be80a9d5c860d31dc2eb7f0cad6742998febde7d51b640a3efc9efe7a8093e4d93a17444fb652e5827a5b07c3dc9ace012bd6daae5686ac768721eef00627539c27ecd3aa27c8b540ec531d112028fd3bbbfb450be71cf2c103f5eae0f10b7a733cafc4dcd368fa200f3992abad00c6d78df7037bed860ff22f06afa94833a1752d4f00afb7a68daae921aa95617aee98d73d3c9bd8182370f8ba335046c83b1f2d1c8a5a93187469f3b31ae1cc33b38587fb0b456fa34575708d8f42a9f588a66067a44c6a27300f943ccb3000725d328bf946f9c7d37d9cfbce02bb50c1f8ff38c5d5e52a0c77c8452dad31d0a7e97772a6dfcb13fff0cba0e361b5e12089645b8d87c181db1d95012b423ba3bfca1ca69f4853ff8855140a5f4f94fa99cf130758ec497212e76d157b9725cf9d9b1a25b00bea1528807362e7d6c1bc81414a1065cced78875a4892002db789826cd5757479ae203723cd0dbb32e1ce7e6bf238befd397638db90a90a03d4363fdb8954b9cf67313b5fc37820cff3addb55d0ea40448cb4037f428beda9f4fa0524b295469c195d5042c553819061fb417d7348a77e1ebf9dc3dc6b1d8641c1799579997304c810701d6b274110983d9b6dc5ad6bdfb746f0426f5fd61f00a540b7362d5ac0faf1c0b6502118f159152d32730f745c072e50217e2c1fcc675784ba2f58d3b19af97fb7adfc5709f099fd30bcaf6e709dbca151100ffcfd115c3f0913a0f890967e7012e057096b402ffdfccb0442e4ecca4a8450760b4495729ba2481ef4d0a4c1fe4eac59f1300110a69f568bc09b391d05d79addf23219b969846a252d7c4a164a99e2a169df57f9eb2e54d002d10fab621352850e761955e8175aa02094089d8067c82f977484681b190590a90985ba26cdda2e8fe4ac8e7bec81a7b4eeab13607a06746adda01c4da14c9f78e0b3e212a12f1870a2b08af88d297e8db3552ba26ed7d255fe875d4becd2196e4fe8310aa02ca4c9eccda8f472ebcca0e7bd3d56e271660f7f573456c5d4753e0a78a18f6b9f81dbae52d403c609b03c10341f51d11a286f70132f8293d74bd33e44a37de9ab611748c6244d72b8a7baa3d0310216d19d9f4fa706d4d5798b5544fabdae8fa71d12496bc28d3078b45b3cacc037e7701e78b6a5576b8adb1df4d9faa139b683d9f72300b90a1e120d5b9baf291dd1887e3fa8133a32dddfe7aceefe2533ef9b0de3958317b407d4f41866d08800761da1c4a370b3250b1eb39c7a062b74ed8d43b6cd442203354ec5ac832ebe4a9a20c20541a12ddfc60cf764a267326da91c0692225732791326c1191710fb15dfaeda5b52613ee6eac5e87bb7298df73307e1d62a34b728c5318be8c5812390de284d64cd9aa8fed55d3c112dabb0bc997e5f0ff4696c59096b2b014757d8e444bf21123da9a441870eb12e4acfd1e32e4c37beb1318cc50c3d4a50ab5ec4c0d910ec81af7651821310247761fac0736176a7ac9ff4f7ce0b02c44c4046cb740ea0c00e6b6e98f4f04ffd10526b0ce1a6139feae01e2a119ad3becf9fd37a58e7b2dad3e7ccfde9b6cd707df948408a2dd1857b50f45233568ec888435d7e381436a47923c581048f0c27d905211b0c50ec18f66a260c657d2a0384313c046a21378e73c7ddeac169b10f50d5a02495d56812f41f0b0aa249eb2a63beb8b1cc405a85d5ea2c3260cdf329a218c2730e6854bd5064b85946419ae67c8454b9f5cf62af566a925fd03e55da857e8fa7e16b0ca832114c1685807d122abc310c3ab30dd92cb010b71da5a8e40bc5297a7a136d2fc3d2b892317b059c6483767230bb009236360e7d699715ab9a38dc5964ed7dead94f587ac47defc10c34af41b2f4c7862703d45bcd928040dec4e1c62703807c6e614f625f0eb08c0d5461bcee0bde830ffe1fa0cdf8e6a6ed04434153f458ca23aa1c1a60a25e78245e2a4a675bcb70d51267d937ace1d41d83010c0def2148fdd4f642b17d43576485d569028c6f64df9bc19187308b1edd8ee275caee0b3eb18470d808d3671caaf00ebdf61e53a7cb17493de88231981961d3fc91575e3e1b58f1e04a35b21b808290c2f92c1a1950c127ed5464f5275082afd9978303196c9a8ca5851f03f25da43cda32022d01f9d34f2bec9277e1b491eeaeb556c9900b83e289da3476b20b2cc03f4a28fdc8822501af8cf76381439e117db5389ce6cc6afd37329b130e712b5c6d378d3ae2a873f8475021b9f0feb7f55bdb2143d77a90703d5528bd9188369dd60ad63492ba180590f96dbfded6dd2654eb3a338d44317ad4acfb4337523bd9042a64e0da79a9fbae3d80d6d5ea1f2eadbbee036800ca1a25e44a713e14544e750abeaf3fb45c7deb43017a53b9cf92b71f162c4a44edc5d32c5aff4abeb0f94b5d7dc8df267e725a8ec653e505f34088ebc7a3cef8cf798c94675ab9eb66d01c00c80bc761e0d9f66f466d9b20b19dad13e535107386cd8d5a7e6889689c871a0adf0186d13a854e0f362e64d80dd8c2af9a152110f4edf165c7bcdb907d43baef1fdc9f8a27c65357dd6e28cacdafcea79ed65e2d3a7e57f127ede0059848074d17e7f3416ebacd759875a87cf0d33dd844356d03f49a8dd7cd33d4bd3fb4301ee90a70878b578de30e1cc966b1a117f97805f87562ba370bfefa14524d4f571ffbcc79c352bee46bc296ed602e953df1984fca29c214c01c1d51e31a8950d19273642a7be515d7c8648b5003061a65889b3b1d90f3beccf9f38d87b82b8c70c2eda92c48548e83dc0301dc5ef1f25d4fb647fc793298e30ced4e7843304da7e4a73878e15098b139863b684cec72ddfb3200f9ac58339b73b2adc210f61aa039834a14ac451844cdd59d46085b0241f8060db30b52028e217652c964d6cbcee0f341e0486a32c673a76fc63d7469d5124d4df7f87c18009909e8feab6b8098eac1b8371f5517c2cce65f4e62b561df8a5031449dde044fec798ad35ca9cb054ff5462f40431077104fbef866abde7986d88905f47a1521b269b017f626f0eb30e730982d8702373e7f704db273cb049fbce298d4b089e18f8ec10808cc9bdccb2c8ae83e221964f1c60e409b0fe53c02e65adebaec127b0085f60386a0dc254bbd3de525a684a83ab9d25464de7077ab067aed6dc3293b7f1f3a541828061cb23090c19674d0c663d3b3278000000000000001401000000000100cfbbab44fbc8b618d9c9a71c5461a4386acee066791a3ad29b655dd8ef2621834afbd204bf701966fcfc0e524318dbc9154756b68bca56fa79684c23aafb1f6c72dce515b3d1d807aad1e04bfe8d2727756f6a509a04918a47e2fd23bbdecd26241257fb7dae9c0010100000000000000000000004000000c13861ade62d1257c7aaf652667142e34864ecd1b4f65ba56cd896378033dbacd6cff20928ad595e5a88a07356dc29bdef35f2c5f85e5fa7b081c87a033f79f8e0f79f5373e08dbfa6410f0898edcc8afe13225aacb705f4ff4250d56e26a027a05791d4f6cc527b8c59d51b5a347dfed90a724ce34a1b435807377703e301ca794fe160caa82ad6607b501faca83ab44fcd3c5b6dda1f843706cfa029b3e58c34ee1770ab745d6f0fa18c7b802c904e74d7a2a75be832e2470176f8215d380e5f447a1898f4df95ee61607bd5e56ca60b97e92fdae98fa5d445edefda39b3873204d6926ae37affb7bacbe17a1181c7de62a04b8b60fcae94227c8347e70c6319047de7b8812ed3bc772ac4ee26491a14d99d8d433399ce45d7de1456ed146f4a82dae9358c3cf8f690ad76b708f45bb5676e81f3de6662ed06a424e54b2ea6eabe9ae7ab24b57ca05584dcc4e01fbdf7a8904d883e7d3e14a69671fc9c1fd4fb030e11e11675ec8c6ccae134b6c8f343c6f39353583b612e9bccde9d32a5a172c10277270a86cb8d53d560054feca0e2723bf2e05671e7a31244ffa38ecad1036c2e20641dd87244656c7c8cd7750d3d3c4e78a915821fc3ca746acddb95dbd11f74c8eda9d0395cf76824cffd90ccc65138205a1a754161116b6c943d33780d48d31bb951076e3e32c7e1830af11b56eeb01a8e329a92d88161e735dcb6b931ad4306c4a59bce4afa7f54736e0990ad14d681a7289a94cfb9857d070601122f5c2f53190e899447ad2302be520c81e22768f09d076443a3c871f97444301cd125d1be1bf870f0aad003c7dfc31855cafc1696645ac0ac478913f505b612e1f55855767a9a9544e90af8fde33f806738e8d4c3083cbce2c523a34b1410639fc235cf1c40acb796eacf0f23bac6f095d76486fad587b2374c55ced89f7f47cc9881c5afd36e161829b21bdded6f18c9e526c6dad86911d8b4953bdba32dfe1565ce114445fb910f7998e5cf9e4bd96fe5446c581208ec2841946f6c07d0c80a1ba8b102c884f1d5bdb1301715cff1824649a440f6d8d53f750dd2f094699726096e5e5b8feba1a93464fce214c62a2a91d4549feef688e2d0c0f2a1b2ac7c68d4282d6f7687be89f630345b6374ad0ca9188c0a3da9b45dda349dfe3c72d93f86b8bad2d318071bfe6ea9ec0af50c0e7f71705d1f17a7041227534bafec26315948e4ce17932d7d23724d011c4ed127ba93e699aa1469da1bc71e4feaf7afcbe913d20a4f4435b37273995a54096c180631b6c3faa60fa59c8ef3f56ee96dda54724b321e8b04528cd13192b9bf3c3f7428cf4ded50ad2abfc024187a0c4314ccf438a8f14e569e447f776f916b2041dc5861649d815dbfab4676820144ed4b30e8bc946299d3797c16f474bcf471aa7c569a92583a6c94e802b0d3a5e0a1f5ef746a085ecf4b1aa5e28a5fc70a76d46358e70771120b6574a8cfcabea9a1fb49069c4249bf30e5da39e5c29f437843b90c488789ebc81f9a619dc99896ecba557d34455b4518f290a11620082e8e302d36d349056eaae09d6055dfc8c0af3dbcc3773503bae6f2ff927bc7b9b87dd44530ca8cf7b227fd36a8ef55081d600083eae7ffa834a8b1883fcadda1f77991f252036f12b488d87be46c0e9f84263d3ed8f0d2bc6b97ba75a056d3b8863e38d76a09b08cdf374bdb9fc73649cba03297ca9f4ae883959634b7bd0858fa737cfca1b840e5ad301bc2e8cb8c7ff40ae376ac74a2115417488fba693149f1d9c4b0b7e2911b14d020ce4bef94f303c0092c41066e016e53964704df9e43bea9861bb64f427270a700b0e0bd2d8cc61fdca2749c2d03022284fd5a776d1597188740b55eaf4a35e8717949a5ed93674d94eb6a0f110b7bc086d1cb79b3998a193303f9bd2a1d31848e0034a618df45994369a5f2eb40111163662c8b9cb6b2f2342e74362052fc729f4013b53c1e2e6b0453c9b52a0a190ff425a95c9182e6253e06507a36ff4aac24d7871acf874724d07704ab93a5aeae360fea636faae1c9eb05c0dfb89880bb382043ba5c5bbe29a1e3841af25bc67d64495e515db15e5307a8ff07c55d8fceac07851b60a38f5c431f95ec0d11142d6f6f4921f9b3d682afd71ab7cb2d36fce9011d1f675df200dda85330433532fb8ef3beae9812566c1c59aa87d2767a535e4091c80fec7f27504e99ad08fc3404d939ae61c2cdca74dd79b102e3496ffc49c0481eaf64886dbe61e10412c9ea86fd674c7810a988819f1f943a7f08a76e021bf9684c29718ac259b50074b7f086940376400c8c871463011347ee3446ae53ac255c7076f098b4d371ec7ada5e45fa292bdcd4d680cc349ce9b66f7f874d54506ac24e2124fd464735deaa64351df5294532fa6ce79c049938b3e9506925e339c9d0556f3d5d90a4be3db3fec94a472fd36bb89304ae7fa901e51a7645ae7d0c7d0703e6f02831a89f7999b7af933ebfbc0df3dc87fb6ae3a4bb294bea05ff2cdbe0dc6f532d56685e59efa2983fac76e1546b43fcb9372674f463daffd14577775344cdca147475541e04ce17329443eec1e4d1d44bb3d043a4917fa8a9a7eb8ec5a9518733a6266a8bc79401528e64d5193e7db07702b265a20d3e0af1f4fed69f0e57ad6720e3dd3ec09bbef6b0758ca069fc092eb84f20d5dc172c8cb3980698c40ae7ff8279992ccf2feaa45d9de10dcee9bf9585473bbe8065446e5605a5ec62a5a2f97fcd2703e9737945787281ee514f84b5a8d0e7897649f1c8812ad05e1140062b06aa8c23f4fa61cc8c0fc465870861718b04dbde8fb071688b5be50f8ae6fe0801495e2bf0348539d327680f8ae90b2e2f8123d578e364d46ac5d98b943a0158726f8e3861d7f92014e98f4a8bbd383f33164817f170a445d0b93c5ed060f0313db0296c9e9dbc41664f2a58641ba4c9d504a220d1bc747c197c939dc43a195e4f64732e186a49bc50b5a6ac1819f00c887980d4370bc1de36b8fd90ea54ab843c76307e8d2055e2a8d73f3a99e4b3ac6eb264c4c9c1ca6ab0b43aee1d36423d9b8ce8245a7d52fd28d1111c05c661fac8658f7fc478337b7d753f2b3465a5bb917257577df7674b4d876bec41d5a27eb595eb2742191307a70b91e17c6171dbcd18c2d9470f5ed15b4166cf85cbf76bdcea9954692c1af27a583ba9b478b16c35dc77a01545fdf155b9eef56b92b637b9e60ab233a5eb00ceab7882da893de9b731aee65175645fcd3aae015afdb0f8d4f87cd705f1aa237788cafddd59ddbae5b9c81bc9e4f154fb15babba600345cead0b4d8ec489ea15bdd94d8d57199abccbbf5cb517a5bed16d12b27db83f627522bec6f99fb0f05e59b9fabac44f4d1e9f7cdad2aa06a1acdd9503d3d613500ef7f72e9b5b494494683d7117f105c07f03b7c79383f15e86e7fcc6d82612503226c6133d82ac0f68ea779bbc3f15427a319ecc225ebe3bf42117692ba983abefa0e22cf5a2f5d09598c925ce13fab428c0d42534725f651c842ca8792f1ed1244ca22f092962f34ae736ef3821ed18f2fe7d299d6e2c646c1aa42e006525abf3b1f9b0d265c80bb72bbfe5c4b7137a29a5f89043200cceeea4125bdfa4c0b2c3a06b6648f225deed6172b768285ce0f0914ffa7deb07dce1772e99789ed1e4342ed1b39a7cdbfd0e4ab86234602e544e6d0cfbdd935a7c9929063ceabfddaa935b5c724fbd29d3166f9360092a15c82bc8d2c44e1088a4766bd95c0bf95d43f5ca72f0de141e8810c3d38219e2d9373b018ec118771f5fb9971db3b2d24d9310b935c4e35adbb2e64021c90a79cc07468959a7a9e22e610ab355392d5b3fddca124ed24cee6c91a7840a261e7651d77342a8db0efaf1206e099c62b4194ec1af4f1d10c141290a7060231e8bed42f889f2def7c6de4945705bf8f74b9e4189af4be6696120a5e43bc00d57645ac0eeb32927719058da8ce43dda83f32eeefed388687cb1d460874fa7b23a11f6b28d944fce0fd73edf3b9303de6b1427af0abf9a36968d4f8a2f826531b9e0f3b5a541fba8e307ea4be1589d2a1f1b6fc399f2bf0830262c53675740a123d58e9e691dae49b189a5f326a6b14fb90fd429a317b386532368c2b01d031ba73199c50b9f924c2f9f1d296e496c7f9de22d38a7d4465f1d959251351d82d49b1acc6cfa5ec015eaec8919ad200902af8149ec3129f55053375ae27cbac4be0ffd6ca84e7d46fd218c4380196f3c97edfc31d660cf7a714426583f95989b7ab463c9d9bdc56716a0a4b29fbff26d270b449e3d851f50161c7a62eda22ff7f7b52650e0cbcb3e1818b81f5caa15532938f0f806b08fa5462d1496296025ad63a897fdd317bfb7ad9cff01497d0b6c503b6930d7e6ca367ed7294a322a12c9f3069cf14092092cb3c404b9a3e63a2683322f069fb9573bbc8b58dff6031d0872fec62ee9fd4ffb5f5b5032fb320b799c80c8a6315219890482a3af74e0982978b7e16cc51a4467ae044e2b35a4374bac8446038e093a6145e69c6b0a27a901dea3fe00818704e1322cb0f00eea5e23bfcf5ae876f055ab325598165c200cb3690bc9a71207fa0cc9ae63cfff68e88410ba095aa09e18e047cb359acb90dd42bea1d0d57901725e3b99bb45b7f92ca64f3d86a16cfa76fb2c0a0b707585f0143631850095841e7907b00e98c3e86575211500663eaaee0a10550724a0f42e1f8947af52cf7a032870552805c68779c21027c1e6bf8266dcd86ede181bb9ed3e7adc18ac3961d9993e35b5728fb2861bc13e94ee7aefddef8624e4baadefa6478df78cefe542d28ead4cd4236cda40e78c761db52dbd75a868012fc0ba3ae9bda3be878b23c5a1e798ebc182eb07f466848cef806774b47afe3b53c85ac80979058d880bb8cff4d3545dc0e85c52c4d310ea13b1aa74461d1168490457663b0f47854de95194ae9f6ccc0b9b3d02e15c7c78eff34a29cb806ffd0736801c6bf43b4253de663030550fd6d85ef9150d4cd0a0df197d4d57c16bc12c1c7ad57c01415a09e3abbbba9ce60883152d959f02c3c77b6131cf796ecc4f0ae1158ead23852e81a8b4abf1db2b9ca8873e1030b60d758975b39ee4847ca6ad67ab6f22f47673e1aba484e98d8d8d217dc80e270449bf6a563148b1efb5b8a89324bfaa7dc0f78f75aa362df6084e344154b342df708eff939064f828bbb1e30d938287a4901473f0ccdd7513455712793dc5a739e90cff5f61fe0c20cec22603bcfdd1e76d217e20126091783f02e507be84fe9cab248417b5000ba15ead2dc6eb696b37c1d718fdbefa6f9568719b444652dfd780103b8f4b6b1db322107b708bd52c5a145dd5a51d9e816994ae283cdac76808887155e1d790a1763bac41e286a216dbf0ceb15090823e99fe1cb13af6d8f92bc09c4270e3f166fcf28e2eef353a59081e8d7e8d793bcc430d300f0a49fe02cded8e892246cd8c3996513774280b62ff57ee5af28735ed201e37ec6550c8157231fd254e962b80058788fd9703c8225d45cecfffda4fc1b9afb4417c8b8a24cb92d15dbe2098303e5b0f62e53572d2cc272fe1cf1da39d687dd3c7b9951d5497cc620b337323ba4d82236f2e231b04121601b928b14b873a667434a5b633099316020ff91ff05027ad23bd92f764dc7c943814796a879ea8ee32d08aa12c50e7adef9c36bb24a2d7a69832458f20008386179b5f54ed52b69ef3a35678703bb0e6f3de4d19c2098f94e8667304e4306d86068000000000000000d0100000f000000b7527c604806bc4d69f5ff24711089131d830b10e7594059290d3b8fe196be22696c5710e70c8b734cc2c4004668f26b5f23e10315cff6277229c107eb03089355833a036f7c84fef0748f14a44673accc956dc3000000000000000000000000000000001cf53be9e08ba9566fb38adb9fa147a026a22636bdaf39690f57628d031a095a55e02281a0f2b3b6318b801cb1bbe0dafb85ca137cab391273c4a2f4dd17067ea71733b4ce30f17595550a0ca8aa577ba2f4df66865d"], 0x2100}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='xs_stream_read_data\x00', r2}, 0x18) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$TIOCNXCL(r2, 0x540d) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 718.159792ms ago: executing program 9 (id=15528): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 710.508262ms ago: executing program 9 (id=15529): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x18042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x149303, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup(r4) sendto$packet(r5, 0x0, 0x2, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYBLOB="bf444c9dd783710a48b4fafac4a070ddf834ce4e77a573b47547f30f821a", @ANYRESDEC=r0, @ANYRES32=r7, @ANYRESOCT=r7, @ANYRES8=r7, @ANYBLOB="0f7eae413c4e7d6234e7ea3468d47759379ef8f0c0a0ef2a5a22afe916ee5ba2e441d5b48cfc06618436e562411dbda2ab0b4c9e619d6f48123f0ac645f7e0be4ed3a2ef6178cc1e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r11, 0x0, 0x91, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 696.567252ms ago: executing program 1 (id=15530): bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}}}, 0x9d) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, 0x0, 0x0) socket$inet(0x2, 0x3, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 678.641972ms ago: executing program 5 (id=15531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000bc0)={'#! ', './file0'}, 0xb) ftruncate(r5, 0x8200) 644.231222ms ago: executing program 9 (id=15534): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x90) read(r0, &(0x7f00000003c0)=""/221, 0xdd) io_setup(0x2, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, 0x0) eventfd(0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r3, &(0x7f0000001fc0)=""/176, 0xb0) sendto$isdn(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x102, 0x840, &(0x7f0000000c40)={0x22, 0x40, 0x0, 0xc0, 0x8}, 0x6) eventfd2(0x27, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000680), 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x104) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0xfffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x2c}}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2e34, &(0x7f0000000240)={0x0, 0x8000000, 0x0, 0x0, 0xfffffffe}) 617.839392ms ago: executing program 4 (id=15536): keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)="b04d2835", 0x4}], 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000004010000000000000002003e000000000003000000000000004000000000000000980100000000000000000000000038000100000002000000030000000200000002000000000000000000000000000000070000000000000004"], 0x1fc) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000a438c0822df43f1ea1168a75ff049901005c96397ac396bc728883a3b25400b6e079b2843b51c73b7f48aa6d00"/66, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010001000000003204000300000037c3413406286bbb0b1688c4025b7e0f5df59488c7a98036a908d51509e2662b49a215ca533875870ffd60be96b68ada3b3ee937032c83524e827d60c86c7feb8ac1681f557700f41d1b5632a92ff771f444d3bdc6acddb3f9a7817f541cecb576e8a8c6bc386a9e446d6821a19831f8d664d02221025e3a477e03418e8a93b099288b8cb21ec36fed7d365a97b30a"], 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00"/53], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) pread64(r6, &(0x7f0000000000)=""/169, 0xa9, 0x80000001) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@nogrpid}]}, 0xfd, 0x3e2, &(0x7f0000000e00)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f0000000300)='./bus\x00') 593.279052ms ago: executing program 5 (id=15537): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d50300000200008385"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) 575.173482ms ago: executing program 1 (id=15538): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000bc0)={'#! ', './file0'}, 0xb) 500.389872ms ago: executing program 4 (id=15541): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000bc0)={'#! ', './file0'}, 0xb) ftruncate(r2, 0x8200) 493.630692ms ago: executing program 8 (id=15542): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$kcm(0x11, 0xa, 0x300) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/152, 0x98}, 0xb}], 0x1, 0x2040, 0x0) 400.887901ms ago: executing program 8 (id=15543): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 400.024031ms ago: executing program 1 (id=15544): bpf$MAP_CREATE(0x0, 0x0, 0x50) open(&(0x7f0000000640)='./file0\x00', 0x248080, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, 0x0, 0x0, 0x41ef, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffa) ioctl$TUNSETLINK(r6, 0x400454cd, 0x311) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r7) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$X86_IOC_RDMSR_REGS(r7, 0xc02063a0, &(0x7f0000000180)=[0x5, 0x6, 0x2, 0x8, 0x3ff, 0x5, 0x2, 0xff]) ioctl$FS_IOC_RESVSP(r8, 0x40044591, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfc3, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x4}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x1827}}]}}]}, 0x468}}, 0x0) 324.565951ms ago: executing program 1 (id=15545): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 310.147221ms ago: executing program 4 (id=15546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='afs_make_vl_call\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000bc0)={'#! ', './file0'}, 0xb) ftruncate(r8, 0x8200) 279.275041ms ago: executing program 5 (id=15547): bpf$MAP_CREATE(0x0, 0x0, 0x50) open(&(0x7f0000000640)='./file0\x00', 0x248080, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, 0x0, 0x0, 0x41ef, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffa) ioctl$TUNSETLINK(r4, 0x400454cd, 0x311) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, &(0x7f0000000180)=[0x5, 0x6, 0x2, 0x8, 0x3ff, 0x5, 0x2, 0xff]) ioctl$FS_IOC_RESVSP(r6, 0x40044591, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) 278.408751ms ago: executing program 8 (id=15548): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x5b0, 0x0, 0x2b8, 0xb0000010, 0x248, 0x5c8f0200, 0x4e0, 0x3a8, 0x3a8, 0x4e0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x73, 0x0, 0x2}, 0x0, 0x228, 0x248, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x60, 0x0, 0x2f7d5cc6, 0xffdffffa, 0x6, 0x2, 0xb0, 0x68}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x230, 0x298, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'dummy0\x00', {0xba7b, 0x59, 0x20, 0x6f1f6a1, 0x6, 0x2, 0x7, 0x10, 0x8, 0x40}, {0x7}}}, @common=@frag={{0x30}, {[0x1, 0x5], 0x40, 0x5, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x7, 0x6e9a, 0x101, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x80, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r4], 0x20}}, 0x0) 235.342071ms ago: executing program 4 (id=15549): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010015000000000000000b0000000c000580080001"], 0x20}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRESHEX=r2, @ANYRESHEX=r6, @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES8, @ANYRESOCT=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',version=9p2000']) 210.951221ms ago: executing program 8 (id=15550): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) fsopen(&(0x7f0000000000)='udf\x00', 0x0) 203.225321ms ago: executing program 5 (id=15551): socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 164.44506ms ago: executing program 5 (id=15552): keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)="b04d2835", 0x4}], 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000004010000000000000002003e000000000003000000000000004000000000000000980100000000000000000000000038000100000002000000030000000200000002000000000000000000000000000000070000000000000004"], 0x1fc) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000a438c0822df43f1ea1168a75ff049901005c96397ac396bc728883a3b25400b6e079b2843b51c73b7f48aa6d00"/66, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010001000000003204000300000037c3413406286bbb0b1688c4025b7e0f5df59488c7a98036a908d51509e2662b49a215ca533875870ffd60be96b68ada3b3ee937032c83524e827d60c86c7feb8ac1681f557700f41d1b5632a92ff771f444d3bdc6acddb3f9a7817f541cecb576e8a8c6bc386a9e446d6821a19831f8d664d02221025e3a477e03418e8a93b099288b8cb21ec36fed7d365a97b30a"], 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00"/53], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) pread64(r6, &(0x7f0000000000)=""/169, 0xa9, 0x80000001) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@nogrpid}]}, 0xfd, 0x3e2, &(0x7f0000000e00)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f0000000300)='./bus\x00') 146.57031ms ago: executing program 8 (id=15553): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x5b0, 0x0, 0x2b8, 0xb0000010, 0x248, 0x5c8f0200, 0x4e0, 0x3a8, 0x3a8, 0x4e0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x73, 0x0, 0x2}, 0x0, 0x228, 0x248, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x60, 0x0, 0x2f7d5cc6, 0xffdffffa, 0x6, 0x2, 0xb0, 0x68}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x230, 0x298, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'dummy0\x00', {0xba7b, 0x59, 0x20, 0x6f1f6a1, 0x6, 0x2, 0x7, 0x10, 0x8, 0x40}, {0x7}}}, @common=@frag={{0x30}, {[0x1, 0x5], 0x40, 0x5, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x7, 0x6e9a, 0x101, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x80, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r4], 0x20}}, 0x0) 81.68336ms ago: executing program 8 (id=15554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x44, 0x30, 0x8d, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x8, 0xe, 0x1, {0x22, 0xf}}, {{{0x9, 0x5, 0x81, 0x3, 0x608, 0x6, 0xf2, 0xf8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4a, 0xae, 0xe}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x7f, 0x3, 0x81, 0xff, 0xf}, 0x190, &(0x7f0000000540)={0x5, 0xf, 0x190, 0x4, [@generic={0x80, 0x10, 0x3, "bc18cf451b48cc87fc4695aac90ad896cfd4843d8941316634e451cc0f87a639db149899a617a093b01348b71cbe6a25e31cafa82de7efe5ad608ddbabcf7883b765019287e9ae8d3550454659111df5b904b7bca48e77d5bbcac2b7baccaebd318c486e5e887b761b22efe3537bbfa80bee24d74bf647213bf213d3cc"}, @generic={0x55, 0x10, 0x1, "14755b6368fe92c8babd54f029796a8734e264b82a321b75f6820102a9967ef212c00f330b34167ef055472d10958f1e110ec3703eeded956745618cfe2cb257cd0e3d555971776c7b2bfede91e27c8ac0cc"}, @generic={0x43, 0x10, 0x4, "d054f47e8e296a011b02286a21642bf785d4dfa33b302d2e4543727496ab7ed5734ff4bb1cc2ce7438d9ab11f10013028f63785cd8c7ebd148a993775c95a56c"}, @generic={0x73, 0x10, 0x3, "93d419d0d5a3d37450ec44c55572b4dcc35d3f771f4a074f9251809fe6a35a93bfe961856b85befc22a5341f199b4e9ce18f1203bf0d99caebcab990edebd4fc7d5355321ffa1b05ef62ef408dcf14f1ae165b7d6cfbc01aa55bb586f990a7e72915bce6f2a278f96a6914a9490f43cc"}]}, 0x5, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41a}}, {0x94, &(0x7f0000000380)=@string={0x94, 0x3, "d2f79e7450827988af87b464a9fbcfbf8a59c1271c66b6e3bb3873767dcc01098218dc098e696296b4eb1164eeae473ab0449a5a5dcb1d2fce833bac36c15f289ec736b8351da176edc583512e04e39c92b4e13aa76f352d1906cada4ef5688d1af097a4e41b5730c6569afe0bac70fd33be353260e60c9fc7957bb8ad53ec17fdc7fe35d3252a98c220b9a3348e01a75048"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x444}}]}) 80.41156ms ago: executing program 4 (id=15555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0500000004000000ff0f000005000000000000006165961ae345af633cddd4fd61ed223c1e2111adc2f8b19fd1da8f0a756927abcc3ed52793ef7a7bafa7705c8541f328813c18ced06d290b91e5c81777a2605cd13d7d418df84837edc2def63adf1a64e1343858b0a313e562995ffaee47effb6a21f91f219fd7d7d3910177e1bd3e9fd59a6f11b6ff1827d07d629c3a4c1b6d8f5b4f528fd4ca36e12991052d6371", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) request_key(&(0x7f0000000580)='.dead\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000680)='syzkaller\x00', 0x0) 72.59278ms ago: executing program 5 (id=15556): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x5b0, 0x0, 0x2b8, 0xb0000010, 0x248, 0x5c8f0200, 0x4e0, 0x3a8, 0x3a8, 0x4e0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x73, 0x0, 0x2}, 0x0, 0x228, 0x248, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x60, 0x0, 0x2f7d5cc6, 0xffdffffa, 0x6, 0x2, 0xb0, 0x68}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x230, 0x298, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'dummy0\x00', {0xba7b, 0x59, 0x20, 0x6f1f6a1, 0x6, 0x2, 0x7, 0x10, 0x8, 0x40}, {0x7}}}, @common=@frag={{0x30}, {[0x1, 0x5], 0x40, 0x5, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x7, 0x6e9a, 0x101, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x80, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r4], 0x20}}, 0x0) 59.56393ms ago: executing program 1 (id=15557): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d50300000200008385"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) 0s ago: executing program 4 (id=15558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x7}}) kernel console output (not intermixed with test programs): 0000000 [ 854.994182][ T3841] [ 855.028022][ T3843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.037287][ T3843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.065073][ T3847] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14879'. [ 855.106520][ T3853] loop4: detected capacity change from 0 to 512 [ 855.137786][ T3853] EXT4-fs error (device loop4): __ext4_fill_super:5505: inode #2: comm syz.4.14882: iget: bogus i_mode (177777) [ 855.151457][ T3853] EXT4-fs (loop4): get root inode failed [ 855.157172][ T3853] EXT4-fs (loop4): mount failed [ 855.192974][ T3862] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.14884'. [ 855.203882][ T3857] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.14884'. [ 855.291243][ T3876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14892'. [ 855.392007][ T3893] loop1: detected capacity change from 0 to 512 [ 855.399198][ T3893] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 855.413990][ T3895] siw: device registration error -23 [ 855.425077][ T3893] EXT4-fs (loop1): 1 truncate cleaned up [ 855.431325][ T3893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.470234][ T3893] Invalid ELF header magic: != ELF [ 855.479051][ T3899] loop4: detected capacity change from 0 to 512 [ 855.488886][T26164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.508750][ T3899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.521690][ T3899] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 855.535455][ T3901] loop1: detected capacity change from 0 to 512 [ 855.542368][ T3901] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 855.555299][ T3382] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.566565][ T3901] EXT4-fs (loop1): 1 truncate cleaned up [ 855.572936][ T3901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.607121][ T3910] loop4: detected capacity change from 0 to 512 [ 855.616984][ T3901] Invalid ELF header magic: != ELF [ 855.617309][ T3910] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 855.645591][T26164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.658359][ T3910] EXT4-fs (loop4): 1 truncate cleaned up [ 855.664877][ T3910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.685155][ T3910] FAULT_INJECTION: forcing a failure. [ 855.685155][ T3910] name failslab, interval 1, probability 0, space 0, times 0 [ 855.697882][ T3910] CPU: 0 UID: 0 PID: 3910 Comm: syz.4.14902 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 855.708926][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 855.719081][ T3910] Call Trace: [ 855.722468][ T3910] [ 855.725422][ T3910] dump_stack_lvl+0xf2/0x150 [ 855.730052][ T3910] dump_stack+0x15/0x1a [ 855.734366][ T3910] should_fail_ex+0x223/0x230 [ 855.739119][ T3910] should_failslab+0x8f/0xb0 [ 855.743796][ T3910] kmem_cache_alloc_noprof+0x52/0x320 [ 855.749307][ T3910] ? getname_flags+0x81/0x3b0 [ 855.754026][ T3910] getname_flags+0x81/0x3b0 [ 855.758647][ T3910] __x64_sys_unlink+0x21/0x40 [ 855.763480][ T3910] x64_sys_call+0x2329/0x2dc0 [ 855.768185][ T3910] do_syscall_64+0xc9/0x1c0 [ 855.772721][ T3910] ? clear_bhb_loop+0x55/0xb0 [ 855.777469][ T3910] ? clear_bhb_loop+0x55/0xb0 [ 855.782197][ T3910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.788341][ T3910] RIP: 0033:0x7fc9392d5d29 [ 855.792781][ T3910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.812611][ T3910] RSP: 002b:00007fc937941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 855.821083][ T3910] RAX: ffffffffffffffda RBX: 00007fc9394c5fa0 RCX: 00007fc9392d5d29 [ 855.829124][ T3910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 855.837213][ T3910] RBP: 00007fc937941090 R08: 0000000000000000 R09: 0000000000000000 [ 855.845218][ T3910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.853227][ T3910] R13: 0000000000000000 R14: 00007fc9394c5fa0 R15: 00007fff5c8f3e78 [ 855.861250][ T3910] [ 855.877303][ T3910] Invalid ELF header magic: != ELF [ 855.966816][ T3382] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.997531][ T3946] siw: device registration error -23 [ 856.117262][ T3967] loop4: detected capacity change from 0 to 256 [ 856.165431][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 856.165450][ T29] audit: type=1326 audit(1735608602.919:43624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.4.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 856.183907][ T3980] loop1: detected capacity change from 0 to 128 [ 856.233660][ T29] audit: type=1326 audit(1735608602.919:43625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.4.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 856.257434][ T29] audit: type=1326 audit(1735608602.919:43626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.4.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 856.281284][ T29] audit: type=1326 audit(1735608602.919:43627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.4.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 856.304959][ T29] audit: type=1326 audit(1735608602.919:43628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.4.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 856.328632][ T29] audit: type=1326 audit(1735608602.919:43629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.4.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 856.331129][ T3996] 9pnet_fd: Insufficient options for proto=fd [ 856.352262][ T29] audit: type=1326 audit(1735608602.919:43630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.4.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 856.352301][ T29] audit: type=1326 audit(1735608602.919:43631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.4.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 856.352334][ T29] audit: type=1326 audit(1735608602.919:43632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.4.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 856.352388][ T29] audit: type=1326 audit(1735608602.919:43633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.4.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 856.502843][ T4001] loop1: detected capacity change from 0 to 128 [ 856.630158][ T4001] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 856.720518][ T4001] ext4 filesystem being mounted at /567/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 856.765257][ T4054] siw: device registration error -23 [ 856.818536][T26164] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 856.854894][ T4066] program syz.9.14932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 856.911472][ T4067] loop4: detected capacity change from 0 to 256 [ 856.977539][ T4076] loop1: detected capacity change from 0 to 256 [ 856.986303][ T4067] syz.4.14933: attempt to access beyond end of device [ 856.986303][ T4067] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 857.046679][ T4088] tmpfs: Bad value for 'mpol' [ 857.188005][ T4100] loop9: detected capacity change from 0 to 256 [ 857.227148][ T4100] Buffer I/O error on dev loop9, logical block 65, lost async page write [ 857.262545][ T4106] loop1: detected capacity change from 0 to 512 [ 857.287334][ T4106] loop1: detected capacity change from 0 to 1024 [ 857.304832][ T4108] loop9: detected capacity change from 0 to 512 [ 857.316801][ T4106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.332267][ T4106] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.366139][T26164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.378763][ T4108] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #17: comm syz.9.14948: iget: bogus i_mode (0) [ 857.391614][ T4108] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.14948: couldn't read orphan inode 17 (err -117) [ 857.399858][ T4072] netlink: 'syz.8.14934': attribute type 3 has an invalid length. [ 857.404743][ T4108] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.425373][ T4108] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.487087][ T4121] loop1: detected capacity change from 0 to 128 [ 857.549027][ T4121] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 857.565191][ T4121] ext4 filesystem being mounted at /574/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 857.663040][ T4121] lo speed is unknown, defaulting to 1000 [ 857.801420][T26164] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 857.931797][ T4145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 857.956842][ T4145] bond0: (slave bond1): Enslaving as an active interface with an up link [ 858.076207][ T4150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.090054][ T4150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.115497][ T4162] siw: device registration error -23 [ 858.174344][ T4170] program syz.4.14971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.244189][ T4179] loop1: detected capacity change from 0 to 1024 [ 858.324451][ T4193] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 858.330585][ T4190] loop4: detected capacity change from 0 to 256 [ 858.342074][ T4179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.376873][ T4190] bio_check_eod: 4 callbacks suppressed [ 858.376891][ T4190] syz.4.14981: attempt to access beyond end of device [ 858.376891][ T4190] loop4: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 858.578430][ T4215] program syz.4.14987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.592211][ T4216] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.619046][ T4218] loop4: detected capacity change from 0 to 128 [ 858.634547][ T4216] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.637204][ T4220] loop9: detected capacity change from 0 to 128 [ 858.687741][ T4216] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.736120][ T4216] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.785001][ T4227] loop4: detected capacity change from 0 to 256 [ 858.808185][ T4227] syz.4.14993: attempt to access beyond end of device [ 858.808185][ T4227] loop4: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 858.814418][ T4216] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.834182][ T4216] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.849467][ T4216] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.865225][ T4216] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.884435][ T4233] loop4: detected capacity change from 0 to 256 [ 858.930737][ T4233] syz.4.14995: attempt to access beyond end of device [ 858.930737][ T4233] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 858.953405][ T4233] syz.4.14995: attempt to access beyond end of device [ 858.953405][ T4233] loop4: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 858.967742][ T4233] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 858.976431][ T4233] syz.4.14995: attempt to access beyond end of device [ 858.976431][ T4233] loop4: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 859.008473][ T4243] __nla_validate_parse: 12 callbacks suppressed [ 859.008489][ T4243] netlink: 96 bytes leftover after parsing attributes in process `syz.8.15000'. [ 859.053463][ T4248] loop4: detected capacity change from 0 to 512 [ 859.066843][T26164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.081537][ T4248] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 859.093185][ T4248] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 859.103609][ T4248] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.15001: Corrupt directory, running e2fsck is recommended [ 859.104563][ T4255] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15005'. [ 859.126139][ T4248] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 859.174462][ T4260] loop1: detected capacity change from 0 to 128 [ 859.181316][ T4248] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.15001: corrupted in-inode xattr: invalid ea_ino [ 859.214864][ T4258] netlink: 96 bytes leftover after parsing attributes in process `syz.5.15006'. [ 859.226434][ T4248] EXT4-fs (loop4): Remounting filesystem read-only [ 859.239386][ T4248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.264515][ T4248] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 859.273464][ T4248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.286810][ T4267] 9pnet_fd: Insufficient options for proto=fd [ 859.459965][ T4278] netlink: 'syz.8.15013': attribute type 1 has an invalid length. [ 859.506706][ T4284] netlink: 96 bytes leftover after parsing attributes in process `syz.5.15012'. [ 859.545881][ T4290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15018'. [ 859.629857][ T4298] loop9: detected capacity change from 0 to 256 [ 859.649238][ T4298] netlink: 96 bytes leftover after parsing attributes in process `syz.9.15020'. [ 859.776502][ T4311] macvtap0: entered promiscuous mode [ 859.782907][ T4311] macvtap0: left promiscuous mode [ 859.808469][ T4306] loop9: detected capacity change from 0 to 512 [ 860.172927][ T4306] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.186332][ T4306] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.224587][ T4306] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.278689][ T4328] loop1: detected capacity change from 0 to 256 [ 860.458170][ T4328] netlink: 96 bytes leftover after parsing attributes in process `syz.1.15032'. [ 860.490841][ T4339] syz.1.15032: attempt to access beyond end of device [ 860.490841][ T4339] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 860.513546][ T4325] lo speed is unknown, defaulting to 1000 [ 860.520582][ T4328] syz.1.15032: attempt to access beyond end of device [ 860.520582][ T4328] loop1: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 860.534864][ T4328] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 860.551946][ T4328] syz.1.15032: attempt to access beyond end of device [ 860.551946][ T4328] loop1: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 860.614162][T19499] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.714646][T19499] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.729075][ T4358] loop9: detected capacity change from 0 to 256 [ 860.741831][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 860.814401][T19499] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.818087][ T4372] FAULT_INJECTION: forcing a failure. [ 860.818087][ T4372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.837404][ T4372] CPU: 1 UID: 0 PID: 4372 Comm: syz.4.15046 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 860.848330][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 860.858405][ T4372] Call Trace: [ 860.861693][ T4372] [ 860.864630][ T4372] dump_stack_lvl+0xf2/0x150 [ 860.869252][ T4372] dump_stack+0x15/0x1a [ 860.873520][ T4372] should_fail_ex+0x223/0x230 [ 860.878226][ T4372] should_fail+0xb/0x10 [ 860.882426][ T4372] should_fail_usercopy+0x1a/0x20 [ 860.887525][ T4372] _copy_from_user+0x1e/0xb0 [ 860.892377][ T4372] copy_msghdr_from_user+0x54/0x2a0 [ 860.897601][ T4372] ? __fget_files+0x17c/0x1c0 [ 860.902388][ T4372] __sys_sendmsg+0x13e/0x230 [ 860.907111][ T4372] __x64_sys_sendmsg+0x46/0x50 [ 860.911887][ T4372] x64_sys_call+0x2734/0x2dc0 [ 860.916584][ T4372] do_syscall_64+0xc9/0x1c0 [ 860.921228][ T4372] ? clear_bhb_loop+0x55/0xb0 [ 860.925968][ T4372] ? clear_bhb_loop+0x55/0xb0 [ 860.930654][ T4372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.936576][ T4372] RIP: 0033:0x7fc9392d5d29 [ 860.941064][ T4372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.960693][ T4372] RSP: 002b:00007fc937941038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.969165][ T4372] RAX: ffffffffffffffda RBX: 00007fc9394c5fa0 RCX: 00007fc9392d5d29 [ 860.977146][ T4372] RDX: 0000000000040000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 860.985138][ T4372] RBP: 00007fc937941090 R08: 0000000000000000 R09: 0000000000000000 [ 860.993204][ T4372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.001238][ T4372] R13: 0000000000000000 R14: 00007fc9394c5fa0 R15: 00007fff5c8f3e78 [ 861.009222][ T4372] [ 861.027126][ T29] kauditd_printk_skb: 1014 callbacks suppressed [ 861.027145][ T29] audit: type=1326 audit(1735608608.022:44648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.8.15048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12f215d29 code=0x7ffc0000 [ 861.032632][ T4376] syz.9.15040: attempt to access beyond end of device [ 861.032632][ T4376] loop9: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 861.033489][ T29] audit: type=1326 audit(1735608608.022:44649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.8.15048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12f215d29 code=0x7ffc0000 [ 861.062611][ T4376] syz.9.15040: attempt to access beyond end of device [ 861.062611][ T4376] loop9: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 861.107873][ T29] audit: type=1326 audit(1735608608.032:44650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.8.15048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff12f215d29 code=0x7ffc0000 [ 861.109167][ T4376] Buffer I/O error on dev loop9, logical block 65, lost async page write [ 861.131955][ T29] audit: type=1326 audit(1735608608.032:44651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.8.15048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12f215d29 code=0x7ffc0000 [ 861.131997][ T29] audit: type=1326 audit(1735608608.032:44652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.8.15048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff12f214690 code=0x7ffc0000 [ 861.132030][ T29] audit: type=1326 audit(1735608608.032:44653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.8.15048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12f215d29 code=0x7ffc0000 [ 861.132065][ T29] audit: type=1326 audit(1735608608.032:44654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.8.15048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff12f215d29 code=0x7ffc0000 [ 861.132107][ T29] audit: type=1326 audit(1735608608.032:44655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.8.15048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12f215d29 code=0x7ffc0000 [ 861.132141][ T29] audit: type=1326 audit(1735608608.032:44656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.8.15048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff12f215d29 code=0x7ffc0000 [ 861.132178][ T29] audit: type=1326 audit(1735608608.032:44657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz.8.15048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12f215d29 code=0x7ffc0000 [ 861.164490][ T4379] loop4: detected capacity change from 0 to 256 [ 861.314433][ T4358] netlink: 96 bytes leftover after parsing attributes in process `syz.9.15040'. [ 861.366811][T19499] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.386997][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.394176][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.406178][ T4325] bridge_slave_0: entered allmulticast mode [ 861.408787][ T4389] program syz.1.15054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.414134][ T4325] bridge_slave_0: entered promiscuous mode [ 861.428522][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.436356][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.444321][ T4325] bridge_slave_1: entered allmulticast mode [ 861.451764][ T4325] bridge_slave_1: entered promiscuous mode [ 861.461085][ T4386] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 861.471994][ T4391] program syz.9.15053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.484562][ T4384] netlink: 96 bytes leftover after parsing attributes in process `syz.8.15051'. [ 861.503961][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.530138][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.596305][ T4397] loop1: detected capacity change from 0 to 256 [ 861.685819][ T4409] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 861.734062][ T4418] program syz.9.15064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.774247][T19499] bond0 (unregistering): Released all slaves [ 861.783467][T19499] bond1 (unregistering): Released all slaves [ 861.792805][ T4422] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15066'. [ 861.822621][ T4325] team0: Port device team_slave_0 added [ 861.830707][ T4325] team0: Port device team_slave_1 added [ 861.857347][ T4424] loop1: detected capacity change from 0 to 256 [ 861.887829][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.894952][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.921582][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.963992][T19499] hsr_slave_0: left promiscuous mode [ 861.969743][T19499] hsr_slave_1: left promiscuous mode [ 861.984957][T19499] veth1_macvtap: left promiscuous mode [ 861.987421][ T4430] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 861.990514][T19499] veth0_macvtap: left promiscuous mode [ 862.004588][T19499] veth1_vlan: left promiscuous mode [ 862.009848][T19499] veth0_vlan: left promiscuous mode [ 862.217447][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.224756][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.250835][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.350859][ T4325] hsr_slave_0: entered promiscuous mode [ 862.409895][ T4325] hsr_slave_1: entered promiscuous mode [ 862.454284][ T4436] loop9: detected capacity change from 0 to 256 [ 862.467197][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.478555][ T4325] Cannot create hsr debugfs directory [ 862.577036][ T4436] Buffer I/O error on dev loop9, logical block 65, lost async page write [ 862.622290][ T4458] loop1: detected capacity change from 0 to 256 [ 862.671878][ T4463] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 862.683477][ T4463] vlan2: entered allmulticast mode [ 862.688757][ T4463] bridge_slave_0: entered allmulticast mode [ 862.711688][ T4463] bridge_slave_0: left allmulticast mode [ 862.744123][ T4458] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 862.839441][ T4483] FAULT_INJECTION: forcing a failure. [ 862.839441][ T4483] name failslab, interval 1, probability 0, space 0, times 0 [ 862.852876][ T4483] CPU: 1 UID: 0 PID: 4483 Comm: syz.4.15089 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 862.863737][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 862.873908][ T4483] Call Trace: [ 862.877286][ T4483] [ 862.880270][ T4483] dump_stack_lvl+0xf2/0x150 [ 862.885027][ T4483] dump_stack+0x15/0x1a [ 862.889245][ T4483] should_fail_ex+0x223/0x230 [ 862.894106][ T4483] should_failslab+0x8f/0xb0 [ 862.898766][ T4483] kmem_cache_alloc_noprof+0x52/0x320 [ 862.904155][ T4483] ? security_inode_alloc+0x37/0x100 [ 862.909542][ T4483] security_inode_alloc+0x37/0x100 [ 862.914688][ T4483] inode_init_always_gfp+0x4a2/0x4f0 [ 862.920002][ T4483] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 862.925829][ T4483] alloc_inode+0x82/0x160 [ 862.930235][ T4483] new_inode+0x1e/0x100 [ 862.934412][ T4483] hugetlbfs_get_inode+0x7d/0x380 [ 862.939453][ T4483] hugetlb_file_setup+0x188/0x3c0 [ 862.944517][ T4483] ksys_mmap_pgoff+0x172/0x330 [ 862.949305][ T4483] x64_sys_call+0x1940/0x2dc0 [ 862.954011][ T4483] do_syscall_64+0xc9/0x1c0 [ 862.958579][ T4483] ? clear_bhb_loop+0x55/0xb0 [ 862.963286][ T4483] ? clear_bhb_loop+0x55/0xb0 [ 862.967975][ T4483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.974018][ T4483] RIP: 0033:0x7fc9392d5d29 [ 862.978548][ T4483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.998247][ T4483] RSP: 002b:00007fc937941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 863.006671][ T4483] RAX: ffffffffffffffda RBX: 00007fc9394c5fa0 RCX: 00007fc9392d5d29 [ 863.014738][ T4483] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000000020000000 [ 863.022744][ T4483] RBP: 00007fc937941090 R08: ffffffffffffffff R09: 0000000000000000 [ 863.030734][ T4483] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 863.038712][ T4483] R13: 0000000000000000 R14: 00007fc9394c5fa0 R15: 00007fff5c8f3e78 [ 863.046747][ T4483] [ 863.111906][ T4325] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 863.123617][ T4325] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 863.136746][ T4325] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 863.147887][ T4325] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 863.264063][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.312956][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.337182][ T4497] loop4: detected capacity change from 0 to 256 [ 863.359004][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.366197][ T9974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.384240][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.391453][ T9974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.424681][ T4325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 863.435185][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 863.460753][ T4502] siw: device registration error -23 [ 863.469531][ T4497] bio_check_eod: 14 callbacks suppressed [ 863.469550][ T4497] syz.4.15095: attempt to access beyond end of device [ 863.469550][ T4497] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 863.544334][ T4509] syz.4.15095: attempt to access beyond end of device [ 863.544334][ T4509] loop4: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 863.558044][ T4509] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 863.569355][ T4509] syz.4.15095: attempt to access beyond end of device [ 863.569355][ T4509] loop4: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 863.609158][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.618429][ T4516] siw: device registration error -23 [ 863.642234][ T4522] FAULT_INJECTION: forcing a failure. [ 863.642234][ T4522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.655439][ T4522] CPU: 1 UID: 0 PID: 4522 Comm: syz.4.15103 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 863.666300][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 863.676387][ T4522] Call Trace: [ 863.679689][ T4522] [ 863.682645][ T4522] dump_stack_lvl+0xf2/0x150 [ 863.687368][ T4522] dump_stack+0x15/0x1a [ 863.691641][ T4522] should_fail_ex+0x223/0x230 [ 863.696439][ T4522] should_fail+0xb/0x10 [ 863.700626][ T4522] should_fail_usercopy+0x1a/0x20 [ 863.705691][ T4522] _copy_from_user+0x1e/0xb0 [ 863.710358][ T4522] xsk_setsockopt+0x1a2/0x520 [ 863.715111][ T4522] ? __pfx_xsk_setsockopt+0x10/0x10 [ 863.720432][ T4522] __sys_setsockopt+0x187/0x200 [ 863.725385][ T4522] __x64_sys_setsockopt+0x66/0x80 [ 863.730504][ T4522] x64_sys_call+0x282e/0x2dc0 [ 863.735199][ T4522] do_syscall_64+0xc9/0x1c0 [ 863.739718][ T4522] ? clear_bhb_loop+0x55/0xb0 [ 863.744413][ T4522] ? clear_bhb_loop+0x55/0xb0 [ 863.749129][ T4522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.755057][ T4522] RIP: 0033:0x7fc9392d5d29 [ 863.759565][ T4522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.779368][ T4522] RSP: 002b:00007fc937941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 863.787897][ T4522] RAX: ffffffffffffffda RBX: 00007fc9394c5fa0 RCX: 00007fc9392d5d29 [ 863.795892][ T4522] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 863.803890][ T4522] RBP: 00007fc937941090 R08: 0000000000000004 R09: 0000000000000000 [ 863.811872][ T4522] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 863.819919][ T4522] R13: 0000000000000000 R14: 00007fc9394c5fa0 R15: 00007fff5c8f3e78 [ 863.827981][ T4522] [ 863.851523][ T4516] loop9: detected capacity change from 0 to 512 [ 863.858372][ T4516] EXT4-fs: Ignoring removed mblk_io_submit option [ 863.918291][ T4516] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 863.941318][ T4325] veth0_vlan: entered promiscuous mode [ 863.951065][ T4325] veth1_vlan: entered promiscuous mode [ 863.980288][ T4325] veth0_macvtap: entered promiscuous mode [ 863.989613][ T4325] veth1_macvtap: entered promiscuous mode [ 864.003212][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.013740][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.024271][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.034737][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.045269][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.055938][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.066517][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.077556][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.087419][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.098471][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.108412][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.119441][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.129318][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.140318][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.150408][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.161503][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.171407][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.182435][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.192336][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.203454][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.213477][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.224502][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.234497][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.245525][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.255430][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.266554][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.279966][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.288658][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.299820][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.309692][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.320856][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.330751][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.341943][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.351867][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.363033][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.372995][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.384159][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.393997][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.405029][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.414880][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.425979][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.435903][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.447086][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.457012][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.468196][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.478091][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.489212][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.499081][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.510183][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.510200][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.531391][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.541253][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.552424][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.562304][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.573639][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.576430][ T1266] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.594023][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.617107][ T4325] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.626050][ T4325] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.634891][ T4325] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.643740][ T4325] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.682327][ T4549] siw: device registration error -23 [ 865.015761][ T4562] loop1: detected capacity change from 0 to 256 [ 865.047063][ T4562] __nla_validate_parse: 5 callbacks suppressed [ 865.047079][ T4562] netlink: 96 bytes leftover after parsing attributes in process `syz.1.15112'. [ 865.120243][ T4557] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.15109'. [ 865.139620][ T4562] syz.1.15112: attempt to access beyond end of device [ 865.139620][ T4562] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 865.186064][ T4562] syz.1.15112: attempt to access beyond end of device [ 865.186064][ T4562] loop1: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 865.199695][ T4562] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 865.214108][ T4579] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.225583][ T4562] syz.1.15112: attempt to access beyond end of device [ 865.225583][ T4562] loop1: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 865.254424][ T4583] bond1: entered promiscuous mode [ 865.260046][ T4583] bond1: entered allmulticast mode [ 865.265378][ T4583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 865.286474][ T4583] bond1 (unregistering): Released all slaves [ 865.344573][ T4586] netlink: 96 bytes leftover after parsing attributes in process `syz.8.15122'. [ 865.390465][ T4592] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 865.655857][ T4612] vlan2: entered allmulticast mode [ 865.686990][ T4623] loop4: detected capacity change from 0 to 256 [ 865.716997][ T4623] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15135'. [ 865.742458][ T4623] syz.4.15135: attempt to access beyond end of device [ 865.742458][ T4623] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 865.757501][ T4589] lo speed is unknown, defaulting to 1000 [ 865.759401][ T4623] syz.4.15135: attempt to access beyond end of device [ 865.759401][ T4623] loop4: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 865.776874][ T4623] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 865.785593][ T4623] syz.4.15135: attempt to access beyond end of device [ 865.785593][ T4623] loop4: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 865.800057][ T29] kauditd_printk_skb: 782 callbacks suppressed [ 865.800073][ T29] audit: type=1326 audit(1735608613.030:45440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.15135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 865.886362][ T29] audit: type=1326 audit(1735608613.114:45441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 865.910761][ T29] audit: type=1326 audit(1735608613.114:45442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 865.935203][ T29] audit: type=1326 audit(1735608613.114:45443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 865.953152][ T4589] chnl_net:caif_netlink_parms(): no params data found [ 865.959625][ T29] audit: type=1326 audit(1735608613.114:45444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 865.994748][ T29] audit: type=1326 audit(1735608613.240:45445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.15141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 866.012588][ T4642] vlan2: entered promiscuous mode [ 866.019292][ T29] audit: type=1326 audit(1735608613.240:45446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.15141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 866.047748][ T29] audit: type=1326 audit(1735608613.240:45447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.15141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 866.072050][ T29] audit: type=1326 audit(1735608613.240:45448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.15141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 866.096335][ T29] audit: type=1326 audit(1735608613.240:45449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.15141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 866.195957][ T4651] loop4: detected capacity change from 0 to 256 [ 866.209064][ T4589] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.216974][ T4589] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.233932][ T4589] bridge_slave_0: entered allmulticast mode [ 866.241877][ T4589] bridge_slave_0: entered promiscuous mode [ 866.248546][ T4651] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15145'. [ 866.260969][ T4589] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.268806][ T4589] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.273351][ T4651] syz.4.15145: attempt to access beyond end of device [ 866.273351][ T4651] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 866.276355][ T4589] bridge_slave_1: entered allmulticast mode [ 866.299558][ T4651] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 866.316723][ T4589] bridge_slave_1: entered promiscuous mode [ 866.339422][ T4660] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.352578][ T4662] loop9: detected capacity change from 0 to 164 [ 866.371049][ T4589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.382360][ T4589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.392764][ T4660] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.428247][ T4589] team0: Port device team_slave_0 added [ 866.435368][ T4589] team0: Port device team_slave_1 added [ 866.451324][ T4660] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.462657][ T4668] siw: device registration error -23 [ 866.495084][ T4589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.502895][ T4589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.529680][ T4589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.541417][ T4589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.549212][ T4589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.575947][ T4589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.587721][ T4674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 866.600874][ T4660] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.640306][ T4589] hsr_slave_0: entered promiscuous mode [ 866.648155][ T4589] hsr_slave_1: entered promiscuous mode [ 866.654960][ T4589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.662678][ T4589] Cannot create hsr debugfs directory [ 866.703839][ T4686] vlan2: entered allmulticast mode [ 866.721517][ T4660] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.739023][ T4660] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.769525][ T4660] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.783491][ T4660] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.813429][ T4589] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.832022][ T4694] siw: device registration error -23 [ 866.845914][ T4694] loop4: detected capacity change from 0 to 512 [ 866.852631][ T4694] EXT4-fs: Ignoring removed mblk_io_submit option [ 866.864129][ T4589] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.881407][ T4694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.900258][ T4579] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.923911][ T4699] siw: device registration error -23 [ 866.931767][ T4589] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.945177][ T3382] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.013348][ T4589] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.092974][ T4589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 867.103008][ T4589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 867.113637][ T4589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 867.123198][ T4589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 867.148394][ T4722] loop4: detected capacity change from 0 to 256 [ 867.169836][ T4722] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15172'. [ 867.186966][ T4589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.200007][ T4589] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.208854][ T4722] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 867.211158][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.224452][ T9974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.245389][ T9968] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.252561][ T9968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.277265][ T4589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 867.293157][ T4729] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 867.403351][ T4743] ref_ctr_offset mismatch. inode: 0x252 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 867.423545][ T4589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.522256][ T4589] veth0_vlan: entered promiscuous mode [ 867.530290][ T4589] veth1_vlan: entered promiscuous mode [ 867.548929][ T4589] veth0_macvtap: entered promiscuous mode [ 867.569537][ T4589] veth1_macvtap: entered promiscuous mode [ 867.581854][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.593171][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.603380][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.614492][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.624351][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.635578][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.645448][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.656832][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.666700][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.677811][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.687699][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.698698][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.708552][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.719598][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.729504][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.740615][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.750460][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.761454][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.771292][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.782480][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.792470][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.803477][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.813350][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.824400][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.834335][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.845440][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.855305][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.866528][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.878495][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.887031][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.898250][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.908282][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.919445][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.929339][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.940434][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.950309][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.961528][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.971486][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.982679][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.992644][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.003799][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.013686][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.024947][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.034805][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.045985][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.055894][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.067011][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.076953][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.088150][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.098106][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.109358][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.119212][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.130444][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.140361][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.151495][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.161430][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.172628][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.182494][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.193591][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.204571][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.219875][ T4769] vlan2: entered allmulticast mode [ 868.231064][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15189'. [ 868.246275][ T4589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.255139][ T4589] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.263960][ T4589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.272926][ T4589] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.316217][ T4773] netlink: 96 bytes leftover after parsing attributes in process `syz.8.15190'. [ 868.392448][ T4780] loop4: detected capacity change from 0 to 256 [ 868.414974][ T4780] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15191'. [ 868.444112][ T4780] bio_check_eod: 5 callbacks suppressed [ 868.444127][ T4780] syz.4.15191: attempt to access beyond end of device [ 868.444127][ T4780] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 868.466416][ T4791] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 868.477806][ T4579] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.497736][ T4780] syz.4.15191: attempt to access beyond end of device [ 868.497736][ T4780] loop4: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 868.511599][ T4780] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 868.524330][ T4780] syz.4.15191: attempt to access beyond end of device [ 868.524330][ T4780] loop4: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 868.549469][ T4579] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.606268][ T4803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.609311][ T4579] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.618913][ T4803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.635601][ T4579] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.657067][ T4579] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.679386][ T4579] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.703856][ T4805] loop9: detected capacity change from 0 to 256 [ 868.739102][ T4805] syz.9.15203: attempt to access beyond end of device [ 868.739102][ T4805] loop9: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 868.761304][ T4805] syz.9.15203: attempt to access beyond end of device [ 868.761304][ T4805] loop9: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 868.775163][ T4805] Buffer I/O error on dev loop9, logical block 65, lost async page write [ 868.788379][ T4805] syz.9.15203: attempt to access beyond end of device [ 868.788379][ T4805] loop9: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 868.828998][ T4813] program syz.5.15207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.878569][ T4815] loop9: detected capacity change from 0 to 256 [ 868.894637][ T4815] syz.9.15206: attempt to access beyond end of device [ 868.894637][ T4815] loop9: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 868.954469][ T4819] loop5: detected capacity change from 0 to 512 [ 868.971677][ T4819] EXT4-fs (loop5): too many log groups per flexible block group [ 868.979556][ T4819] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 868.992985][ T4819] EXT4-fs (loop5): mount failed [ 869.071457][ T4830] loop5: detected capacity change from 0 to 256 [ 869.108121][ T4830] syz.5.15213: attempt to access beyond end of device [ 869.108121][ T4830] loop5: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 869.127222][ T4830] syz.5.15213: attempt to access beyond end of device [ 869.127222][ T4830] loop5: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 869.141688][ T4830] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 869.155039][ T4830] syz.5.15213: attempt to access beyond end of device [ 869.155039][ T4830] loop5: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 869.204628][ T4841] loop1: detected capacity change from 0 to 128 [ 869.260651][ T4850] netlink: 256 bytes leftover after parsing attributes in process `syz.9.15222'. [ 869.305835][ T4856] loop5: detected capacity change from 0 to 512 [ 869.315954][ T4856] EXT4-fs: Ignoring removed oldalloc option [ 869.348276][ T4856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.15224: Parent and EA inode have the same ino 15 [ 869.367423][ T4856] EXT4-fs (loop5): Remounting filesystem read-only [ 869.374135][ T4856] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 869.386120][ T4856] EXT4-fs (loop5): 1 orphan inode deleted [ 869.392402][ T4856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.415357][ T4856] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 869.423137][ T4856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.542492][ T4874] vlan2: entered promiscuous mode [ 869.559918][ T4879] loop1: detected capacity change from 0 to 512 [ 869.566609][ T4879] EXT4-fs: test_dummy_encryption option not supported [ 869.652005][ T4890] loop1: detected capacity change from 0 to 128 [ 869.739993][ T4904] loop9: detected capacity change from 0 to 256 [ 869.771204][ T4904] Buffer I/O error on dev loop9, logical block 65, lost async page write [ 869.824427][ T4916] FAULT_INJECTION: forcing a failure. [ 869.824427][ T4916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.837707][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: syz.9.15248 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 869.848562][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 869.858744][ T4916] Call Trace: [ 869.862073][ T4916] [ 869.865056][ T4916] dump_stack_lvl+0xf2/0x150 [ 869.869770][ T4916] dump_stack+0x15/0x1a [ 869.873977][ T4916] should_fail_ex+0x223/0x230 [ 869.878689][ T4916] should_fail+0xb/0x10 [ 869.882857][ T4916] should_fail_usercopy+0x1a/0x20 [ 869.887955][ T4916] _copy_from_user+0x1e/0xb0 [ 869.892610][ T4916] move_addr_to_kernel+0x82/0x120 [ 869.897721][ T4916] __sys_sendto+0x12e/0x230 [ 869.902249][ T4916] __x64_sys_sendto+0x78/0x90 [ 869.906936][ T4916] x64_sys_call+0x29fa/0x2dc0 [ 869.911639][ T4916] do_syscall_64+0xc9/0x1c0 [ 869.916335][ T4916] ? clear_bhb_loop+0x55/0xb0 [ 869.921037][ T4916] ? clear_bhb_loop+0x55/0xb0 [ 869.925778][ T4916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.931715][ T4916] RIP: 0033:0x7f9dece25d29 [ 869.936292][ T4916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.956092][ T4916] RSP: 002b:00007f9deb497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 869.964514][ T4916] RAX: ffffffffffffffda RBX: 00007f9ded015fa0 RCX: 00007f9dece25d29 [ 869.972492][ T4916] RDX: 0000000000034000 RSI: 0000000020000500 RDI: 0000000000000004 [ 869.980491][ T4916] RBP: 00007f9deb497090 R08: 0000000020000140 R09: 000000000000001c [ 869.988546][ T4916] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 869.996527][ T4916] R13: 0000000000000000 R14: 00007f9ded015fa0 R15: 00007ffd40d05d08 [ 870.004586][ T4916] [ 870.087152][ T4927] bridge_slave_0: left allmulticast mode [ 870.093560][ T4927] bridge_slave_0: left promiscuous mode [ 870.099275][ T4927] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.110388][ T4927] bridge_slave_1: left allmulticast mode [ 870.116239][ T4927] bridge_slave_1: left promiscuous mode [ 870.121913][ T4927] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.158012][ T4927] bond0: (slave bond_slave_0): Releasing backup interface [ 870.172741][ T4927] bond0: (slave bond_slave_1): Releasing backup interface [ 870.191753][ T4927] team0: Port device team_slave_0 removed [ 870.203452][ T4927] team0: Port device team_slave_1 removed [ 870.211456][ T4927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.212455][ T4939] xt_hashlimit: max too large, truncated to 1048576 [ 870.219054][ T4927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.237044][ T4927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.244963][ T4927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.272704][ T4938] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 870.292466][ T4938] vlan2: entered allmulticast mode [ 870.298407][ T4938] bridge_slave_0: entered allmulticast mode [ 870.306684][ T4938] bridge_slave_0: left allmulticast mode [ 870.619403][ T4958] loop5: detected capacity change from 0 to 256 [ 870.637313][ T4958] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 870.741661][ T4964] netlink: 'syz.4.15265': attribute type 46 has an invalid length. [ 870.749673][ T4964] __nla_validate_parse: 1 callbacks suppressed [ 870.749687][ T4964] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15265'. [ 870.766073][ T29] kauditd_printk_skb: 750 callbacks suppressed [ 870.766145][ T29] audit: type=1326 audit(1735608618.237:46200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.5.15264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dd9c5d29 code=0x7ffc0000 [ 870.796792][ T29] audit: type=1326 audit(1735608618.237:46201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.5.15264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dd9c5d29 code=0x7ffc0000 [ 870.820615][ T29] audit: type=1326 audit(1735608618.237:46202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.5.15264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f17dd9c5d29 code=0x7ffc0000 [ 870.845603][ T29] audit: type=1326 audit(1735608618.237:46203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.5.15264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dd9c5d29 code=0x7ffc0000 [ 870.870124][ T29] audit: type=1326 audit(1735608618.237:46204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.5.15264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17dd9c5d29 code=0x7ffc0000 [ 870.905441][ T29] audit: type=1326 audit(1735608618.384:46205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 870.929837][ T29] audit: type=1326 audit(1735608618.384:46206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 870.954268][ T29] audit: type=1326 audit(1735608618.384:46207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 870.954378][ T4939] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.978715][ T29] audit: type=1326 audit(1735608618.384:46208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 870.985147][ T4939] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.009405][ T29] audit: type=1326 audit(1735608618.384:46209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 871.108427][ T4939] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 871.310985][ T4998] loop1: detected capacity change from 0 to 128 [ 871.318700][ T4999] loop5: detected capacity change from 0 to 128 [ 871.338291][ T4998] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 871.370516][ T4998] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 871.441713][ T4998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15277'. [ 871.545215][ T4589] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 871.561811][ T5016] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 871.574412][ T5016] vlan2: entered allmulticast mode [ 871.712099][ T5033] FAULT_INJECTION: forcing a failure. [ 871.712099][ T5033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.726004][ T5033] CPU: 1 UID: 0 PID: 5033 Comm: syz.5.15290 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 871.727398][ T5030] loop4: detected capacity change from 0 to 512 [ 871.736786][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 871.736806][ T5033] Call Trace: [ 871.736814][ T5033] [ 871.736825][ T5033] dump_stack_lvl+0xf2/0x150 [ 871.764012][ T5033] dump_stack+0x15/0x1a [ 871.768198][ T5033] should_fail_ex+0x223/0x230 [ 871.772899][ T5033] should_fail+0xb/0x10 [ 871.777080][ T5033] should_fail_usercopy+0x1a/0x20 [ 871.782185][ T5033] _copy_from_user+0x1e/0xb0 [ 871.786924][ T5033] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 871.792232][ T5033] map_delete_elem+0x131/0x300 [ 871.797012][ T5033] __sys_bpf+0x514/0x7a0 [ 871.801270][ T5033] __x64_sys_bpf+0x43/0x50 [ 871.805804][ T5033] x64_sys_call+0x2914/0x2dc0 [ 871.810581][ T5033] do_syscall_64+0xc9/0x1c0 [ 871.815217][ T5033] ? clear_bhb_loop+0x55/0xb0 [ 871.820002][ T5033] ? clear_bhb_loop+0x55/0xb0 [ 871.824766][ T5033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.830788][ T5033] RIP: 0033:0x7f17dd9c5d29 [ 871.835237][ T5033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.854859][ T5033] RSP: 002b:00007f17dc037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 871.863429][ T5033] RAX: ffffffffffffffda RBX: 00007f17ddbb5fa0 RCX: 00007f17dd9c5d29 [ 871.871416][ T5033] RDX: 0000000000000020 RSI: 00000000200007c0 RDI: 0000000000000003 [ 871.879405][ T5033] RBP: 00007f17dc037090 R08: 0000000000000000 R09: 0000000000000000 [ 871.887457][ T5033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.895486][ T5033] R13: 0000000000000000 R14: 00007f17ddbb5fa0 R15: 00007fff8e4f5f08 [ 871.903549][ T5033] [ 871.941852][ T5030] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 872.013608][ T5050] loop1: detected capacity change from 0 to 128 [ 872.032755][ T5050] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 872.038847][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15298'. [ 872.114023][ T5060] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 872.134223][ T5060] vlan2: entered allmulticast mode [ 872.140069][ T5060] bridge_slave_0: entered allmulticast mode [ 872.143192][ T5064] loop9: detected capacity change from 0 to 512 [ 872.166385][ T5060] bridge_slave_0: left allmulticast mode [ 872.168961][ T5050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15292'. [ 872.206698][ T5071] loop4: detected capacity change from 0 to 256 [ 872.215896][ T5064] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 872.243090][ T5071] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 872.279317][ T5080] loop1: detected capacity change from 0 to 1024 [ 872.282305][ T5081] syz.8.15308[5081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 872.285925][ T5081] syz.8.15308[5081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 872.286377][ T5080] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 872.297928][ T5081] syz.8.15308[5081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 872.371064][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15304'. [ 872.439366][ T5094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.454640][ T5094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.489873][ T5104] loop4: detected capacity change from 0 to 128 [ 872.509822][ T5104] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 872.551019][ T5104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15316'. [ 872.590875][ T5108] loop4: detected capacity change from 0 to 256 [ 872.618571][ T5108] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 872.660761][ T5111] loop4: detected capacity change from 0 to 256 [ 872.685185][ T5111] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 872.722337][ T5116] tls_set_device_offload_rx: netdev not found [ 872.899604][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15322'. [ 872.915852][ T5134] bridge_slave_1: left allmulticast mode [ 872.921567][ T5134] bridge_slave_1: left promiscuous mode [ 872.927490][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.955837][ T5134] bridge_slave_0: left allmulticast mode [ 872.961544][ T5134] bridge_slave_0: left promiscuous mode [ 872.967670][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.995265][ T5140] FAULT_INJECTION: forcing a failure. [ 872.995265][ T5140] name failslab, interval 1, probability 0, space 0, times 0 [ 873.008015][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: syz.9.15323 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 873.018863][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 873.029014][ T5140] Call Trace: [ 873.032315][ T5140] [ 873.035335][ T5140] dump_stack_lvl+0xf2/0x150 [ 873.040013][ T5140] dump_stack+0x15/0x1a [ 873.044197][ T5140] should_fail_ex+0x223/0x230 [ 873.048892][ T5140] should_failslab+0x8f/0xb0 [ 873.053506][ T5140] kmem_cache_alloc_noprof+0x52/0x320 [ 873.058956][ T5140] ? audit_log_start+0x34c/0x6b0 [ 873.063925][ T5140] audit_log_start+0x34c/0x6b0 [ 873.068736][ T5140] audit_seccomp+0x4b/0x130 [ 873.073280][ T5140] __seccomp_filter+0x6fa/0x1180 [ 873.078321][ T5140] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 873.084076][ T5140] ? vfs_write+0x596/0x920 [ 873.088603][ T5140] __secure_computing+0x9f/0x1c0 [ 873.090740][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15324'. [ 873.093596][ T5140] syscall_trace_enter+0xd1/0x1f0 [ 873.107569][ T5140] ? fpregs_assert_state_consistent+0x83/0xa0 [ 873.113848][ T5140] do_syscall_64+0xaa/0x1c0 [ 873.118357][ T5140] ? clear_bhb_loop+0x55/0xb0 [ 873.123039][ T5140] ? clear_bhb_loop+0x55/0xb0 [ 873.127752][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.133666][ T5140] RIP: 0033:0x7f9dece25d29 [ 873.138162][ T5140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.157801][ T5140] RSP: 002b:00007f9deb497038 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 873.157860][ T5140] RAX: ffffffffffffffda RBX: 00007f9ded015fa0 RCX: 00007f9dece25d29 [ 873.157877][ T5140] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 873.157893][ T5140] RBP: 00007f9deb497090 R08: 0000000000000000 R09: 0000000000000000 [ 873.157910][ T5140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.157925][ T5140] R13: 0000000000000000 R14: 00007f9ded015fa0 R15: 00007ffd40d05d08 [ 873.157945][ T5140] [ 873.238413][ T5150] loop9: detected capacity change from 0 to 128 [ 873.238544][ T5151] loop5: detected capacity change from 0 to 256 [ 873.255229][ T5150] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 873.301222][ T5151] bio_check_eod: 18 callbacks suppressed [ 873.301310][ T5151] syz.5.15326: attempt to access beyond end of device [ 873.301310][ T5151] loop5: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 873.326267][ T5151] syz.5.15326: attempt to access beyond end of device [ 873.326267][ T5151] loop5: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 873.340067][ T5151] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 873.342963][ T5126] lo speed is unknown, defaulting to 1000 [ 873.353266][ T5151] syz.5.15326: attempt to access beyond end of device [ 873.353266][ T5151] loop5: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 873.377961][ T5150] netlink: 20 bytes leftover after parsing attributes in process `syz.9.15327'. [ 873.448818][ T5126] chnl_net:caif_netlink_parms(): no params data found [ 873.522794][ T5170] loop9: detected capacity change from 0 to 128 [ 873.531012][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.538348][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.547002][ T5126] bridge_slave_0: entered allmulticast mode [ 873.554648][ T5126] bridge_slave_0: entered promiscuous mode [ 873.564714][ T5166] vlan2: entered allmulticast mode [ 873.569887][ T5166] bridge_slave_0: entered allmulticast mode [ 873.585585][ T5166] bridge_slave_0: left allmulticast mode [ 873.587822][ T5170] syz.9.15328: attempt to access beyond end of device [ 873.587822][ T5170] loop9: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 873.615817][T19499] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.627278][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.634554][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.642175][ T5126] bridge_slave_1: entered allmulticast mode [ 873.648848][ T5126] bridge_slave_1: entered promiscuous mode [ 873.678773][T19499] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.694487][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.709262][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.720477][ T5179] loop4: detected capacity change from 0 to 128 [ 873.720659][ T5181] loop5: detected capacity change from 0 to 256 [ 873.745779][ T5179] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 873.785964][T19499] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.808452][ T5179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15337'. [ 873.818089][ T5126] team0: Port device team_slave_0 added [ 873.819796][ T5126] team0: Port device team_slave_1 added [ 873.837993][ T5181] syz.5.15336: attempt to access beyond end of device [ 873.837993][ T5181] loop5: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 873.854728][ T5181] syz.5.15336: attempt to access beyond end of device [ 873.854728][ T5181] loop5: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 873.869219][ T5181] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 873.878978][ T5181] syz.5.15336: attempt to access beyond end of device [ 873.878978][ T5181] loop5: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 873.896091][T19499] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.926850][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.933896][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.960628][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.976893][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.983948][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.010117][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.062140][ T5126] hsr_slave_0: entered promiscuous mode [ 874.069743][ T5126] hsr_slave_1: entered promiscuous mode [ 874.078811][ T5126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 874.086634][ T5126] Cannot create hsr debugfs directory [ 874.171197][ T5213] loop5: detected capacity change from 0 to 512 [ 874.202778][ T5213] EXT4-fs (loop5): too many log groups per flexible block group [ 874.210561][ T5213] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 874.218208][ T5213] EXT4-fs (loop5): mount failed [ 874.261344][T19499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.275509][ T5222] loop5: detected capacity change from 0 to 128 [ 874.289005][ T5222] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 874.296524][T19499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.332092][T19499] bond0 (unregistering): (slave bond1): Releasing backup interface [ 874.341478][T19499] bond0 (unregistering): Released all slaves [ 874.351446][T19499] bond1 (unregistering): Released all slaves [ 874.365907][ T5209] vlan2: entered allmulticast mode [ 874.371107][ T5209] bridge_slave_0: entered allmulticast mode [ 874.379479][ T5209] bridge_slave_0: left allmulticast mode [ 874.430784][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.439388][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.474140][ T5228] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 874.519962][T19499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.528462][T19499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.539930][T19499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.548135][T19499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.560935][ T5236] FAULT_INJECTION: forcing a failure. [ 874.560935][ T5236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.574228][ T5236] CPU: 0 UID: 0 PID: 5236 Comm: syz.5.15356 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 874.585124][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 874.595293][ T5236] Call Trace: [ 874.598674][ T5236] [ 874.601760][ T5236] dump_stack_lvl+0xf2/0x150 [ 874.606433][ T5236] dump_stack+0x15/0x1a [ 874.610616][ T5236] should_fail_ex+0x223/0x230 [ 874.615388][ T5236] should_fail+0xb/0x10 [ 874.619585][ T5236] should_fail_usercopy+0x1a/0x20 [ 874.624624][ T5236] _copy_from_user+0x1e/0xb0 [ 874.629338][ T5236] copy_msghdr_from_user+0x54/0x2a0 [ 874.634593][ T5236] ? __fget_files+0x17c/0x1c0 [ 874.639297][ T5236] __sys_sendmsg+0x13e/0x230 [ 874.644021][ T5236] __x64_sys_sendmsg+0x46/0x50 [ 874.648907][ T5236] x64_sys_call+0x2734/0x2dc0 [ 874.653645][ T5236] do_syscall_64+0xc9/0x1c0 [ 874.658219][ T5236] ? clear_bhb_loop+0x55/0xb0 [ 874.663193][ T5236] ? clear_bhb_loop+0x55/0xb0 [ 874.667991][ T5236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.673911][ T5236] RIP: 0033:0x7f17dd9c5d29 [ 874.678353][ T5236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.698273][ T5236] RSP: 002b:00007f17dc037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.706719][ T5236] RAX: ffffffffffffffda RBX: 00007f17ddbb5fa0 RCX: 00007f17dd9c5d29 [ 874.714749][ T5236] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 874.722741][ T5236] RBP: 00007f17dc037090 R08: 0000000000000000 R09: 0000000000000000 [ 874.730777][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.738775][ T5236] R13: 0000000000000000 R14: 00007f17ddbb5fa0 R15: 00007fff8e4f5f08 [ 874.746785][ T5236] [ 874.760648][T19499] veth1_macvtap: left promiscuous mode [ 874.766249][T19499] veth0_macvtap: left promiscuous mode [ 874.771874][T19499] veth1_vlan: left promiscuous mode [ 874.777916][T19499] veth0_vlan: left promiscuous mode [ 874.881767][ T5248] loop9: detected capacity change from 0 to 128 [ 874.888523][T19499] team0 (unregistering): Port device team_slave_1 removed [ 874.894938][ T5248] EXT4-fs mount: 14 callbacks suppressed [ 874.894958][ T5248] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 874.913931][T19499] team0 (unregistering): Port device team_slave_0 removed [ 874.913991][ T5248] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 874.965607][ T5232] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 875.052695][ T1266] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 875.142429][ T5272] loop4: detected capacity change from 0 to 128 [ 875.145582][ T5274] FAULT_INJECTION: forcing a failure. [ 875.145582][ T5274] name failslab, interval 1, probability 0, space 0, times 0 [ 875.162017][ T5274] CPU: 1 UID: 0 PID: 5274 Comm: syz.1.15373 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 875.165973][ T5126] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 875.172794][ T5274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 875.189549][ T5274] Call Trace: [ 875.192842][ T5274] [ 875.195835][ T5274] dump_stack_lvl+0xf2/0x150 [ 875.200528][ T5274] dump_stack+0x15/0x1a [ 875.204761][ T5274] should_fail_ex+0x223/0x230 [ 875.209472][ T5274] should_failslab+0x8f/0xb0 [ 875.214152][ T5274] __kmalloc_noprof+0xab/0x3f0 [ 875.218956][ T5274] ? ip_options_get+0x51/0x330 [ 875.223929][ T5274] ip_options_get+0x51/0x330 [ 875.228656][ T5274] ? tcp_release_cb+0xfe/0x380 [ 875.234362][ T5274] do_ip_setsockopt+0x1b23/0x2340 [ 875.239430][ T5274] ip_setsockopt+0x63/0x100 [ 875.244017][ T5274] tcp_setsockopt+0x93/0xb0 [ 875.248631][ T5274] sock_common_setsockopt+0x64/0x80 [ 875.253899][ T5274] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 875.259839][ T5274] __sys_setsockopt+0x187/0x200 [ 875.264738][ T5274] __x64_sys_setsockopt+0x66/0x80 [ 875.269789][ T5274] x64_sys_call+0x282e/0x2dc0 [ 875.274541][ T5274] do_syscall_64+0xc9/0x1c0 [ 875.279066][ T5274] ? clear_bhb_loop+0x55/0xb0 [ 875.283849][ T5274] ? clear_bhb_loop+0x55/0xb0 [ 875.288715][ T5274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.294790][ T5274] RIP: 0033:0x7f01b1785d29 [ 875.299233][ T5274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.319215][ T5274] RSP: 002b:00007f01afdf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 875.327700][ T5274] RAX: ffffffffffffffda RBX: 00007f01b1975fa0 RCX: 00007f01b1785d29 [ 875.335735][ T5274] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 875.343712][ T5274] RBP: 00007f01afdf1090 R08: 0000000000000000 R09: 0000000000000000 [ 875.351691][ T5274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.359714][ T5274] R13: 0000000000000000 R14: 00007f01b1975fa0 R15: 00007ffccb37fed8 [ 875.367706][ T5274] [ 875.383911][ T5272] syz.4.15372: attempt to access beyond end of device [ 875.383911][ T5272] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 875.384138][ T5279] loop5: detected capacity change from 0 to 128 [ 875.407476][ T5126] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 875.420206][ T5126] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 875.433569][ T5279] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 875.447987][ T5126] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 875.448429][ T5279] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 875.520886][ T5289] loop9: detected capacity change from 0 to 512 [ 875.535016][ T29] kauditd_printk_skb: 677 callbacks suppressed [ 875.535035][ T29] audit: type=1326 audit(1735608623.224:46885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.9.15370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9dece5a589 code=0x7ffc0000 [ 875.552589][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.565397][ T29] audit: type=1326 audit(1735608623.224:46886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.9.15370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9decddd347 code=0x7ffc0000 [ 875.565437][ T29] audit: type=1326 audit(1735608623.224:46887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.9.15370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dece25d29 code=0x7ffc0000 [ 875.565477][ T29] audit: type=1326 audit(1735608623.224:46888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.9.15370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dece25d29 code=0x7ffc0000 [ 875.565511][ T29] audit: type=1326 audit(1735608623.224:46889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.9.15370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f9decddca57 code=0x7ffc0000 [ 875.565539][ T29] audit: type=1326 audit(1735608623.224:46890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.9.15370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9decddcab6 code=0x7ffc0000 [ 875.565568][ T29] audit: type=1326 audit(1735608623.224:46891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.9.15370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9dece2592b code=0x7ffc0000 [ 875.565653][ T29] audit: type=1326 audit(1735608623.224:46892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.9.15370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dece25d29 code=0x7ffc0000 [ 875.565754][ T29] audit: type=1326 audit(1735608623.235:46893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.9.15370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dece25d29 code=0x7ffc0000 [ 875.565785][ T29] audit: type=1326 audit(1735608623.235:46894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.9.15370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dece25d29 code=0x7ffc0000 [ 875.579137][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.802696][ T4141] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.809787][ T4141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.823734][ T4325] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 875.857960][ T5294] __nla_validate_parse: 5 callbacks suppressed [ 875.857980][ T5294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15380'. [ 875.877610][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.884746][ T9974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.909012][ T5298] loop1: detected capacity change from 0 to 512 [ 875.939017][ T5126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 875.945794][ T5298] EXT4-fs: inline encryption not supported [ 875.982190][ T5305] loop9: detected capacity change from 0 to 128 [ 876.013803][ T5298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 876.035556][ T5298] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.048318][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.138291][ T4589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.165326][ T5328] loop5: detected capacity change from 0 to 256 [ 876.177288][ T5325] loop4: detected capacity change from 0 to 8192 [ 876.186445][ T5330] loop1: detected capacity change from 0 to 164 [ 876.190838][ T5305] syz.9.15385: attempt to access beyond end of device [ 876.190838][ T5305] loop9: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 876.220125][ T5328] syz.5.15392: attempt to access beyond end of device [ 876.220125][ T5328] loop5: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 876.241543][ T5328] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 876.287797][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15393'. [ 876.336900][ T5341] siw: device registration error -23 [ 876.361466][ T5341] loop5: detected capacity change from 0 to 512 [ 876.377583][ T5341] EXT4-fs: Ignoring removed mblk_io_submit option [ 876.396609][ T5341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.399921][ T5126] veth0_vlan: entered promiscuous mode [ 876.418697][ T5126] veth1_vlan: entered promiscuous mode [ 876.456892][ T5126] veth0_macvtap: entered promiscuous mode [ 876.491669][ T5126] veth1_macvtap: entered promiscuous mode [ 876.519458][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.530145][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.540039][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.550561][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.560590][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.562775][ T4325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.571150][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.571173][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.571207][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.571225][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.571240][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.571301][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.571316][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.571333][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.571358][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.571374][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.571445][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.571463][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.571477][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.571493][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.571507][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.571524][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.571539][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.571556][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.571625][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.571641][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.571658][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.574262][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.806518][ T5364] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 876.814529][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.825328][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.835374][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.845839][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.855827][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.866904][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.876761][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.887283][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.897166][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.907773][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.917714][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.928228][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.938146][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.947740][ T5368] loop1: detected capacity change from 0 to 256 [ 876.948741][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.964888][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.975412][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.980200][ T5368] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 876.985368][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.985420][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.985439][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.985456][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.985469][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.985484][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.985500][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.985624][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.985666][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.985683][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.985701][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.985718][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.988336][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.133396][ T5363] vlan2: entered allmulticast mode [ 877.168710][ T5365] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.187205][ T5126] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.196900][ T5126] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.205893][ T5126] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.206459][ T5373] loop9: detected capacity change from 0 to 164 [ 877.215454][ T5126] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.323824][ T5380] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15321'. [ 877.329239][ T5382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.342181][ T5382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.352821][ T5365] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.360741][ T5384] loop5: detected capacity change from 0 to 256 [ 877.363267][ T5386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5386 comm=syz.1.15406 [ 877.400292][ T5384] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 877.452865][ T5365] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.511726][ T5365] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.529521][ T5399] loop5: detected capacity change from 0 to 256 [ 877.550059][ T5399] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 877.573778][ T5401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.590074][ T5365] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.605254][ T5365] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.620466][ T5406] loop1: detected capacity change from 0 to 164 [ 877.620778][ T5365] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.643388][ T5365] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.777252][ T5424] loop5: detected capacity change from 0 to 256 [ 877.806196][ T5426] loop9: detected capacity change from 0 to 256 [ 877.823545][ T5428] loop5: detected capacity change from 0 to 256 [ 877.848465][ T5428] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 877.852201][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15426'. [ 877.894326][ T5436] xt_hashlimit: max too large, truncated to 1048576 [ 877.904236][ T5433] loop9: detected capacity change from 0 to 256 [ 877.941500][ T5439] hub 6-0:1.0: USB hub found [ 877.946678][ T5439] hub 6-0:1.0: 8 ports detected [ 877.956743][ T5433] Buffer I/O error on dev loop9, logical block 65, lost async page write [ 877.978170][ T5441] loop5: detected capacity change from 0 to 256 [ 878.007160][ T5441] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 878.088538][ T5458] loop5: detected capacity change from 0 to 256 [ 878.106031][ T5458] bio_check_eod: 23 callbacks suppressed [ 878.106051][ T5458] syz.5.15438: attempt to access beyond end of device [ 878.106051][ T5458] loop5: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 878.139266][ T5460] loop9: detected capacity change from 0 to 128 [ 878.152257][ T5460] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 878.178288][ T5460] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 878.192174][ T5463] syz.5.15438: attempt to access beyond end of device [ 878.192174][ T5463] loop5: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 878.225726][ T5463] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 878.239856][ T5463] syz.5.15438: attempt to access beyond end of device [ 878.239856][ T5463] loop5: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 878.248045][ T5469] loop8: detected capacity change from 0 to 512 [ 878.283339][ T1266] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 878.295134][ T5469] EXT4-fs (loop8): too many log groups per flexible block group [ 878.303230][ T5469] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 878.306519][ T5475] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 878.313356][ T5471] hub 6-0:1.0: USB hub found [ 878.318532][ T5469] EXT4-fs (loop8): mount failed [ 878.346313][ T5471] hub 6-0:1.0: 8 ports detected [ 878.365490][ T5478] loop9: detected capacity change from 0 to 256 [ 878.381412][ T5479] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 878.411745][ T5478] syz.9.15446: attempt to access beyond end of device [ 878.411745][ T5478] loop9: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 878.412261][ T5481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.451068][ T5481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.470580][ T5478] syz.9.15446: attempt to access beyond end of device [ 878.470580][ T5478] loop9: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 878.485088][ T5478] Buffer I/O error on dev loop9, logical block 65, lost async page write [ 878.499205][ T5478] syz.9.15446: attempt to access beyond end of device [ 878.499205][ T5478] loop9: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 878.647604][ T5497] FAULT_INJECTION: forcing a failure. [ 878.647604][ T5497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.660863][ T5497] CPU: 0 UID: 0 PID: 5497 Comm: syz.4.15448 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 878.671731][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 878.681881][ T5497] Call Trace: [ 878.685175][ T5497] [ 878.688124][ T5497] dump_stack_lvl+0xf2/0x150 [ 878.692821][ T5497] dump_stack+0x15/0x1a [ 878.697016][ T5497] should_fail_ex+0x223/0x230 [ 878.701721][ T5497] should_fail+0xb/0x10 [ 878.706003][ T5497] should_fail_usercopy+0x1a/0x20 [ 878.711065][ T5497] _copy_from_user+0x1e/0xb0 [ 878.715734][ T5497] __sys_bpf+0x14e/0x7a0 [ 878.720003][ T5497] __x64_sys_bpf+0x43/0x50 [ 878.724500][ T5497] x64_sys_call+0x2914/0x2dc0 [ 878.729197][ T5497] do_syscall_64+0xc9/0x1c0 [ 878.733858][ T5497] ? clear_bhb_loop+0x55/0xb0 [ 878.738564][ T5497] ? clear_bhb_loop+0x55/0xb0 [ 878.743261][ T5497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.749200][ T5497] RIP: 0033:0x7fc9392d5d29 [ 878.753625][ T5497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.773453][ T5497] RSP: 002b:00007fc9378ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 878.781965][ T5497] RAX: ffffffffffffffda RBX: 00007fc9394c6160 RCX: 00007fc9392d5d29 [ 878.789965][ T5497] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 878.797988][ T5497] RBP: 00007fc9378ff090 R08: 0000000000000000 R09: 0000000000000000 [ 878.805981][ T5497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.814417][ T5497] R13: 0000000000000000 R14: 00007fc9394c6160 R15: 00007fff5c8f3e78 [ 878.822505][ T5497] [ 878.924635][ T5401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.944443][ T5502] loop5: detected capacity change from 0 to 128 [ 878.987483][ T5401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.000494][ T5502] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 879.031762][ T5502] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 879.128790][ T5401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.146653][ T4325] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 879.157366][ T5518] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 879.185100][ T5523] vlan2: entered allmulticast mode [ 879.217465][ T5401] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.246557][ T5401] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.264220][ T5401] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.332675][ T5401] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.453405][ T5538] loop5: detected capacity change from 0 to 512 [ 879.460044][ T5538] EXT4-fs: inline encryption not supported [ 879.509892][ T5540] loop1: detected capacity change from 0 to 512 [ 879.516549][ T5540] EXT4-fs: inline encryption not supported [ 879.537053][ T5538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.553743][ T5538] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 879.571574][ T5540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.737992][ T5560] ebt_among: dst integrity fail: 101 [ 879.747366][ T5560] loop8: detected capacity change from 0 to 128 [ 879.814644][ T4325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.830420][ T5540] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 880.290089][ T4589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.345056][ T5574] loop5: detected capacity change from 0 to 512 [ 880.376903][ T5576] xt_hashlimit: max too large, truncated to 1048576 [ 880.399417][ T5574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.421243][ T5574] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 880.488753][ T5588] loop8: detected capacity change from 0 to 128 [ 880.489218][ T5564] netlink: 'syz.4.15463': attribute type 8 has an invalid length. [ 880.518166][ T5594] siw: device registration error -23 [ 880.591466][ T4325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.601290][ T5588] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 880.616198][ T5601] vlan2: entered allmulticast mode [ 880.621361][ T5601] bridge_slave_0: entered allmulticast mode [ 880.634552][ T5601] bridge_slave_0: left allmulticast mode [ 880.644303][ T5588] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 880.723896][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 880.723914][ T29] audit: type=1326 audit(1735608628.695:47351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.15473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 880.726505][ T5126] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 880.735129][ T29] audit: type=1326 audit(1735608628.716:47352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.15473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 880.780127][ T5612] hub 6-0:1.0: USB hub found [ 880.789982][ T29] audit: type=1326 audit(1735608628.768:47353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.15473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 880.817269][ T5612] hub 6-0:1.0: 8 ports detected [ 880.840544][ T29] audit: type=1326 audit(1735608628.831:47354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.15473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 880.865140][ T29] audit: type=1326 audit(1735608628.831:47355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.15473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 880.889543][ T29] audit: type=1326 audit(1735608628.831:47356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.15473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 880.954742][ T29] audit: type=1326 audit(1735608628.852:47357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.15473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 880.979328][ T29] audit: type=1326 audit(1735608628.852:47358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.15473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 881.003281][ T29] audit: type=1326 audit(1735608628.852:47359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.15473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 881.027834][ T29] audit: type=1326 audit(1735608628.852:47360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5610 comm="syz.4.15473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc9392d5d29 code=0x7ffc0000 [ 881.063151][ T5638] loop8: detected capacity change from 0 to 512 [ 881.107430][ T5638] EXT4-fs: inline encryption not supported [ 881.139583][ T5647] siw: device registration error -23 [ 881.160112][ T5638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.199475][ T5638] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.246482][ T5667] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 881.262916][ T5674] loop5: detected capacity change from 0 to 128 [ 881.324713][ T5680] loop1: detected capacity change from 0 to 128 [ 881.336598][ T5674] syz.5.15486: attempt to access beyond end of device [ 881.336598][ T5674] loop5: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 881.390557][ T5126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.396619][ T5680] syz.1.15488: attempt to access beyond end of device [ 881.396619][ T5680] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 881.483290][ T5696] hub 6-0:1.0: USB hub found [ 881.496690][ T5696] hub 6-0:1.0: 8 ports detected [ 881.499282][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15494'. [ 881.522877][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15494'. [ 881.572444][ T5711] siw: device registration error -23 [ 881.592235][ T5715] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 881.620882][ T5718] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 881.668130][ T5725] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.717881][ T5735] loop4: detected capacity change from 0 to 164 [ 881.731323][ T5725] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.857565][ T5756] loop5: detected capacity change from 0 to 256 [ 881.866163][ T5761] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 881.880061][ T5766] loop1: detected capacity change from 0 to 256 [ 881.891902][ T5725] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.930784][ T5756] syz.5.15504: attempt to access beyond end of device [ 881.930784][ T5756] loop5: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 881.974673][ T5725] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.978996][ T5766] syz.1.15506: attempt to access beyond end of device [ 881.978996][ T5766] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 882.005066][ T5756] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 882.012129][ T5777] siw: device registration error -23 [ 882.029659][ T5766] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 882.058686][ T5772] loop8: detected capacity change from 0 to 512 [ 882.066428][ T5772] EXT4-fs: Ignoring removed mblk_io_submit option [ 882.068439][ T5725] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.087782][ T5725] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.092516][ T5772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.100367][ T5725] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.120063][ T5725] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.143196][ T5786] netlink: 'syz.9.15509': attribute type 1 has an invalid length. [ 882.190341][ T5786] wireguard0: entered promiscuous mode [ 882.195937][ T5786] wireguard0: entered allmulticast mode [ 882.227879][ T5794] loop9: detected capacity change from 0 to 512 [ 882.235626][ T5790] loop5: detected capacity change from 0 to 512 [ 882.243518][ T5796] loop1: detected capacity change from 0 to 128 [ 882.255971][ T5126] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.303567][ T5794] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 882.316810][ T5794] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.329539][ T5803] loop4: detected capacity change from 0 to 256 [ 882.337787][ T5790] EXT4-fs (loop5): too many log groups per flexible block group [ 882.345723][ T5790] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 882.350153][ T5794] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.15509: Failed to acquire dquot type 1 [ 882.353319][ T5790] EXT4-fs (loop5): mount failed [ 882.392045][ T5794] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.15509: Failed to acquire dquot type 1 [ 882.405049][ T5803] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 882.470612][ T5813] loop8: detected capacity change from 0 to 512 [ 882.508902][ T5817] loop4: detected capacity change from 0 to 512 [ 882.515782][ T5817] EXT4-fs: inline encryption not supported [ 882.535285][ T5817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 882.552120][ T5823] siw: device registration error -23 [ 882.566295][ T5823] loop1: detected capacity change from 0 to 512 [ 882.567943][ T5817] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.572976][ T5823] EXT4-fs: Ignoring removed mblk_io_submit option [ 882.611191][ T5823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.638044][ T5826] vlan2: entered promiscuous mode [ 882.668884][ T4589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.673112][ T5831] loop8: detected capacity change from 0 to 128 [ 882.683828][ T3382] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.694809][ T1266] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.799117][ T5846] loop5: detected capacity change from 0 to 256 [ 882.825900][ T5846] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 882.848635][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15533'. [ 882.860595][ T5855] siw: device registration error -23 [ 882.875569][ T5855] loop4: detected capacity change from 0 to 512 [ 882.883101][ T5855] EXT4-fs: Ignoring removed mblk_io_submit option [ 882.898322][ T5858] loop1: detected capacity change from 0 to 256 [ 882.913198][ T5861] loop5: detected capacity change from 0 to 128 [ 882.921415][ T5855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.969448][ T5858] bio_check_eod: 12 callbacks suppressed [ 882.969466][ T5858] syz.1.15538: attempt to access beyond end of device [ 882.969466][ T5858] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 882.976258][ T5861] syz.5.15537: attempt to access beyond end of device [ 882.976258][ T5861] loop5: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 882.994116][ T3382] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.038873][ T5872] loop4: detected capacity change from 0 to 256 [ 883.062804][ T5871] vlan2: entered promiscuous mode [ 883.066770][ T5872] syz.4.15541: attempt to access beyond end of device [ 883.066770][ T5872] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 883.084620][ T5874] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 883.085991][ T5872] syz.4.15541: attempt to access beyond end of device [ 883.085991][ T5872] loop4: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 883.106195][ T5872] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 883.114982][ T5872] syz.4.15541: attempt to access beyond end of device [ 883.114982][ T5872] loop4: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 883.196377][ T5883] xt_hashlimit: max too large, truncated to 1048576 [ 883.200282][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15547'. [ 883.307700][ T5893] siw: device registration error -23 [ 883.322482][ T5893] loop5: detected capacity change from 0 to 512 [ 883.323979][ T5895] xt_hashlimit: max too large, truncated to 1048576 [ 883.329294][ T5893] EXT4-fs: Ignoring removed mblk_io_submit option [ 883.348954][ T5893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 883.389612][ T4325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.429652][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.429723][ T5901] ================================================================== [ 883.429783][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.438178][ T5901] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 883.460542][ T5901] [ 883.462880][ T5901] write to 0xffffffff8666b8c8 of 8 bytes by task 5902 on cpu 0: [ 883.470536][ T5901] data_alloc+0x291/0x2c0 [ 883.474239][ T5905] loop1: detected capacity change from 0 to 128 [ 883.474880][ T5901] prb_reserve+0x85e/0xb60 [ 883.485563][ T5901] vprintk_store+0x558/0x870 [ 883.490193][ T5901] vprintk_emit+0x15e/0x680 [ 883.494732][ T5901] vprintk_default+0x26/0x30 [ 883.499359][ T5901] vprintk+0x75/0x80 [ 883.503323][ T5901] _printk+0x7a/0xa0 [ 883.507255][ T5901] usb_gadget_register_driver_owner+0x179/0x1a0 [ 883.511955][ T5905] syz.1.15557: attempt to access beyond end of device [ 883.511955][ T5905] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 883.513535][ T5901] raw_ioctl+0xbc6/0x1b40 [ 883.531531][ T5901] __se_sys_ioctl+0xc9/0x140 [ 883.536144][ T5901] __x64_sys_ioctl+0x43/0x50 [ 883.540846][ T5901] x64_sys_call+0x1690/0x2dc0 [ 883.545568][ T5901] do_syscall_64+0xc9/0x1c0 [ 883.550111][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.556022][ T5901] [ 883.558362][ T5901] read to 0xffffffff8666b8c8 of 8 bytes by task 5901 on cpu 1: [ 883.566006][ T5901] prb_reserve+0x235/0xb60 [ 883.570471][ T5901] vprintk_store+0x558/0x870 [ 883.575158][ T5901] vprintk_emit+0x15e/0x680 [ 883.579675][ T5901] vprintk_default+0x26/0x30 [ 883.584284][ T5901] vprintk+0x75/0x80 [ 883.588268][ T5901] _printk+0x7a/0xa0 [ 883.592261][ T5901] hashlimit_mt_check_common+0x47a/0x6a0 [ 883.597951][ T5901] hashlimit_mt_check+0x64/0x80 [ 883.602835][ T5901] xt_check_match+0x259/0x4b0 [ 883.607550][ T5901] translate_table+0xb44/0x1040 [ 883.612413][ T5901] do_ip6t_set_ctl+0x7cc/0x8c0 [ 883.617191][ T5901] nf_setsockopt+0x195/0x1b0 [ 883.621785][ T5901] ipv6_setsockopt+0x10f/0x130 [ 883.626560][ T5901] udpv6_setsockopt+0x95/0xb0 [ 883.631263][ T5901] sock_common_setsockopt+0x64/0x80 [ 883.636473][ T5901] __sys_setsockopt+0x187/0x200 [ 883.641329][ T5901] __x64_sys_setsockopt+0x66/0x80 [ 883.646357][ T5901] x64_sys_call+0x282e/0x2dc0 [ 883.651130][ T5901] do_syscall_64+0xc9/0x1c0 [ 883.655635][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.661556][ T5901] [ 883.663874][ T5901] value changed: 0x000000000025baf0 -> 0x000000000030ccb0 [ 883.670976][ T5901] [ 883.673310][ T5901] Reported by Kernel Concurrency Sanitizer on: [ 883.679464][ T5901] CPU: 1 UID: 0 PID: 5901 Comm: syz.5.15556 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 883.690339][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 883.700401][ T5901] ================================================================== [ 883.429645][ T5901] xt_hashlimit: max too large, truncated to 1048576