last executing test programs: 6.38311745s ago: executing program 4 (id=121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b5084a2ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c20100000000000000c5"], 0x0, 0x25f, &(0x7f0000000980)="$eJzs3U9rI3UYB/Cn3br9s+ymBxEUxB960cuwra8gyC6KBaVuRD0Is3aqoWNSMqESEdeD4NWrb2Hx6E1Q30Av3rx7y0XwsgcxsknjJmtExXaT3X4+UOZpfvOFZ8gQnl8gSf+rlyP2q2w/78byWorltTixPC5iaeKRpbgYkz6LFy79+tPTb7z9zqv1nZ1ruyldr994cTuldOWZ7z765Otnf+heevObK9+uxvHmu/1ftn8+fuL4yf7vNz5oVqlZpVa7m/J0s93u5jfLIu01q4MspdfLIq+K1GxVRWdqfb9sHx72Ut7au7xx2CmqKuWtXjooeqnbTt1OL+Xv581WyrIsXd4I/knj9u5uXp93F5ytTqeeX4iI9b+sNG7PpSEAYK76b3354cHk/H93pL8TsXna8//nqxHm/wVj/j8P7s7/G1M7+jHzPwAAAAAAAAAAAAAAPAzuDAa1wWBQGx/Hf6sRsRYR4//n3Sdn4/88/4OlB98vp2vig3trEeUXR42jxug4Wq/vRzPKKOJq1OK34f1wYlRff2Xn2tU0tBnfl7dO8reOGhem81tRi83Z+a1RPk3nH4uNyfx21OLx2fntmfmL8fxzE/ksavHje9FeL2NveF/fy3+6ldJLr+3cl18fngcAAACPgiz9aeb+Pcv+bn2U/w/vD9y3v16Jp1bme+0AAABwXlS9jw/ysiw6i1usxkK0oVA8EsVKRPyLk+f9ygQAAJy2e0N/zPyFQAAAAAAAAAAAAAAAAAAAAODsPYivHJv3NQIAAAAAAAAAAAAAAAAAAAAAAMCi+CMAAP//Wdcrdw==") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 5.982880506s ago: executing program 4 (id=125): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x20, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x200000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@grpjquota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r3, 0x0, 0x32600) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f485000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}, @TCA_STAB={0x4}]}, 0x4c}}, 0x4048014) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000021000783a01fe8000000000000000000000000000bbff02000000000000000000000000000186009078000002000000000000000000180100ffffffffff000aa78ce540065980cabb030037004023493b87aafaffffffffffffff2373f49bfb5c2472eefa45ad96579269748e254c1e428a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001005ff9297d000013"], 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESDEC], 0x1, 0x2a9, &(0x7f0000002a00)="$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") lseek(r0, 0x10001, 0x0) 5.939201146s ago: executing program 1 (id=126): syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000080)={&(0x7f00000001c0)={0x2d, 0x0, 0x1f, 0x10000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc1) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (rerun: 32) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@sg0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000001000000e27f000005000000000000", @ANYRES32], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) shutdown(r8, 0x1) (async) splice(r8, 0x0, r7, 0x0, 0x2, 0x0) (async) mmap(&(0x7f000070c000/0x6000)=nil, 0x6000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.72367371s ago: executing program 1 (id=128): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) unshare(0x66000080) socket$nl_route(0x10, 0x3, 0x0) nanosleep(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xa, 0xd0e0000, 0x248, 0x100, 0x248, 0x1d8, 0x1d8, 0x248, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {0xff}}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x1, 0x9, 0x2}}, @common=@addrtype={{0x30}, {0x6e77d6933fcf49f9, 0x1, 0x0, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x5, 0x800, 'netbios-ns\x00', {0x6}}}}, {{@ip={@remote, @broadcast, 0x0, 0xff000000, 'ipvlan1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x62, 0x1, 0x12}, 0x3202, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x7}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1], 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x341) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x402}}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xff}}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@norecovery}, {@errors_remount}]}, 0xfe, 0x570, &(0x7f00000019c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r5 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r5, 0x4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) write$cgroup_type(r6, 0x0, 0x0) lseek(r6, 0x5, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) 4.297698192s ago: executing program 1 (id=135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 4.090960115s ago: executing program 1 (id=138): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@private2, 0x0}, &(0x7f0000000200)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000030601010000000000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x8850) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.log\x00', 0x10000, 0x8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000300)={0x20000002}) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000021136e923a0360b9b55e684777a00000009000b0073797a30000000000900020073797a320000000014"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r9, 0x5606, 0x1000) close(0xffffffffffffffff) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r10}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200ba0150b54d58de2f00"/36], 0x50) 3.915329918s ago: executing program 1 (id=139): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x20, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x200000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@grpjquota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r3, 0x0, 0x32600) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000021000783a01fe8000000000000000000000000000bbff02000000000000000000000000000186009078000002000000000000000000180100ffffffffff000aa78ce540065980cabb030037004023493b87aafaffffffffffffff2373f49bfb5c2472eefa45ad96579269748e254c1e428a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001005ff9297d000013"], 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESDEC], 0x1, 0x2a9, &(0x7f0000002a00)="$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") lseek(r0, 0x10001, 0x0) 2.782616126s ago: executing program 3 (id=150): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x25, 0x0, "394281e595fd9eb506cd1a5555af72cd375de18882e299a83da979fa66c8f49889716b8dc73f6c5518c12abfb88e8b811ed8bd3623253c58eed51af8b75008e2576da2b0f564a63d98fb21dc8ab90d76"}, 0xd8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) 2.143204526s ago: executing program 0 (id=155): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10000008) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20044080, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3e, 0x2f0, &(0x7f0000000280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="ba56c784c78a1df89a36cf22b3c83cd1", @ANYBLOB="c73b6eeed8bab85ecca990155c8ab754a4e7a80e0ea6fbed9ac42d5ffd847e52ccbe66109c407d4a98f729f066d552c36cbb5298366aef60e0dc35f991e1e1e6162219cccc0af4dfd917c5f51d93f32c4b01abc29a1da0923b26814106293b19922350a07b449d28136af24d636613e424e66d", @ANYRES8=r1, @ANYRESHEX, @ANYBLOB="87e5114b2843da2102e42c8335ad4f343de71bb04c9c0e253dd848021d71185f2a7e4b58ac195ac8b8e43d43d2b4ea00532bef3ca4bc5e049b00cf62028e74404b8d1dd0dfb8ba38ef62127e9ae82e30810d8641d852b029759fae0208a2b95b", @ANYRESHEX=r0, @ANYBLOB="767c0b44af7841929ccf72055de1d6751452d31ab35fbc88372c2d52df4a30b49356b95774bcacc8de5c06c3d0ba4ca1d92b082fe706860dcf6136b3387317c8694f6b800ab5dbde9ed9ddccac42", @ANYBLOB="b3c889cf7da011d491a3caf99620458686a8b580f9a5ff7ceaf3d426675ec5c67d0673e03e85a63a6ed4d431aa71f96412faf8999b756d4a6e88e4fd8b62c6b393b542bb79737537d024e3ff2db74de78efcc65fc021cefa4092e8eaed0be777416c10b089e214244249ca597f3389f1e851513b5725a19b99ab2eaa87e51de1000769f9342b7ea5f3bf63e645042984e922939a063125413c7d1dd5a843a7f32827c71ccadd6792bf46de973e967d3a59388345aaefa267e6bbdec98702"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c0001"], 0xdc}}, 0x0) 1.88810584s ago: executing program 3 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x512, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async) io_uring_setup(0x804d3f, &(0x7f0000000300)={0x0, 0x5ea2, 0x4000, 0x0, 0x6}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x19, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x1, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(0x0, 0x31) (async) socket(0x10, 0x80003, 0x0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r11 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000000000), 0x4) timer_create(0x0, 0x0, 0x0) 1.553142495s ago: executing program 0 (id=158): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r1, &(0x7f0000000640)='\x00', 0x81101) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r3, 0x0, 0x0, 0x40010122, &(0x7f0000000100)={0x11, 0xd, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000680)=[r7]) setregid(r7, r7) socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x2, 0x8, 0x6, 0x1}, {0x3, 0x80, 0x8, 0x10}, {0x2, 0x21, 0xa, 0x200}, {0x4002, 0x2, 0x7, 0x1010}, {0x1, 0xfa, 0x40, 0x800973}, {0x0, 0x1, 0x1, 0x1d}, {0x4, 0x2, 0x3, 0x171}, {0x2, 0x12, 0xf8, 0xfffffffb}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000ed6a00142c0000000000000000000000000000000001fc000000de00000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5001000090780000"], 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') write$cgroup_type(r9, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.391663698s ago: executing program 3 (id=159): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000000000073115900000000008510000002000000850000007600000095000000000000009500a50500000000b8b36d8d4985e3640de6f23d4987c958e00667a800ca14d937d704ef944919b374090bdc01ce2368172d76d3021c8ffbff276a6e59bd767179266d1ae17da45e6044d4102b5dcf48ff19f66a2493b071deb3370f3871752f86c4c9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) listen(r1, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x8000003, 0x2d000, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xb, 0x1, 0x7, 0x8, 0x20005, 0x2306, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="246c1851324eff25af1957ef00030018ed0086000000000000000900000000000001000000445d"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3b74db6b, 0x332}, 0x140, 0x0, 0x0, 0x0, 0xfff, 0x4, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000340)={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "1bf817f6812c12e4d531d0331d45b163b37212723861bc381ee747f6cfa346ed", 0x83b6, 0x7, 0x7, 0x100}, 0x3c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x44040, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a48000000060a01040000000000000000000000030c000340000000000000000308000b40000000030900010073797a30000000000c00034000000000000000050800094000000001240000000b0a010400000010000000000300000a100011800900010068617368000000002c000000030a010100000000000000000a00000a180004801400030076657468315f746f5f7465616d00000020000000120a01010000000000000000010000000c0006400000000000000003140000001100010000000000000000000200000a"], 0xe0}, 0x1, 0x0, 0x0, 0x20000080}, 0x41) socket(0x10, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 1.308457509s ago: executing program 4 (id=160): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4b7901da}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b0200000000"], 0x0, 0x58}, 0x28) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getcwd(0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45c601, 0x2) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000180)=@hci={0x1f, 0x2}, 0xcb, &(0x7f0000000500)=[{&(0x7f0000000580)="296a88271c967616c60ce6eab3d0693201a50b7a9ff9186eb6c983e493aca42225112f61643e2466bc7027d6d59ff9ebbf87b7543bf21362269800329065e97ffc9adf30eb5ff11ce1324df70d49fe1e9794064f95826f6c30e61bda52c82aa8c2b3fa28d54eed41a81866e5431515b47e3774c8ef11042faa007ad026d8c582fa35d42a99aa0a5ca293db0f362e3fe97f00888e0c9879b270c027e7f260e634e953e4071734c1b370f9c382189eee6f0631f92e15bb5627aae2ac01ff4966a28ca3c56b4403666995a07ef5c4271ffe66bd49752837a3a0f20778e8ddd046e6a0e1afc0e127b22292a0d99055499ec092766e6b", 0xf4}, {&(0x7f0000000380)="d1b2682dabad7a486b09722490687ad1e75ed4a27fc35dc2f7b050b85245054452d100ee55d236ac7fb9f2b706907299e7ce7f2737495996bb98586afced8d68e981f62dea556160e8bc539377038ca551a410d910eb72fc726271621c3cb0f607f3876031dceed832f2e5888d294525eae9bdf2e68463a94ad5a75b4f6aa257316570bea051bf6fa32e59adbc1f49de9d8d887fb7", 0x95}, {&(0x7f0000000780)="4554a5da2440a145b0ad2b44fd54427188825d7a2d5865b34ccb57f4da4a404ebd8b2d6e27d5950546691a0c8c56015ace701e63b39ab080573aaaae1c700fc5b23bcecbc36e3aca94bc37e041d17655c7391b404691787c9f757dab8a86c872ae396fff17adf521cb674c406f25403784f4f0cf266b857011afa561bb53b616b971ca5171f3278b71fd5db41e0caf40946f7bd2f833dbd114bd9f0db43e5282151382ea6726ddea997fb3b3c6bc14da7214024520d9d7fd5f278742b3dbb36da285922885cf5c0508bf8d8e0814a18d46943f4bab2f2be5ade8af33ab04358ebb101c6e340edf34d6c68332bd26e2fa", 0xf0}, {&(0x7f00000004c0)}], 0x4}, 0x40400a4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000000), &(0x7f00000005c0)=r10}, 0x20) pwritev2(r8, 0x0, 0x0, 0x9, 0xffffffff, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 1.112309622s ago: executing program 0 (id=162): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) 1.026044313s ago: executing program 4 (id=165): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) 929.783065ms ago: executing program 3 (id=167): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 875.492796ms ago: executing program 3 (id=168): openat$procfs(0xffffffffffffff9c, &(0x7f0000001dc0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x3e, &(0x7f0000001d00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000001006500000f0690fd4e2200000010004dfe790000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7c02ffff90780000220685fa75710000"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000001cc0)={0x1, 0x117, 0x200, 0x4, 0x60, 0x10}, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) syz_emit_ethernet(0x4ce, &(0x7f0000002e00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x54}, {0x101}, {0x1, 0x0, 0x1}, {0xffff0, 0x0, 0x1}, {0x3}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xd79c, 0x0, 0x1}, {0x1bde, 0x0, 0x1}], @ipv6=@icmpv6={0x8, 0x6, "244cbe", 0x470, 0x3a, 0xff, @local, @loopback, {[@srh={0x33, 0x4, 0x4, 0x2, 0x6, 0x20, 0xfeff, [@remote, @remote]}, @routing={0x16, 0x12, 0x1, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @loopback, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x2b, 0x1e, '\x00', [@generic={0x2, 0xeb, "63766751586681c3d031230bde2f71e4240489cf39c46e16614dc59ef868b9f014121ae85e81ea3fe4e24ed9927032ddf61de0d2888a52f23ee420acf02266d8bc568d251d18e9f7d4a8ab65ed383e0aff505283104305ec8d934327ee3b19376514639ffd76185d8919514a83b8aba2edaee6bf583aba75f18ad66671a5450fc4b2d8af51dd90a4aa04d5095bd89d193301ab659fc3dd6294f5428973cc28c95b4d780804490ac96d16d03868b7ceef58455df6357b94d3c8fc1b25ba39409f40f714a8d8793ce9679e4285bdc8ce5b8986dfe0e2069bdcd324cf01bfe883425414a1f6dd7747d30c96b0"}, @pad1, @padn={0x1, 0x1, [0x0]}]}, @dstopts={0x14, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0xf4}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x3, 0x6, 0x9, 0x6, [0xa, 0x6, 0x6]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @jumbo={0xc2, 0x4, 0x74a6fe1f}, @hao={0xc9, 0x10, @mcast2}]}, @dstopts={0x3c, 0x33, '\x00', [@enc_lim={0x4, 0x1, 0x81}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x7, [0x2, 0x3, 0x9]}}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @generic={0x5d, 0xd1, "07c91af14fd7555e8c5db43842595586127c9905b067016de048c4c4df2e04edb2dcaf9ceef536ac99bf86628019d3e7116bc796b12428c4d30a456fcfa7aea1c4a4e94e9eaa95d15ea7bcc8b802b5295666f57388d60496a3483e1d28f3bfc82004e8d76ebb49288b7e33707b4454cd26c62def2e0c5538fa58ceee1b5d3354908474ac9ad20f75508831044ec51b907a48dec1ca1468178724200301e3351b4476ac73506687a7bd054769e78ed57b52d28d71dc8050ac8409a4e7c2a99f633341a27b5e99023dc62c54762610f52da0"}, @generic={0x4, 0x88, "6fe87952c443bf6a4868000893f5a01569e29eb86debe70fb2873eed941b5936afc86b322ff1d94fe04521a96eca3483495900bdac8d84f1c391a08063f41c64223e35638a1fe9fa311651a26189041aa1e1f32a64a30c6781a71e3910bb1eff07e6378e67ca239c55283cffff69f2181d19683ca44a3c816ac0bf0f09d7ea351255bc65a0323f9f"}, @pad1, @jumbo={0xc2, 0x4, 0x7}]}, @hopopts={0x1, 0x8, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x7fff, [0x3, 0x1, 0x4, 0x5, 0x3]}}]}, @srh={0x62, 0x8, 0x4, 0x4, 0x2, 0x10, 0x2, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}], @mld={0x84, 0x0, 0x0, 0x7fff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, &(0x7f0000000040)={0x0, 0x2, [0xec8, 0x9, 0x60d, 0x569]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x800000009) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000720000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) creat(&(0x7f0000000380)='./bus\x00', 0x198) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') read$hiddev(0xffffffffffffffff, &(0x7f0000001e00)=""/4088, 0xff8) 544.463561ms ago: executing program 3 (id=171): writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x5, 0x36f, &(0x7f0000000a40)={{0x12, 0x1, 0x250, 0x80, 0x5e, 0xba, 0x20, 0x2692, 0x9025, 0x18eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35d, 0x3, 0x5, 0x0, 0x80, 0xf7, [{{0x9, 0x4, 0x4, 0x8, 0x5, 0xea, 0x45, 0x2d, 0x0, [], [{{0x9, 0x5, 0x0, 0x2, 0x400, 0xe, 0x79, 0x2}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0xe0, 0x6, 0x1}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x95, 0x5, 0x0, [@generic={0xee, 0x23, "8980314feee30574442b151723bade0f5bd15d96a1d356ef7b08b3a4bd8aac36683203c2a3fd1139ef3e281a8e72c414a0d96a9f2704e7d0340c6ca6fb4704f01a60bbd147e27e7db88719874f8770c489a6023bb493e62d163ef922fdeaec8a555cf2f2b3807269557439ba6f828f4e75da7114391817a3da3e42a8f065758c800d69a8e4f276f5d5d91d468c20ddb9214ed4d07f3ad97d6d63c818f97f02427f3699f4809b9e4cac69ff461828b67021db06cf15387eec6a47f04d3b12e4e5b058ece9ad686b921106c85216e8c2e2325997eb0e93ddf756c115b7f98bb7a3bc87e585c02fddea88369f75"}, @generic={0xf0, 0x6, "6594e87f6c0cc4d232c608392551c39e9cc28523664d66d123a95aaeabde759183ad38e5bc59f2659d6483b0fe78fef76e54781cc4b80ca7b32135056608eb8fd479abc9248438c1b158ba44e13151f769ea230af39a7969004b4ba52222f24c210aeaa141e4fe2c53310f1b57d1ba2d481104905343532a0220729a2bb508a6939474cab201fe7a3ab2cc3b92f24217a40dc2ab340b509903d6e9bb3e814aea75f9e61df49265effc96cdc18f1042fd973ea33872856ee754b57357487c53250e06db95cb439246934327099defebeeb53bb66c79f6cebf00816a022777e1b3824322cf7b647d102d88899f6e85"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf6, 0x8000}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x7f, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x3}, @generic={0x26, 0x1, "f56bc6dd3440f683d5255471e030277f2ecc56fb21e731406becb5685c019e00809906e7"}]}}]}}, {{0x9, 0x4, 0x98, 0x1, 0x4, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0xd, 0x0, 0x0, 0x35, 0x9, 0x9, [@generic={0x2b, 0x24, "776c5b5668914bf6917d6bb9776ca76bd1413fc8b33b6f06a58170300a04fe02c822919ce30f042406"}, @generic={0x6b, 0x22, "750eeb10901fc6a6f839f7a899aa09310b41aaee43569aa679b779a8dd50c076150db0846e52e4c0f43cacab81a26b72a335e1e63a2db885707864e1f6bef9a711fb85d38a54b48266f177034d8c61bb8e7ca90877d65eb867dc0d2fb61c4ca5648ebba23b79fec2c8"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x5, 0x7, 0x2}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x2c, 0x50, 0x84}}, {{0x9, 0x5, 0xe, 0x1, 0xa146fa0b1e0f1fee, 0x6, 0x0, 0x1}}]}}, {{0x9, 0x4, 0x17, 0x6, 0x2, 0xf6, 0xae, 0x2f, 0x6, [], [{{0x9, 0x5, 0x0, 0x2, 0x20, 0x7, 0xe2, 0x6, [@generic={0x2e, 0x10, "a1950e314c6c5a7b94c08d162d8a0d89a6a0fecdd0ba3041edd849b22aff16c5a575ea6d562dd89361ea9b8a"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x8, 0xb, 0x4}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0xe, 0x8, 0x9, 0x10, 0x7f}, 0x10, &(0x7f00000006c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x0, 0x3, 0x1, 0x4}]}, 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0c}}, {0x9e, &(0x7f0000000740)=@string={0x9e, 0x3, "782fc891fa5949ddd0653828d95f5d841e0f6582b3754de374883502976e654ba81a01d23d98ef779b1ce5610e7fc5229e26f27467907ec0310817a6c5e4db4c58e31ea798f66784a7687d53fc4d946b367a027321209043350fbf2fb54d4836a95b134d46c0ec4888372cbc3ca4c20013fb5435620627d26b43032996a68297e6b5b221919dde38e25bcb940cee409058403590e3d5f62fafd2cd88"}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0xd, 0xf}, {0x8, 0xa0000000}, {0x7, 0x6}, {0xd, 0x4f}]}, @func={0xd, 0x0, 0x0, 0xc, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x26, 0x0, 0x58, 0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f]}}, &(0x7f00000004c0)=""/233, 0x6f, 0xe9, 0x1, 0x5}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESOCT=r1], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65) 453.120703ms ago: executing program 2 (id=174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 356.543394ms ago: executing program 2 (id=175): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000740)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1000}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, @in6={0xa, 0x4e24, 0x5, @empty, 0x8}, @in6={0xa, 0x4e20, 0x2, @private0, 0xc4f}], 0x6e) (fail_nth: 1) 355.710314ms ago: executing program 0 (id=176): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4b7901da}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b0200000000"], 0x0, 0x58}, 0x28) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getcwd(0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45c601, 0x2) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000180)=@hci={0x1f, 0x2}, 0xcb, &(0x7f0000000500)=[{&(0x7f0000000580)="296a88271c967616c60ce6eab3d0693201a50b7a9ff9186eb6c983e493aca42225112f61643e2466bc7027d6d59ff9ebbf87b7543bf21362269800329065e97ffc9adf30eb5ff11ce1324df70d49fe1e9794064f95826f6c30e61bda52c82aa8c2b3fa28d54eed41a81866e5431515b47e3774c8ef11042faa007ad026d8c582fa35d42a99aa0a5ca293db0f362e3fe97f00888e0c9879b270c027e7f260e634e953e4071734c1b370f9c382189eee6f0631f92e15bb5627aae2ac01ff4966a28ca3c56b4403666995a07ef5c4271ffe66bd49752837a3a0f20778e8ddd046e6a0e1afc0e127b22292a0d99055499ec092766e6b", 0xf4}, {&(0x7f0000000380)="d1b2682dabad7a486b09722490687ad1e75ed4a27fc35dc2f7b050b85245054452d100ee55d236ac7fb9f2b706907299e7ce7f2737495996bb98586afced8d68e981f62dea556160e8bc539377038ca551a410d910eb72fc726271621c3cb0f607f3876031dceed832f2e5888d294525eae9bdf2e68463a94ad5a75b4f6aa257316570bea051bf6fa32e59adbc1f49de9d8d887fb7", 0x95}, {&(0x7f0000000780)="4554a5da2440a145b0ad2b44fd54427188825d7a2d5865b34ccb57f4da4a404ebd8b2d6e27d5950546691a0c8c56015ace701e63b39ab080573aaaae1c700fc5b23bcecbc36e3aca94bc37e041d17655c7391b404691787c9f757dab8a86c872ae396fff17adf521cb674c406f25403784f4f0cf266b857011afa561bb53b616b971ca5171f3278b71fd5db41e0caf40946f7bd2f833dbd114bd9f0db43e5282151382ea6726ddea997fb3b3c6bc14da7214024520d9d7fd5f278742b3dbb36da285922885cf5c0508bf8d8e0814a18d46943f4bab2f2be5ade8af33ab04358ebb101c6e340edf34d6c68332bd26e2fa", 0xf0}, {&(0x7f00000004c0)}], 0x4}, 0x40400a4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) pwritev2(r7, 0x0, 0x0, 0x9, 0xffffffff, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 355.493294ms ago: executing program 2 (id=177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}]}}]}, 0x40}}, 0x0) 332.790654ms ago: executing program 2 (id=178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xc) fchdir(r3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) epoll_create1(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 241.643606ms ago: executing program 2 (id=179): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000ec0)={&(0x7f0000002000)={[{&(0x7f0000000380)="5920227e357e881a98fc679da8d282c5fc6bf472c45a2da7bac104e7c46b490cbd366ac03b75b38e6e21e643cc15390fe4b3fc6d83119284c9143806e4aba6f6f07ec709a4781307e71ccd415a803bd4d43e0e30fce8c0fb929a54f7ee2a6da5cde4e3101e3a7683b10e2d8cc18271bc4cd36a43aac501c2690bcffdd454793e3a2ef9df16a7e9ab674c1103949ef7122aa3b7", 0x93, 0x2}, {&(0x7f0000000c40)="3b8a01656d6d37e610d313be143c6c9b9b31c249e94694c530641c9b02b97d29c8257b26c571ab5d9d662b15dd436bf8c0347f139a4804b57ea06de06b60760d04df8df6566faeb80e7b6d3b49521b45e6970cf42dbfc18623b94f82ad5c96bc3febbbac2370d6fb736b3b9bce478fb6133e295e66dbc45371d3703cec3029c248b262090c9299272bb781f6c4eee2474b83955f4d6998e78d9e14907e534c3b5a4bb5affbd5b78e1ddd9a1638d4008d251560ae5fe69f342c096f93e80de3dd2b64a67d75964d40d10aaac4b53c57cb98334b583e84d3cc1621140d9e8ab7343e22e8db831d92", 0xe7}, {&(0x7f0000000600)="f89553147d1a90ba4c6cca1acaf4be01068d65c228ef7bdb0b2f82f20b3b02db9c836639bfb4d4b66baf13eefd3585d4515bed10b0e01546a6d0232ac18befa48d27cb87504ef4f64521b428b70ed1bba7d131d76cf6a4616b3650c741f173d43faac9a2cd209c6b2848067a94cd8bdf0fc65c7df91fca0d8b8d5deab304347481745e4e98cf0bb6b544e02a7af1a33b7a5909432398b383fa874e3338b49b74dc906c", 0xa3}, {&(0x7f0000000d40)="dbd958250af70eb42d9c94dc91aed7cc25ef8ba22659e7638cd64af680ef9cb9207e36832d9565274ec405d63191df66a328d09aef39f17be78ccbafab7aa8a1d8556ab51879fa875a8442fa516a9ff14322d6e548062f248b36ba89b0ce3a84959822bf9ef78c912278d619ad259b05c9923f14be62aae8eb0e766026711c78e0d0c080948574353785c5983cd4706ff2d1a8bc9e98d5b2a37e5175cdf77e3ac92ad28607e22f3af95c42572448c6af21fc5e5fb82afd9a329fb1f62d56ae7c7c753aad170089ddf3b0293c8473152fff4d28f9", 0xd4, 0x1}, {&(0x7f0000000480)="7b2ab09a46e509ab353636cc93884b223b2623", 0x13, 0x1}, {&(0x7f0000000e40)="65e8c5413d94286a33ff1af243f4f9dc8ea8dc9be06ce7cd85e4cb7d326e7c1e4139286b17b7e09bae13fc545bcec771193d0fa5b0f74adc9c5ef2e9d6fbbe01f2075a5328180531dc2c88611d326982909d8ec1f3256db4b71eb16188256f15c04e9d", 0x63, 0x2}, {&(0x7f0000000780)='%M', 0x2, 0x2}]}, 0x7}, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x8, 0xfffffffffffffff5, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000200)={0x7fff, 0x4, 0x8}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf250c000000204005621400028008000300310100000800040088ffffff080001007564702a2e632da2e064768d00"], 0x34}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000f80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r10, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r10, 0x0, 0x2c, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000001380)={r9, 0x7, 0xfff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000800)={r9, 0x3, 0x1, [0x401, 0xe, 0x7, 0x5, 0x40], [0x2, 0x95, 0xfffffffffffffffc, 0xc, 0x4, 0x47e, 0x0, 0x9, 0x298, 0xffffffffffff6bc3, 0x1000, 0x9, 0x9, 0x5, 0x8, 0x0, 0x3, 0x0, 0x5, 0x6, 0x3d8d, 0x8, 0x8000000000000001, 0x1ff, 0x8, 0xfffffffffffffffd, 0x6, 0xffffffff00000000, 0x1, 0xd, 0x101, 0x3d4, 0x101, 0xc77, 0x1, 0x4, 0xfffffffffffffff9, 0x1000, 0x3, 0x100000001, 0xf02, 0x100, 0x6, 0x1, 0x7fffffff, 0x3, 0x10000, 0x2, 0x0, 0x8, 0x900000000, 0x6ebe, 0x9, 0x80, 0x3, 0x16f, 0x200, 0x8001, 0x2, 0x9, 0x154, 0x1, 0xffff, 0x8000, 0x80000000, 0x8000000000000001, 0x7, 0xffffffffffffffff, 0x401, 0x8, 0x6, 0x100000000, 0x7, 0x81, 0x800, 0x100000000, 0x42a48271, 0x1, 0x100, 0x5, 0xfff, 0x4bfc, 0x26, 0x1, 0x1, 0x6, 0xfffffffffffffe01, 0x1, 0x5, 0xc, 0x1, 0x800, 0x7, 0x8000000000000001, 0x1, 0x7fff, 0x3, 0x2, 0x9, 0x40, 0x3b75, 0x7, 0x2, 0x26, 0x3, 0x101, 0x62c22dbd, 0x21f, 0x9, 0x5, 0xfffffffffffffff2, 0x4, 0xb518, 0x4, 0x80000001, 0x4, 0x9, 0x9, 0x7fff, 0x87, 0x7]}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 240.923636ms ago: executing program 0 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_read_part_table(0x61f, &(0x7f0000000cc0)="$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") 147.207107ms ago: executing program 4 (id=181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000001cc0)='+}[@\x00G5\v\x89x\xa2\x0e\xb7\xb4\x9a\xb3\xb9\xe3\xff@\x15<\xedO\xb7\xe0\xe6c\x91\x81\x7f\x00\x00\x00\xd0\xc7\'CT9I\xdf\xb2\aD\xec\\4\xe8\x0e#\xbeU\xe5\t\x81\x0e\xe5\x06Z\xd2Q\x8b\xc4\xeb\xfb\xde\xd1\xf1\xed\xd4\xb1\x18\x84)\x88\xec\xedf.\x7fZ\xdeV\x8dG\'^\xd6\xab\xf3\xc7X/\xc4\x88B\xda\xe8\xd4\x87\xe5\x93n\xe9\xe4\xcf\xaa\xf5\xa4%\x0e\xf4+Y\x03y\ba\xe1\xf9\xe9\x87*.\xc7\xfb`3\xffY\x97\x18OI\xc4\x81I\x87g\xa2\x18\x90\x1bg\xcd\xc8#\x9b5\x1dB\xe0\xad@-/xA\x0f\x10Z\v^S\xef\xd6n\xe0\xa2\xfc\xd9B\xc4m-\x95,\xd9\xc4\xdb\xc0O3\xcd\xb47\x03\xf6k y\xd3\xb8\x98\x1d\x87/oq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83\"\xdd\xd85\x99\x91\xf7U\x9d\xbd\a3\xed\xc7\xc6R\x8b\xbf0\xef\xdd\xd6\x94\xce\xec\x9f=\xd23\x01\xaa\x9c\xca=+\x18~\x19\x9b\x96nx0\xdb\xa6c(-\fq\x11\xc1\xdbi\xb9\xd0\xed!\xca.\xaa\x04\xb8\xc5\xbb\b\x0e\xf18\xafE\xf3L\xa7\xf1\xac\xdd\xee*}\xdd\xa1!\x7f\n\xcf\xa9r\xc2\xe3\xb8\xceD\xfd\xa2\x97\x84Z\x8b\xda\x05\x06:.-\x7f:\xe3X\xb8\x03\xaa\x9cHw\b\x86u\xddq\x83\xc1Jl6\xffx\xe7\x94;\xd2?\x06\xe5Y\x88!+\xab\x85\x93I\x82\x06\xb8IZ\x06\x06\xe3\xda\xd5c\xb9\x9f\xe7\xc2\x0f\xff=\"v%\x05\xc8x\xf1\xb180\xc9c\tE\x13n\xe5\xc5\xa1p\xbbk\xee\x10*\x86\xc4Y\xdc\x9ai9\xf9\xe3\xd0\xef~S\x16}\x11\x02i\x99%\x16\xa8\x9c\x04\xf5D\xe8Y\xd2S\x14\xbe\x94\xc1\xfe\x1b\xc8\xb6\xd15\\\xa9\xdcI\xb6%\xac\xea,\x11\xc0\xb4y\xd8\x9b#\xd7(%w\xa9\xff\xdb\xc0\xe4\xd2\xbb\xc24ad\xc2\xbe{5)L\x86\vp\xe3 \xf5-6\xb5N\x1f\xbe\xe3)i|\xde\xeb]O\x00\x95\xbaK\xb0r\xbbT\x82\xcd)\x83\'Jg\x82\x85\x81\x16B\xbb_p\x18d6\x05\xa0\r\xfbM\xde\xa4\xb9\x15~\xf1\xb4\xe4R5\xe1\x85Q?\x81\xc0\xe79|!^\xdf\xf53zZ\xbe\xcd\xcc\x9d\xbd\xe1$\r@,\xd9\xad\xef\x97\x81q\x1bt\xf4\x8e\xfas\x8a/k\xc7\xc2\xc9\xe8\x1eB\xa06^\x13\xcdi\xec^\xf8=z\xf3\x12\x19\x9d\xeb*\xa7\xdd:\xeb\xeb\xb8\t\xa1#\xac\x1f\xb2\x1e]\xa9\x99\xc26\x02z\xd1a\xe8\xe0\xd9{t]\x7f.\x1d\xf4 \x1dMCd\x02\fR\x89\xff8\xa3(\x17J*>\xb1') r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000380)=ANY=[@ANYBLOB="3d1800000200000081020a850486c8b80301ea59fefc8cb9c7ba570f01cc181e365017e0d9746afaf3afad7439a126b6ee2dcb85193335a18b17dc2a991a8f0953c5effd7b0199f4013613c1f5de325a02c2fe1fa005408db5040982b1fbd89525e276a1ca3a7ee28b487f9c50ae9060f9046bdb172e5f6a57c8c208223fec6b7fa936578dce45d76ed7de66"]) 146.494507ms ago: executing program 4 (id=182): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) connect$inet6(r9, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB], 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x9}}}, 0x24}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x100000001) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcc2}}]}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) r10 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r10, 0x8b32, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 34.860969ms ago: executing program 0 (id=183): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r1, 0x0, r1, &(0x7f0000000100)='./mnt\x00') 4.176959ms ago: executing program 2 (id=184): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) (fail_nth: 5) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 1 (id=185): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000000000073115900000000008510000002000000850000007600000095000000000000009500a50500000000b8b36d8d4985e3640de6f23d4987c958e00667a800ca14d937d704ef944919b374090bdc01ce2368172d76d3021c8ffbff276a6e59bd767179266d1ae17da45e6044d4102b5dcf48ff19f66a2493b071deb3370f3871752f86c4c9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) listen(r1, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x8000003, 0x2d000, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xb, 0x1, 0x7, 0x8, 0x20005, 0x2306, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="246c1851324eff25af1957ef00030018ed0086000000000000000900000000000001000000445d"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3b74db6b, 0x332}, 0x140, 0x0, 0x0, 0x0, 0xfff, 0x4, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000340)={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "1bf817f6812c12e4d531d0331d45b163b37212723861bc381ee747f6cfa346ed", 0x83b6, 0x7, 0x7, 0x100}, 0x3c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x44040, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$eJzs3U1oHOUbAPBnZrPtv23+pgUFlR6KChVKN0k/tHpKr2Kh0IPgpS6bbQjZZEN2U5uQQ3ovYkFR6aXe9OBR8eBBvHj06kXxLIgGhaYHiUx2N/1Isq61ydbO7wezfT+GPu+bmWey7zBDAsitI9lHGvFMRJxPIobu6huIdueR1n6rK0uV2ytLlSTW1i78mkQSEbdWliqd/ZP2vwciYjkino6Ib4oRx9LNcRsLi1PlWq06164PN6dnhxsLi8cnp8sT1YnqzMmXXzl95tTp0ROjD22u1368/s617167ef3Tzw4vV94vJzEWg+2+u+fxMLV+JsUYu6/91E4E66Ok3wPggRTaeV6MiKdiKArtrAcef2t7I9aAnErkP+RU53tAtv7tbLv5/eOXs60FSBZ3tb21egZa9ybif+trk/2/J/esTLL15sHdHCiPpeWrETEyMLD5/E/a59+DG3kYA2RHfX22daA2H/904/oTW1x/Bjv3Tv+lzvVvddP17078wjbXv/M9xvjzzZ8+2jb+1Yhnt4yfbMRPtoifRsRbPca/8caXZ7brW/s44mhsHb8j6X5/ePjSZK060vrcMsZXRw+/2m3++7eJP9Zl/lnbbI/z/+Lbz59b7hL/xee7H/+t4u+LiHd7jH/o1ievb9eXxR/fZv7d4mdtN3uM/9LYkR963BUAAAAAAAAAAPgH0vVn2ZK0tFFO01Kp9Q7vk7E/rdUbzWOX6vMz461n3g5GMe08aTXUqidZfbT9PG6nfuK++smIOBQR7xX2rddLlXptvN+TBwAAAAAAAAAAAAAAAAAAgEfEgfve//+j0Hr/H8gJf/Ib8kv+Q37dm/9J38YB7D6//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74vy5c9m2dntlqZLVxy8vzE/VLx8frzamStPzlVKlPjdbmqjXJ2rVUqU+/Xf/X61enx2Jmfkrw81qozncWFi8OF2fn2lenJwuT1QvVou7MisAAAAAAAAAAAAAAAAAAAD4bxlc35K0FBHpejlNS6WI/0fEwSgmlyZr1ZGIeCIivi8U92b10X4PGgAAAAAAAAAAAAAAAAAAAB4zjYXFqXKtVp1T2FyIiOVHYBgKCn05+QEAAAAAAAAAAAAAAAAAgF1156Xffo8EAAAAAAAAAAAAAAAAAAAA8iz9OYmIbDs69MLg3T17I2JPslrIynsi4u0bFz64Um4250az9t822psftttP9GsOQC86edrJYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCOxsLiVLlWq87tYKHfcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4EH8FAAD//46R2W8=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a48000000060a01040000000000000000000000030c000340000000000000000308000b40000000030900010073797a30000000000c00034000000000000000050800094000000001240000000b0a010400000010000000000300000a100011800900010068617368000000002c000000030a010100000000000000000a00000a180004801400030076657468315f746f5f7465616d00000020000000120a01010000000000000000010000000c0006400000000000000003140000001100010000000000000000000200000a"], 0xe0}, 0x1, 0x0, 0x0, 0x20000080}, 0x41) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 35.375347][ T29] audit: type=1400 audit(1753472260.745:62): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.376474][ T3297] cgroup: Unknown subsys name 'net' [ 35.398124][ T29] audit: type=1400 audit(1753472260.745:63): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.426201][ T29] audit: type=1400 audit(1753472260.775:64): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.557820][ T3297] cgroup: Unknown subsys name 'cpuset' [ 35.564075][ T3297] cgroup: Unknown subsys name 'rlimit' [ 35.715795][ T29] audit: type=1400 audit(1753472261.085:65): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.739314][ T29] audit: type=1400 audit(1753472261.085:66): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.759878][ T29] audit: type=1400 audit(1753472261.085:67): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.780399][ T29] audit: type=1400 audit(1753472261.085:68): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.800820][ T29] audit: type=1400 audit(1753472261.085:69): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.809477][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.825656][ T29] audit: type=1400 audit(1753472261.085:70): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.858225][ T29] audit: type=1400 audit(1753472261.215:71): avc: denied { relabelto } for pid=3300 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.906362][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.173574][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 37.241013][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 37.274092][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.281319][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.288724][ T3311] bridge_slave_0: entered allmulticast mode [ 37.295335][ T3311] bridge_slave_0: entered promiscuous mode [ 37.302041][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 37.324409][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.331649][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.338950][ T3311] bridge_slave_1: entered allmulticast mode [ 37.345571][ T3311] bridge_slave_1: entered promiscuous mode [ 37.378717][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.399705][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.416977][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 37.447911][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.455061][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.462510][ T3307] bridge_slave_0: entered allmulticast mode [ 37.469094][ T3307] bridge_slave_0: entered promiscuous mode [ 37.493341][ T3311] team0: Port device team_slave_0 added [ 37.499462][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.506567][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.513888][ T3307] bridge_slave_1: entered allmulticast mode [ 37.520518][ T3307] bridge_slave_1: entered promiscuous mode [ 37.526741][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.533880][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.541135][ T3312] bridge_slave_0: entered allmulticast mode [ 37.547573][ T3312] bridge_slave_0: entered promiscuous mode [ 37.564566][ T3311] team0: Port device team_slave_1 added [ 37.576159][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.583542][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.590761][ T3312] bridge_slave_1: entered allmulticast mode [ 37.597245][ T3312] bridge_slave_1: entered promiscuous mode [ 37.644926][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.652161][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.679626][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.692766][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.709202][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.726933][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.734515][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.742317][ T3309] bridge_slave_0: entered allmulticast mode [ 37.748919][ T3309] bridge_slave_0: entered promiscuous mode [ 37.755927][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.763687][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.791116][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.803291][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.819409][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.834607][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 37.848111][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.855248][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.862882][ T3309] bridge_slave_1: entered allmulticast mode [ 37.869621][ T3309] bridge_slave_1: entered promiscuous mode [ 37.887388][ T3307] team0: Port device team_slave_0 added [ 37.896312][ T3307] team0: Port device team_slave_1 added [ 37.929185][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.936257][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.962489][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.974668][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.984480][ T3312] team0: Port device team_slave_0 added [ 37.991445][ T3312] team0: Port device team_slave_1 added [ 38.004892][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.012010][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.038052][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.049758][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.087771][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.094813][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.120798][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.137911][ T3311] hsr_slave_0: entered promiscuous mode [ 38.143943][ T3311] hsr_slave_1: entered promiscuous mode [ 38.161871][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.168915][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.194992][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.226033][ T3307] hsr_slave_0: entered promiscuous mode [ 38.232192][ T3307] hsr_slave_1: entered promiscuous mode [ 38.238195][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.245943][ T3307] Cannot create hsr debugfs directory [ 38.252225][ T3309] team0: Port device team_slave_0 added [ 38.266809][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.274011][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.281262][ T3315] bridge_slave_0: entered allmulticast mode [ 38.287808][ T3315] bridge_slave_0: entered promiscuous mode [ 38.303108][ T3309] team0: Port device team_slave_1 added [ 38.321068][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.328423][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.336788][ T3315] bridge_slave_1: entered allmulticast mode [ 38.343288][ T3315] bridge_slave_1: entered promiscuous mode [ 38.364406][ T3312] hsr_slave_0: entered promiscuous mode [ 38.370389][ T3312] hsr_slave_1: entered promiscuous mode [ 38.376208][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.383843][ T3312] Cannot create hsr debugfs directory [ 38.402397][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.419554][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.426612][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.452752][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.469886][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.489031][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.496022][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.522131][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.565930][ T3315] team0: Port device team_slave_0 added [ 38.586081][ T3315] team0: Port device team_slave_1 added [ 38.624683][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.631840][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.657822][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.671085][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.678108][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.704170][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.717207][ T3309] hsr_slave_0: entered promiscuous mode [ 38.723559][ T3309] hsr_slave_1: entered promiscuous mode [ 38.729417][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.737031][ T3309] Cannot create hsr debugfs directory [ 38.804146][ T3315] hsr_slave_0: entered promiscuous mode [ 38.810253][ T3315] hsr_slave_1: entered promiscuous mode [ 38.816103][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.823753][ T3315] Cannot create hsr debugfs directory [ 38.877268][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.890551][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.899437][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.915126][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.954510][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.963573][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.972657][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.983832][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.018976][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.041243][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.050567][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.059445][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.095055][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.110580][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.120054][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.129176][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.140518][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.168774][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.177853][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.189970][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.202854][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.213948][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.227395][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.241305][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.248480][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.262984][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.274623][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.281802][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.294215][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.301416][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.330077][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.337294][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.405974][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.423566][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.438408][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.448767][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.458118][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.465256][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.476242][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.492828][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.500021][ T1707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.510266][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.517455][ T1707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.527961][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.543141][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.550345][ T1707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.559343][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.566416][ T1707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.584688][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.591810][ T1707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.611496][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.630772][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.641189][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.656543][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.700997][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.816299][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.838143][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.848138][ T3311] veth0_vlan: entered promiscuous mode [ 39.857622][ T3307] veth0_vlan: entered promiscuous mode [ 39.865599][ T3311] veth1_vlan: entered promiscuous mode [ 39.878071][ T3307] veth1_vlan: entered promiscuous mode [ 39.886254][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.917706][ T3307] veth0_macvtap: entered promiscuous mode [ 39.928062][ T3307] veth1_macvtap: entered promiscuous mode [ 39.950789][ T3311] veth0_macvtap: entered promiscuous mode [ 39.963097][ T3311] veth1_macvtap: entered promiscuous mode [ 39.978568][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.992359][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.005563][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.017509][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.035427][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.044334][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.053164][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.062100][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.074434][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.083310][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.092240][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.101172][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.133368][ T3315] veth0_vlan: entered promiscuous mode [ 40.164687][ T3309] veth0_vlan: entered promiscuous mode [ 40.173883][ T3315] veth1_vlan: entered promiscuous mode [ 40.180308][ T3312] veth0_vlan: entered promiscuous mode [ 40.196782][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.197789][ T3312] veth1_vlan: entered promiscuous mode [ 40.235742][ T3312] veth0_macvtap: entered promiscuous mode [ 40.254209][ T3315] veth0_macvtap: entered promiscuous mode [ 40.262332][ T3309] veth1_vlan: entered promiscuous mode [ 40.278984][ T3315] veth1_macvtap: entered promiscuous mode [ 40.292636][ T3312] veth1_macvtap: entered promiscuous mode [ 40.306625][ T3309] veth0_macvtap: entered promiscuous mode [ 40.318584][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.331889][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.343541][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.360600][ T3309] veth1_macvtap: entered promiscuous mode [ 40.372123][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.381079][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.389858][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.398597][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.410072][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.418624][ T3483] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 40.437879][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.447194][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.456430][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.465244][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.474424][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.508341][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.516946][ T3309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.526071][ T3309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.534944][ T3309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.543193][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 40.543213][ T29] audit: type=1400 audit(1753472265.915:106): avc: denied { open } for pid=3487 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.543970][ T3309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.549930][ T29] audit: type=1400 audit(1753472265.915:107): avc: denied { kernel } for pid=3487 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.603180][ T29] audit: type=1400 audit(1753472265.975:108): avc: denied { write } for pid=3487 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.727401][ T3498] syz_tun: refused to change device tx_queue_len [ 40.733883][ T3498] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 40.787360][ T3499] netlink: 'syz.2.9': attribute type 21 has an invalid length. [ 40.795077][ T3499] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9'. [ 40.804969][ T29] audit: type=1326 audit(1753472266.165:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b16e9a9 code=0x7ffc0000 [ 40.824123][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 40.828621][ T29] audit: type=1326 audit(1753472266.165:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f729b16e9a9 code=0x7ffc0000 [ 40.860574][ T29] audit: type=1326 audit(1753472266.165:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b16e9a9 code=0x7ffc0000 [ 40.883823][ T29] audit: type=1326 audit(1753472266.165:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f729b16e9a9 code=0x7ffc0000 [ 40.907079][ T29] audit: type=1326 audit(1753472266.165:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b16e9a9 code=0x7ffc0000 [ 40.930260][ T29] audit: type=1326 audit(1753472266.165:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729b16e9a9 code=0x7ffc0000 [ 40.940942][ T3498] loop2: detected capacity change from 0 to 1764 [ 40.953461][ T29] audit: type=1326 audit(1753472266.165:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b16e9a9 code=0x7ffc0000 [ 40.988487][ T3508] netlink: 124 bytes leftover after parsing attributes in process `syz.4.11'. [ 40.991242][ C1] hrtimer: interrupt took 25039 ns [ 41.027995][ T3508] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.070892][ T3501] loop1: detected capacity change from 0 to 2048 [ 41.111425][ T3501] EXT4-fs (loop1): failed to initialize system zone (-117) [ 41.119005][ T3501] EXT4-fs (loop1): mount failed [ 41.191402][ T3516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.200446][ T3516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.210609][ T3516] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 41.220166][ T3516] SELinux: failed to load policy [ 41.252574][ T3513] infiniband syz!: set active [ 41.257350][ T3513] infiniband syz!: added team_slave_0 [ 41.270603][ T3522] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 41.293815][ T3513] RDS/IB: syz!: added [ 41.298176][ T3513] smc: adding ib device syz! with port count 1 [ 41.304605][ T3513] smc: ib device syz! port 1 has pnetid [ 41.374437][ T3531] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 41.456609][ T3529] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 41.466662][ T3529] +}[@ (3529) used greatest stack depth: 10800 bytes left [ 41.495693][ T3535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16'. [ 41.524150][ T3513] +}[@ (3513) used greatest stack depth: 10616 bytes left [ 41.537575][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.545053][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.556772][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.564333][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.571951][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.579441][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.587086][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.594565][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.594989][ T3542] SELinux: syz.2.18 (3542) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.602040][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.623052][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.630630][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.638135][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.648239][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.655810][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.663463][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.670991][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.678461][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.685881][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.693376][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.700979][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.708622][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.716303][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.723848][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.731402][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.738854][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.746280][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.753774][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.768006][ T3546] netlink: 'syz.4.19': attribute type 10 has an invalid length. [ 41.775798][ T3546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19'. [ 41.786199][ T3415] hid-generic 0000:0000:0000.0001: hidraw0: HID v10.00 Device [syz0] on syz1 [ 41.798835][ T3546] team0: entered promiscuous mode [ 41.800178][ T3539] FAULT_INJECTION: forcing a failure. [ 41.800178][ T3539] name failslab, interval 1, probability 0, space 0, times 1 [ 41.804086][ T3546] team_slave_0: entered promiscuous mode [ 41.816695][ T3539] CPU: 1 UID: 0 PID: 3539 Comm: syz.3.17 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 41.816732][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.816753][ T3539] Call Trace: [ 41.816762][ T3539] [ 41.816772][ T3539] __dump_stack+0x1d/0x30 [ 41.816894][ T3539] dump_stack_lvl+0xe8/0x140 [ 41.816921][ T3539] dump_stack+0x15/0x1b [ 41.816958][ T3539] should_fail_ex+0x265/0x280 [ 41.817052][ T3539] should_failslab+0x8c/0xb0 [ 41.817082][ T3539] kmem_cache_alloc_node_noprof+0x57/0x320 [ 41.817121][ T3539] ? __alloc_skb+0x101/0x320 [ 41.817220][ T3539] __alloc_skb+0x101/0x320 [ 41.817262][ T3539] alloc_uevent_skb+0x5c/0x120 [ 41.817302][ T3539] kobject_uevent_net_broadcast+0x23c/0x410 [ 41.817394][ T3539] kobject_uevent_env+0x43d/0x570 [ 41.817430][ T3539] ? device_pm_check_callbacks+0x683/0x6a0 [ 41.817496][ T3539] kobject_uevent+0x1d/0x30 [ 41.817532][ T3539] device_del+0x710/0x790 [ 41.817568][ T3539] device_destroy+0x66/0xa0 [ 41.817619][ T3539] drop_ref+0xbf/0x1a0 [ 41.817724][ T3539] hidraw_disconnect+0x39/0x50 [ 41.817751][ T3539] hid_device_remove+0x158/0x210 [ 41.817790][ T3539] ? __pfx_hid_device_remove+0x10/0x10 [ 41.817831][ T3539] device_release_driver_internal+0x2be/0x4c0 [ 41.817879][ T3539] device_release_driver+0x19/0x20 [ 41.817912][ T3539] bus_remove_device+0x26d/0x290 [ 41.817982][ T3539] device_del+0x36a/0x790 [ 41.818016][ T3539] hid_destroy_device+0x54/0x120 [ 41.818055][ T3539] uhid_dev_destroy+0x6a/0xb0 [ 41.818087][ T3539] uhid_char_write+0x3aa/0x650 [ 41.818163][ T3539] ? __pfx_uhid_char_write+0x10/0x10 [ 41.818231][ T3539] vfs_write+0x266/0x8e0 [ 41.818274][ T3539] ? __rcu_read_unlock+0x4f/0x70 [ 41.818313][ T3539] ? __fget_files+0x184/0x1c0 [ 41.818373][ T3539] ksys_write+0xda/0x1a0 [ 41.818417][ T3539] __x64_sys_write+0x40/0x50 [ 41.818558][ T3539] x64_sys_call+0x2cdd/0x2fb0 [ 41.818588][ T3539] do_syscall_64+0xd2/0x200 [ 41.818613][ T3539] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.818645][ T3539] ? clear_bhb_loop+0x40/0x90 [ 41.818674][ T3539] ? clear_bhb_loop+0x40/0x90 [ 41.818769][ T3539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.818797][ T3539] RIP: 0033:0x7f8b98f2e9a9 [ 41.818827][ T3539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.818851][ T3539] RSP: 002b:00007f8b97597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.818929][ T3539] RAX: ffffffffffffffda RBX: 00007f8b99155fa0 RCX: 00007f8b98f2e9a9 [ 41.818945][ T3539] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000005 [ 41.818962][ T3539] RBP: 00007f8b97597090 R08: 0000000000000000 R09: 0000000000000000 [ 41.818979][ T3539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.818994][ T3539] R13: 0000000000000000 R14: 00007f8b99155fa0 R15: 00007ffea808ac68 [ 41.819099][ T3539] [ 41.921646][ T3553] fido_id[3553]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.924583][ T3546] team_slave_1: entered promiscuous mode [ 42.134153][ T3546] team0: entered allmulticast mode [ 42.143656][ T3565] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21'. [ 42.147361][ T3546] team_slave_0: entered allmulticast mode [ 42.158689][ T3546] team_slave_1: entered allmulticast mode [ 42.176045][ T3546] bridge0: port 3(team0) entered blocking state [ 42.182502][ T3546] bridge0: port 3(team0) entered disabled state [ 42.191193][ T3568] netlink: 'syz.1.23': attribute type 13 has an invalid length. [ 42.192453][ T3546] bridge0: port 3(team0) entered blocking state [ 42.205310][ T3546] bridge0: port 3(team0) entered forwarding state [ 42.251005][ T3570] netlink: 181064 bytes leftover after parsing attributes in process `syz.1.23'. [ 42.278360][ T3576] netlink: 160 bytes leftover after parsing attributes in process `syz.4.25'. [ 42.298435][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.305664][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.332160][ T3577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24'. [ 42.341245][ T3577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'. [ 42.402629][ T3584] loop2: detected capacity change from 0 to 164 [ 42.418641][ T3584] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 42.429958][ T3584] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 42.451064][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.462093][ T3589] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 42.472606][ T3589] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 42.491590][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.518577][ T3584] rock: directory entry would overflow storage [ 42.524831][ T3584] rock: sig=0x4f50, size=4, remaining=3 [ 42.530464][ T3584] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 42.566173][ T3568] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.575193][ T3568] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.584135][ T3568] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.593343][ T3568] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.720700][ T3568] syz.1.23 (3568) used greatest stack depth: 10336 bytes left [ 42.777150][ T3598] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET) [ 42.824270][ T3607] loop3: detected capacity change from 0 to 512 [ 42.842312][ T3607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.855668][ T3607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.872219][ T3614] usb usb5: usbfs: process 3614 (+}[@) did not claim interface 0 before use [ 42.883202][ T3610] program syz.4.31 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.904824][ T3607] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 42.946226][ T3607] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.961698][ T3607] EXT4-fs (loop3): 1 truncate cleaned up [ 42.969748][ T3607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.991743][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.999334][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.011057][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.018703][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.026140][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.033743][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.041254][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.048860][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.056478][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.064027][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.071627][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.079083][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.143976][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.151499][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.159047][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.166591][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.174085][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.181636][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.189110][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.196556][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.204099][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.211653][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.219619][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.227186][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.234638][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.244864][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.253226][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.263085][ T3416] hid-generic 0000:0000:0000.0002: hidraw0: HID v10.00 Device [syz0] on syz1 [ 43.310746][ T3641] loop2: detected capacity change from 0 to 128 [ 43.372451][ T3641] FAT-fs (loop2): invalid media value (0x00) [ 43.378639][ T3641] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 43.387956][ T3641] FAT-fs (loop2): Can't find a valid FAT filesystem [ 43.399819][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.412350][ T3647] fido_id[3647]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.477115][ T3655] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.490627][ T3655] bridge_slave_1: left allmulticast mode [ 43.496378][ T3655] bridge_slave_1: left promiscuous mode [ 43.502149][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.543268][ T3656] Zero length message leads to an empty skb [ 43.550861][ T3656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.559651][ T3656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.570535][ T3655] bridge_slave_0: left allmulticast mode [ 43.576252][ T3655] bridge_slave_0: left promiscuous mode [ 43.582019][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.809522][ T3668] loop2: detected capacity change from 0 to 2048 [ 43.819259][ T3663] syzkaller1: entered promiscuous mode [ 43.824789][ T3663] syzkaller1: entered allmulticast mode [ 43.897741][ T3659] loop2: p1 < > p2 < > p3 p4 < > [ 43.902849][ T3659] loop2: partition table partially beyond EOD, truncated [ 43.990329][ T3659] loop2: p1 start 2305 is beyond EOD, truncated [ 43.996901][ T3659] loop2: p2 start 4294902784 is beyond EOD, truncated [ 44.003831][ T3659] loop2: p3 start 3724543488 is beyond EOD, truncated [ 44.082095][ T3677] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 44.101865][ T3677] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.151716][ T3668] loop2: p1 < > p2 < > p3 p4 < > [ 44.156815][ T3668] loop2: partition table partially beyond EOD, truncated [ 44.179250][ T3668] loop2: p1 start 2305 is beyond EOD, truncated [ 44.185671][ T3668] loop2: p2 start 4294902784 is beyond EOD, truncated [ 44.192618][ T3668] loop2: p3 start 3724543488 is beyond EOD, truncated [ 44.491069][ T3694] FAULT_INJECTION: forcing a failure. [ 44.491069][ T3694] name failslab, interval 1, probability 0, space 0, times 0 [ 44.503945][ T3694] CPU: 0 UID: 0 PID: 3694 Comm: wޣ Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 44.503978][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.503994][ T3694] Call Trace: [ 44.504001][ T3694] [ 44.504010][ T3694] __dump_stack+0x1d/0x30 [ 44.504033][ T3694] dump_stack_lvl+0xe8/0x140 [ 44.504109][ T3694] dump_stack+0x15/0x1b [ 44.504131][ T3694] should_fail_ex+0x265/0x280 [ 44.504250][ T3694] ? dev_ethtool+0x96/0x1650 [ 44.504272][ T3694] should_failslab+0x8c/0xb0 [ 44.504299][ T3694] __kmalloc_cache_noprof+0x4c/0x320 [ 44.504340][ T3694] dev_ethtool+0x96/0x1650 [ 44.504360][ T3694] ? full_name_hash+0x92/0xe0 [ 44.504434][ T3694] ? strcmp+0x22/0x50 [ 44.504460][ T3694] dev_ioctl+0x2e0/0x960 [ 44.504485][ T3694] sock_do_ioctl+0x197/0x220 [ 44.504571][ T3694] sock_ioctl+0x41b/0x610 [ 44.504600][ T3694] ? __pfx_sock_ioctl+0x10/0x10 [ 44.504628][ T3694] __se_sys_ioctl+0xce/0x140 [ 44.504663][ T3694] __x64_sys_ioctl+0x43/0x50 [ 44.504759][ T3694] x64_sys_call+0x19a8/0x2fb0 [ 44.504810][ T3694] do_syscall_64+0xd2/0x200 [ 44.504830][ T3694] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.504896][ T3694] ? clear_bhb_loop+0x40/0x90 [ 44.504923][ T3694] ? clear_bhb_loop+0x40/0x90 [ 44.504951][ T3694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.504976][ T3694] RIP: 0033:0x7f211bcae9a9 [ 44.504990][ T3694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.505078][ T3694] RSP: 002b:00007f211a30f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.505095][ T3694] RAX: ffffffffffffffda RBX: 00007f211bed5fa0 RCX: 00007f211bcae9a9 [ 44.505107][ T3694] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000005 [ 44.505181][ T3694] RBP: 00007f211a30f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.505192][ T3694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.505203][ T3694] R13: 0000000000000000 R14: 00007f211bed5fa0 R15: 00007ffecae9bcc8 [ 44.505221][ T3694] [ 44.750248][ T3659] udevd[3659]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 44.863528][ T3703] FAULT_INJECTION: forcing a failure. [ 44.863528][ T3703] name failslab, interval 1, probability 0, space 0, times 0 [ 44.876266][ T3703] CPU: 1 UID: 0 PID: 3703 Comm: syz.2.45 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 44.876302][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.876318][ T3703] Call Trace: [ 44.876327][ T3703] [ 44.876336][ T3703] __dump_stack+0x1d/0x30 [ 44.876424][ T3703] dump_stack_lvl+0xe8/0x140 [ 44.876448][ T3703] dump_stack+0x15/0x1b [ 44.876464][ T3703] should_fail_ex+0x265/0x280 [ 44.876499][ T3703] ? hid_allocate_device+0x2f/0x1c0 [ 44.876558][ T3703] should_failslab+0x8c/0xb0 [ 44.876586][ T3703] __kmalloc_cache_noprof+0x4c/0x320 [ 44.876615][ T3703] hid_allocate_device+0x2f/0x1c0 [ 44.876699][ T3703] uhid_dev_create2+0xc0/0x440 [ 44.876727][ T3703] uhid_dev_create+0x22e/0x280 [ 44.876771][ T3703] uhid_char_write+0x5a3/0x650 [ 44.876823][ T3703] ? __pfx_uhid_char_write+0x10/0x10 [ 44.876844][ T3703] vfs_write+0x266/0x8e0 [ 44.876915][ T3703] ? __rcu_read_unlock+0x4f/0x70 [ 44.877005][ T3703] ? __fget_files+0x184/0x1c0 [ 44.877048][ T3703] ksys_write+0xda/0x1a0 [ 44.877089][ T3703] __x64_sys_write+0x40/0x50 [ 44.877269][ T3703] x64_sys_call+0x2cdd/0x2fb0 [ 44.877296][ T3703] do_syscall_64+0xd2/0x200 [ 44.877320][ T3703] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.877358][ T3703] ? clear_bhb_loop+0x40/0x90 [ 44.877450][ T3703] ? clear_bhb_loop+0x40/0x90 [ 44.877471][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.877492][ T3703] RIP: 0033:0x7f211bcae9a9 [ 44.877506][ T3703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.877528][ T3703] RSP: 002b:00007f211a30f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.877611][ T3703] RAX: ffffffffffffffda RBX: 00007f211bed5fa0 RCX: 00007f211bcae9a9 [ 44.877642][ T3703] RDX: 0000000000000120 RSI: 0000200000002a00 RDI: 0000000000000005 [ 44.877657][ T3703] RBP: 00007f211a30f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.877672][ T3703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.877687][ T3703] R13: 0000000000000000 R14: 00007f211bed5fa0 R15: 00007ffecae9bcc8 [ 44.877710][ T3703] [ 45.238591][ T3709] SELinux: syz.2.48 (3709) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.265082][ T3709] loop2: detected capacity change from 0 to 1024 [ 45.272039][ T3709] EXT4-fs: Ignoring removed orlov option [ 45.317282][ T3709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.774902][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 45.774919][ T29] audit: type=1326 audit(1753472271.145:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 45.807036][ T29] audit: type=1326 audit(1753472271.175:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b98f2d310 code=0x7ffc0000 [ 45.830366][ T29] audit: type=1326 audit(1753472271.175:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 45.857115][ T3733] loop3: detected capacity change from 0 to 1024 [ 45.858846][ T29] audit: type=1326 audit(1753472271.175:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 45.887768][ T29] audit: type=1326 audit(1753472271.185:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 45.890592][ T3733] ======================================================= [ 45.890592][ T3733] WARNING: The mand mount option has been deprecated and [ 45.890592][ T3733] and is ignored by this kernel. Remove the mand [ 45.890592][ T3733] option from the mount to silence this warning. [ 45.890592][ T3733] ======================================================= [ 45.911400][ T29] audit: type=1326 audit(1753472271.185:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 45.969773][ T29] audit: type=1326 audit(1753472271.185:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 45.993466][ T29] audit: type=1326 audit(1753472271.185:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 45.995492][ T3733] EXT4-fs: Ignoring removed nobh option [ 46.017103][ T29] audit: type=1326 audit(1753472271.185:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 46.017177][ T29] audit: type=1326 audit(1753472271.185:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.3.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 46.070783][ T3733] EXT4-fs: Ignoring removed bh option [ 46.090875][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.105148][ T3736] syzkaller1: entered promiscuous mode [ 46.110954][ T3736] syzkaller1: entered allmulticast mode [ 46.115345][ T3745] usb usb5: usbfs: process 3745 (+}[@) did not claim interface 0 before use [ 46.129615][ T3733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.143975][ T3736] __nla_validate_parse: 4 callbacks suppressed [ 46.143988][ T3736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.50'. [ 46.288614][ T3764] usb usb5: usbfs: process 3764 (+}[@) did not claim interface 0 before use [ 46.317080][ T3772] loop4: detected capacity change from 0 to 128 [ 46.325540][ T3772] FAT-fs (loop4): invalid media value (0x00) [ 46.331788][ T3772] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 46.341117][ T3772] FAT-fs (loop4): Can't find a valid FAT filesystem [ 46.347278][ T3768] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 46.357665][ T3768] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 46.386299][ T3760] loop2: detected capacity change from 0 to 1024 [ 46.434849][ T3760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.450970][ T3760] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.511529][ T3790] loop4: detected capacity change from 0 to 1024 [ 46.546503][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.594280][ T3784] loop1: detected capacity change from 0 to 32768 [ 46.615344][ T3790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.640989][ T3790] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.652334][ T3301] loop1: p1 p2 p3 < p5 p6 p7 > [ 46.662031][ T3301] loop1: p2 size 16775168 extends beyond EOD, truncated [ 46.680199][ T3301] loop1: p5 start 4294970119 is beyond EOD, truncated [ 46.695072][ T3784] loop1: p1 p2 p3 < p5 p6 p7 > [ 46.702075][ T3784] loop1: p2 size 16775168 extends beyond EOD, truncated [ 46.717375][ T3784] loop1: p5 start 4294970119 is beyond EOD, truncated [ 46.766506][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.824085][ T3837] loop1: detected capacity change from 0 to 128 [ 46.841245][ T3837] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.888963][ T3837] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.895952][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 46.910584][ T3852] usb usb5: usbfs: process 3852 (+}[@) did not claim interface 0 before use [ 46.911674][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 46.934384][ T3853] udevd[3853]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 46.947923][ T3659] udevd[3659]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 46.949398][ T3854] udevd[3854]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 46.963073][ T3837] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400) [ 46.977836][ T3837] FAT-fs (loop1): Filesystem has been set read-only [ 47.006737][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 47.007086][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 47.028246][ T3853] udevd[3853]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 47.039730][ T3854] udevd[3854]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 47.071584][ T3863] loop4: detected capacity change from 0 to 512 [ 47.147865][ T3870] loop1: detected capacity change from 0 to 512 [ 47.155706][ T3863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.178582][ T3875] loop0: detected capacity change from 0 to 512 [ 47.194365][ T3863] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.199428][ T3875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.217990][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.237124][ T3870] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.248008][ T3875] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.281795][ T3870] FAULT_INJECTION: forcing a failure. [ 47.281795][ T3870] name failslab, interval 1, probability 0, space 0, times 0 [ 47.294794][ T3870] CPU: 0 UID: 0 PID: 3870 Comm: syz.1.67 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 47.294861][ T3870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.294873][ T3870] Call Trace: [ 47.294880][ T3870] [ 47.294888][ T3870] __dump_stack+0x1d/0x30 [ 47.294910][ T3870] dump_stack_lvl+0xe8/0x140 [ 47.294929][ T3870] dump_stack+0x15/0x1b [ 47.295028][ T3870] should_fail_ex+0x265/0x280 [ 47.295067][ T3870] should_failslab+0x8c/0xb0 [ 47.295090][ T3870] kmem_cache_alloc_noprof+0x50/0x310 [ 47.295115][ T3870] ? getname_flags+0x80/0x3b0 [ 47.295141][ T3870] getname_flags+0x80/0x3b0 [ 47.295169][ T3870] user_path_at+0x28/0x130 [ 47.295197][ T3870] __se_sys_quotactl+0xb6/0x670 [ 47.295255][ T3870] __x64_sys_quotactl+0x55/0x70 [ 47.295368][ T3870] x64_sys_call+0x2886/0x2fb0 [ 47.295390][ T3870] do_syscall_64+0xd2/0x200 [ 47.295408][ T3870] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.295446][ T3870] ? clear_bhb_loop+0x40/0x90 [ 47.295471][ T3870] ? clear_bhb_loop+0x40/0x90 [ 47.295543][ T3870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.295619][ T3870] RIP: 0033:0x7fca3c23e9a9 [ 47.295639][ T3870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.295658][ T3870] RSP: 002b:00007fca3a89f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 47.295677][ T3870] RAX: ffffffffffffffda RBX: 00007fca3c465fa0 RCX: 00007fca3c23e9a9 [ 47.295689][ T3870] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000202 [ 47.295701][ T3870] RBP: 00007fca3a89f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.295715][ T3870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.295797][ T3870] R13: 0000000000000000 R14: 00007fca3c465fa0 R15: 00007ffd42b114f8 [ 47.295816][ T3870] [ 47.512243][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.518042][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.575741][ T3895] netlink: 14 bytes leftover after parsing attributes in process `syz.2.72'. [ 47.593668][ T3875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 47.606538][ T3902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 47.702648][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 47.712083][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 47.721538][ T3911] loop1: detected capacity change from 0 to 1024 [ 47.731417][ T3918] loop2: detected capacity change from 0 to 2048 [ 47.739010][ T3911] EXT4-fs: Ignoring removed nobh option [ 47.744674][ T3911] EXT4-fs: Ignoring removed bh option [ 47.751213][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.807517][ T3659] loop2: p1 < > p2 < > p3 p4 < > [ 47.812617][ T3659] loop2: partition table partially beyond EOD, truncated [ 47.829888][ T3911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.865841][ T3934] Driver unsupported XDP return value 0 on prog (id 73) dev N/A, expect packet loss! [ 47.876655][ T3939] netlink: 136 bytes leftover after parsing attributes in process `syz.4.78'. [ 47.887042][ T3659] loop2: p1 start 2305 is beyond EOD, truncated [ 47.893818][ T3659] loop2: p2 start 4294902784 is beyond EOD, truncated [ 47.900663][ T3659] loop2: p3 start 3724543488 is beyond EOD, truncated [ 47.962952][ T3943] loop0: detected capacity change from 0 to 2048 [ 47.997717][ T3918] loop2: p1 < > p2 < > p3 p4 < > [ 48.002885][ T3918] loop2: partition table partially beyond EOD, truncated [ 48.017308][ T3918] loop2: p1 start 2305 is beyond EOD, truncated [ 48.023657][ T3918] loop2: p2 start 4294902784 is beyond EOD, truncated [ 48.030662][ T3918] loop2: p3 start 3724543488 is beyond EOD, truncated [ 48.039973][ T3943] EXT4-fs (loop0): failed to initialize system zone (-117) [ 48.047633][ T3943] EXT4-fs (loop0): mount failed [ 49.016571][ T3986] loop0: detected capacity change from 0 to 1024 [ 49.033784][ T3986] EXT4-fs: Ignoring removed nobh option [ 49.039507][ T3986] EXT4-fs: Ignoring removed bh option [ 49.069761][ T3986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.164628][ T3998] netlink: 76 bytes leftover after parsing attributes in process `syz.4.88'. [ 49.271456][ T4003] loop4: detected capacity change from 0 to 2048 [ 49.311370][ T4009] loop2: detected capacity change from 0 to 202 [ 49.329049][ T4011] atomic_op ffff88811a693528 conn xmit_atomic 0000000000000000 [ 49.357789][ T3659] loop4: p1 < > p2 < > p3 p4 < > [ 49.362860][ T3659] loop4: partition table partially beyond EOD, truncated [ 49.394181][ T3659] loop4: p1 start 2305 is beyond EOD, truncated [ 49.400561][ T3659] loop4: p2 start 4294902784 is beyond EOD, truncated [ 49.407547][ T3659] loop4: p3 start 3724543488 is beyond EOD, truncated [ 49.433440][ T4021] syz!: rxe_newlink: already configured on team_slave_0 [ 49.450604][ T4021] vlan0: entered promiscuous mode [ 49.456850][ T4003] loop4: p1 < > p2 < > p3 p4 < > [ 49.462077][ T4003] loop4: partition table partially beyond EOD, truncated [ 49.479262][ T4003] loop4: p1 start 2305 is beyond EOD, truncated [ 49.485589][ T4003] loop4: p2 start 4294902784 is beyond EOD, truncated [ 49.492472][ T4003] loop4: p3 start 3724543488 is beyond EOD, truncated [ 49.540041][ T2997] loop4: p1 < > p2 < > p3 p4 < > [ 49.545193][ T2997] loop4: partition table partially beyond EOD, truncated [ 49.570491][ T2997] loop4: p1 start 2305 is beyond EOD, truncated [ 49.576906][ T2997] loop4: p2 start 4294902784 is beyond EOD, truncated [ 49.583824][ T2997] loop4: p3 start 3724543488 is beyond EOD, truncated [ 49.649758][ T4033] loop4: detected capacity change from 0 to 2048 [ 49.719274][ T3659] loop4: p1 < > p2 < > p3 p4 < > [ 49.724441][ T3659] loop4: partition table partially beyond EOD, truncated [ 49.745758][ T3659] loop4: p1 start 2305 is beyond EOD, truncated [ 49.752219][ T3659] loop4: p2 start 4294902784 is beyond EOD, truncated [ 49.759045][ T3659] loop4: p3 start 3724543488 is beyond EOD, truncated [ 49.782615][ T4033] loop4: p1 < > p2 < > p3 p4 < > [ 49.787778][ T4033] loop4: partition table partially beyond EOD, truncated [ 49.797373][ T4033] loop4: p1 start 2305 is beyond EOD, truncated [ 49.803665][ T4033] loop4: p2 start 4294902784 is beyond EOD, truncated [ 49.810565][ T4033] loop4: p3 start 3724543488 is beyond EOD, truncated [ 49.913444][ T3659] udevd[3659]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 49.944391][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.982725][ T4054] netlink: 'syz.3.95': attribute type 13 has an invalid length. [ 50.007963][ T4048] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 50.016750][ T4048] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 50.048612][ T4059] netlink: 181064 bytes leftover after parsing attributes in process `syz.3.95'. [ 50.137653][ T4064] loop4: detected capacity change from 0 to 1024 [ 50.142464][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.151289][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.169000][ T4064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.183423][ T4064] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.242448][ T4054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.252407][ T4054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.285923][ T4054] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.294946][ T4054] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.304073][ T4054] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.313008][ T4054] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.399454][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.501823][ T4094] FAULT_INJECTION: forcing a failure. [ 50.501823][ T4094] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.514960][ T4094] CPU: 1 UID: 0 PID: 4094 Comm: syz.4.103 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 50.515023][ T4094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.515038][ T4094] Call Trace: [ 50.515045][ T4094] [ 50.515051][ T4094] __dump_stack+0x1d/0x30 [ 50.515077][ T4094] dump_stack_lvl+0xe8/0x140 [ 50.515109][ T4094] dump_stack+0x15/0x1b [ 50.515129][ T4094] should_fail_ex+0x265/0x280 [ 50.515159][ T4094] should_fail+0xb/0x20 [ 50.515197][ T4094] should_fail_usercopy+0x1a/0x20 [ 50.515238][ T4094] _copy_to_user+0x20/0xa0 [ 50.515260][ T4094] simple_read_from_buffer+0xb5/0x130 [ 50.515296][ T4094] proc_fail_nth_read+0x100/0x140 [ 50.515327][ T4094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.515419][ T4094] vfs_read+0x1a0/0x6f0 [ 50.515448][ T4094] ? __rcu_read_unlock+0x4f/0x70 [ 50.515469][ T4094] ? __fget_files+0x184/0x1c0 [ 50.515488][ T4094] ksys_read+0xda/0x1a0 [ 50.515554][ T4094] __x64_sys_read+0x40/0x50 [ 50.515585][ T4094] x64_sys_call+0x2d77/0x2fb0 [ 50.515607][ T4094] do_syscall_64+0xd2/0x200 [ 50.515724][ T4094] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.515756][ T4094] ? clear_bhb_loop+0x40/0x90 [ 50.515779][ T4094] ? clear_bhb_loop+0x40/0x90 [ 50.515886][ T4094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.515907][ T4094] RIP: 0033:0x7f729b16d3bc [ 50.515921][ T4094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.516057][ T4094] RSP: 002b:00007f72997d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.516078][ T4094] RAX: ffffffffffffffda RBX: 00007f729b395fa0 RCX: 00007f729b16d3bc [ 50.516093][ T4094] RDX: 000000000000000f RSI: 00007f72997d70a0 RDI: 0000000000000006 [ 50.516108][ T4094] RBP: 00007f72997d7090 R08: 0000000000000000 R09: 0000000000000001 [ 50.516122][ T4094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.516138][ T4094] R13: 0000000000000000 R14: 00007f729b395fa0 R15: 00007ffe18e2d4a8 [ 50.516159][ T4094] [ 50.831825][ T4098] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 50.841041][ T4098] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.189661][ T4111] loop4: detected capacity change from 0 to 512 [ 51.209502][ T4111] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.215995][ T4111] EXT4-fs: Ignoring removed bh option [ 51.237544][ T4111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.273973][ T4111] EXT4-fs (loop4): 1 truncate cleaned up [ 51.287406][ T4111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.373744][ T4116] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 51.408480][ T4116] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.452007][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 51.452077][ T29] audit: type=1400 audit(1753472276.825:522): avc: denied { append } for pid=4107 comm="syz.4.107" path="/34/bus/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.543361][ T29] audit: type=1326 audit(1753472276.885:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 51.566716][ T29] audit: type=1326 audit(1753472276.885:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 51.590207][ T29] audit: type=1326 audit(1753472276.885:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 51.613925][ T29] audit: type=1326 audit(1753472276.885:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 51.637348][ T29] audit: type=1400 audit(1753472276.885:527): avc: denied { create } for pid=4120 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.656720][ T29] audit: type=1326 audit(1753472276.885:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 51.680322][ T29] audit: type=1326 audit(1753472276.885:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b98f2d310 code=0x7ffc0000 [ 51.703846][ T29] audit: type=1326 audit(1753472276.885:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b98f2d45f code=0x7ffc0000 [ 51.727119][ T29] audit: type=1326 audit(1753472276.885:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4120 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 51.757904][ T4124] syzkaller1: entered promiscuous mode [ 51.763499][ T4124] syzkaller1: entered allmulticast mode [ 51.772921][ T4124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'. [ 51.833995][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.916558][ T4134] netlink: 'syz.2.112': attribute type 13 has an invalid length. [ 51.955959][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.981887][ T4142] netlink: 181064 bytes leftover after parsing attributes in process `syz.2.112'. [ 52.028917][ T4150] FAULT_INJECTION: forcing a failure. [ 52.028917][ T4150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.042310][ T4150] CPU: 0 UID: 0 PID: 4150 Comm: syz.1.116 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 52.042340][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.042420][ T4150] Call Trace: [ 52.042427][ T4150] [ 52.042436][ T4150] __dump_stack+0x1d/0x30 [ 52.042461][ T4150] dump_stack_lvl+0xe8/0x140 [ 52.042483][ T4150] dump_stack+0x15/0x1b [ 52.042501][ T4150] should_fail_ex+0x265/0x280 [ 52.042535][ T4150] should_fail+0xb/0x20 [ 52.042605][ T4150] should_fail_usercopy+0x1a/0x20 [ 52.042641][ T4150] _copy_from_user+0x1c/0xb0 [ 52.042709][ T4150] __sys_bpf+0x178/0x790 [ 52.042748][ T4150] __x64_sys_bpf+0x41/0x50 [ 52.042777][ T4150] x64_sys_call+0x2478/0x2fb0 [ 52.042800][ T4150] do_syscall_64+0xd2/0x200 [ 52.042839][ T4150] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.042867][ T4150] ? clear_bhb_loop+0x40/0x90 [ 52.042965][ T4150] ? clear_bhb_loop+0x40/0x90 [ 52.042990][ T4150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.043032][ T4150] RIP: 0033:0x7fca3c23e9a9 [ 52.043114][ T4150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.043133][ T4150] RSP: 002b:00007fca3a89f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.043153][ T4150] RAX: ffffffffffffffda RBX: 00007fca3c465fa0 RCX: 00007fca3c23e9a9 [ 52.043167][ T4150] RDX: 000000000000000d RSI: 0000200000000140 RDI: 000000000000000a [ 52.043217][ T4150] RBP: 00007fca3a89f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.043230][ T4150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.043242][ T4150] R13: 0000000000000000 R14: 00007fca3c465fa0 R15: 00007ffd42b114f8 [ 52.043262][ T4150] [ 52.045430][ T4151] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 52.237210][ T4134] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.244918][ T4134] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.257505][ T4151] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 52.303207][ T4134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.315435][ T4134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.362832][ T4134] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.372238][ T4134] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.381400][ T4134] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.390419][ T4134] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.472563][ T4167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.118'. [ 52.509584][ T4172] netlink: 48 bytes leftover after parsing attributes in process `syz.4.118'. [ 52.560009][ T4181] FAULT_INJECTION: forcing a failure. [ 52.560009][ T4181] name failslab, interval 1, probability 0, space 0, times 0 [ 52.572923][ T4181] CPU: 1 UID: 0 PID: 4181 Comm: syz.2.120 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 52.572977][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.572990][ T4181] Call Trace: [ 52.572995][ T4181] [ 52.573003][ T4181] __dump_stack+0x1d/0x30 [ 52.573030][ T4181] dump_stack_lvl+0xe8/0x140 [ 52.573056][ T4181] dump_stack+0x15/0x1b [ 52.573108][ T4181] should_fail_ex+0x265/0x280 [ 52.573140][ T4181] should_failslab+0x8c/0xb0 [ 52.573169][ T4181] __kmalloc_noprof+0xa5/0x3e0 [ 52.573249][ T4181] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 52.573282][ T4181] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 52.573310][ T4181] ? xas_load+0x413/0x430 [ 52.573424][ T4181] genl_family_rcv_msg_doit+0x48/0x1b0 [ 52.573459][ T4181] ? mod_memcg_lruvec_state+0x20e/0x2e0 [ 52.573492][ T4181] ? genl_get_cmd+0x639/0x660 [ 52.573553][ T4181] genl_rcv_msg+0x422/0x460 [ 52.573605][ T4181] ? __pfx_cgroupstats_user_cmd+0x10/0x10 [ 52.573642][ T4181] netlink_rcv_skb+0x120/0x220 [ 52.573696][ T4181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.573745][ T4181] genl_rcv+0x28/0x40 [ 52.573812][ T4181] netlink_unicast+0x5a8/0x680 [ 52.573843][ T4181] netlink_sendmsg+0x58b/0x6b0 [ 52.573871][ T4181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.573965][ T4181] __sock_sendmsg+0x145/0x180 [ 52.573993][ T4181] ____sys_sendmsg+0x31e/0x4e0 [ 52.574053][ T4181] ___sys_sendmsg+0x17b/0x1d0 [ 52.574087][ T4181] __x64_sys_sendmsg+0xd4/0x160 [ 52.574178][ T4181] x64_sys_call+0x2999/0x2fb0 [ 52.574286][ T4181] do_syscall_64+0xd2/0x200 [ 52.574370][ T4181] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.574399][ T4181] ? clear_bhb_loop+0x40/0x90 [ 52.574423][ T4181] ? clear_bhb_loop+0x40/0x90 [ 52.574470][ T4181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.574495][ T4181] RIP: 0033:0x7f211bcae9a9 [ 52.574553][ T4181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.574574][ T4181] RSP: 002b:00007f211a30f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.574598][ T4181] RAX: ffffffffffffffda RBX: 00007f211bed5fa0 RCX: 00007f211bcae9a9 [ 52.574610][ T4181] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 52.574622][ T4181] RBP: 00007f211a30f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.574640][ T4181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.574651][ T4181] R13: 0000000000000000 R14: 00007f211bed5fa0 R15: 00007ffecae9bcc8 [ 52.574677][ T4181] [ 52.846795][ T4183] loop4: detected capacity change from 0 to 128 [ 52.854234][ T4183] FAT-fs (loop4): invalid media value (0x00) [ 52.860307][ T4183] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 52.869454][ T4183] FAT-fs (loop4): Can't find a valid FAT filesystem [ 53.036401][ T4204] loop4: detected capacity change from 0 to 1024 [ 53.043872][ T4204] EXT4-fs: Ignoring removed nobh option [ 53.049579][ T4204] EXT4-fs: Ignoring removed bh option [ 53.084054][ T4204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.613754][ T4252] xt_ecn: cannot match TCP bits for non-tcp packets [ 53.750818][ T4252] loop1: detected capacity change from 0 to 1024 [ 53.769731][ T4252] ext3: Bad value for 'errors' [ 54.011219][ T4282] loop2: detected capacity change from 0 to 128 [ 54.054958][ T4282] FAT-fs (loop2): invalid media value (0x00) [ 54.061103][ T4282] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 54.070388][ T4282] FAT-fs (loop2): Can't find a valid FAT filesystem [ 54.175082][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.236268][ T4290] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 54.245707][ T4290] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 54.296551][ T4299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.326588][ T4302] loop3: detected capacity change from 0 to 512 [ 54.341189][ T4304] netlink: 32 bytes leftover after parsing attributes in process `syz.2.133'. [ 54.367251][ T4299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.376493][ T4299] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 54.388376][ T4302] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.132: casefold flag without casefold feature [ 54.410107][ T4299] SELinux: failed to load policy [ 54.415285][ T4302] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.132: couldn't read orphan inode 15 (err -117) [ 54.445965][ T4313] FAULT_INJECTION: forcing a failure. [ 54.445965][ T4313] name failslab, interval 1, probability 0, space 0, times 0 [ 54.458855][ T4313] CPU: 0 UID: 0 PID: 4313 Comm: syz.2.134 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 54.458943][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.458958][ T4313] Call Trace: [ 54.458966][ T4313] [ 54.458973][ T4313] __dump_stack+0x1d/0x30 [ 54.458999][ T4313] dump_stack_lvl+0xe8/0x140 [ 54.459069][ T4313] dump_stack+0x15/0x1b [ 54.459195][ T4313] should_fail_ex+0x265/0x280 [ 54.459238][ T4313] should_failslab+0x8c/0xb0 [ 54.459259][ T4313] __kvmalloc_node_noprof+0x123/0x4e0 [ 54.459285][ T4313] ? seq_read_iter+0x13e/0x940 [ 54.459313][ T4313] seq_read_iter+0x13e/0x940 [ 54.459347][ T4313] ? _parse_integer+0x27/0x40 [ 54.459375][ T4313] seq_read+0x1f7/0x240 [ 54.459456][ T4313] ? __pfx_seq_read+0x10/0x10 [ 54.459479][ T4313] proc_reg_read+0xe9/0x1c0 [ 54.459500][ T4313] ? vfs_read+0x189/0x6f0 [ 54.459602][ T4313] ? __pfx_proc_reg_read+0x10/0x10 [ 54.459621][ T4313] vfs_read+0x1a0/0x6f0 [ 54.459648][ T4313] ? __rcu_read_unlock+0x4f/0x70 [ 54.459671][ T4313] ? __fget_files+0x184/0x1c0 [ 54.459712][ T4313] ksys_read+0xda/0x1a0 [ 54.459757][ T4313] __x64_sys_read+0x40/0x50 [ 54.459809][ T4313] x64_sys_call+0x2d77/0x2fb0 [ 54.459894][ T4313] do_syscall_64+0xd2/0x200 [ 54.459916][ T4313] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.459993][ T4313] ? clear_bhb_loop+0x40/0x90 [ 54.460031][ T4313] ? clear_bhb_loop+0x40/0x90 [ 54.460056][ T4313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.460083][ T4313] RIP: 0033:0x7f211bcae9a9 [ 54.460102][ T4313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.460145][ T4313] RSP: 002b:00007f211a30f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.460162][ T4313] RAX: ffffffffffffffda RBX: 00007f211bed5fa0 RCX: 00007f211bcae9a9 [ 54.460174][ T4313] RDX: 0000000000000ffc RSI: 00002000000000c0 RDI: 0000000000000003 [ 54.460187][ T4313] RBP: 00007f211a30f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.460207][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.460218][ T4313] R13: 0000000000000000 R14: 00007f211bed5fa0 R15: 00007ffecae9bcc8 [ 54.460236][ T4313] [ 54.689695][ T4302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.729678][ T4316] program syz.2.136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.764441][ T4319] xt_hashlimit: overflow, try lower: 2/0 [ 54.793446][ T4319] loop2: detected capacity change from 0 to 512 [ 54.810435][ T4319] ext4: Unknown parameter 'smackfsroot' [ 54.828242][ T4319] loop2: detected capacity change from 0 to 128 [ 54.863120][ T4319] vfat: Unknown parameter 'U' [ 54.886403][ T4319] loop2: detected capacity change from 0 to 512 [ 54.922070][ T4319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.932161][ T4344] syzkaller1: entered promiscuous mode [ 54.936823][ T4319] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.940048][ T4344] syzkaller1: entered allmulticast mode [ 54.986100][ T4344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.138'. [ 55.109106][ T4355] loop1: detected capacity change from 0 to 1024 [ 55.126938][ T4355] EXT4-fs: Ignoring removed nobh option [ 55.132627][ T4355] EXT4-fs: Ignoring removed bh option [ 55.157357][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.168272][ T4355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.217954][ T4367] netlink: 'syz.3.141': attribute type 4 has an invalid length. [ 55.225710][ T4367] netlink: 17 bytes leftover after parsing attributes in process `syz.3.141'. [ 55.298980][ T4371] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 55.307893][ T4371] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 55.346663][ T4377] loop3: detected capacity change from 0 to 128 [ 55.354286][ T4377] FAT-fs (loop3): invalid media value (0x00) [ 55.360406][ T4377] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 55.369623][ T4377] FAT-fs (loop3): Can't find a valid FAT filesystem [ 55.659642][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.877442][ T4393] loop3: detected capacity change from 0 to 1024 [ 55.909828][ T4393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.946268][ T4395] syz!: rxe_newlink: already configured on team_slave_0 [ 55.985820][ T4395] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 55.997279][ T4393] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.129444][ T4407] syz!: rxe_newlink: already configured on team_slave_0 [ 56.138711][ T4405] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 56.202534][ T4417] loop2: detected capacity change from 0 to 2048 [ 56.223075][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.268392][ T3659] loop2: p1 < > p2 < > p3 p4 < > [ 56.273487][ T3659] loop2: partition table partially beyond EOD, truncated [ 56.294326][ T3659] loop2: p1 start 2305 is beyond EOD, truncated [ 56.300817][ T3659] loop2: p2 start 4294902784 is beyond EOD, truncated [ 56.307758][ T3659] loop2: p3 start 3724543488 is beyond EOD, truncated [ 56.342684][ T4417] loop2: p1 < > p2 < > p3 p4 < > [ 56.347778][ T4417] loop2: partition table partially beyond EOD, truncated [ 56.357391][ T4417] loop2: p1 start 2305 is beyond EOD, truncated [ 56.363694][ T4417] loop2: p2 start 4294902784 is beyond EOD, truncated [ 56.370525][ T4417] loop2: p3 start 3724543488 is beyond EOD, truncated [ 56.436510][ T3659] udevd[3659]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 56.472330][ T4441] netlink: 'syz.0.152': attribute type 13 has an invalid length. [ 56.535371][ T4445] netlink: 181064 bytes leftover after parsing attributes in process `syz.0.152'. [ 56.583467][ T4446] syz!: rxe_newlink: already configured on team_slave_0 [ 56.609646][ T4446] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 56.619915][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.631489][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.680060][ T4441] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.689111][ T4441] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.698077][ T4441] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.707137][ T4441] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.848575][ T4450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.154'. [ 56.883324][ T4454] loop0: detected capacity change from 0 to 128 [ 56.934750][ T4454] syz.0.155: attempt to access beyond end of device [ 56.934750][ T4454] loop0: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 56.966071][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 56.966122][ T29] audit: type=1400 audit(1753472282.335:833): avc: denied { read } for pid=4457 comm="syz.2.156" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.997273][ T29] audit: type=1400 audit(1753472282.335:834): avc: denied { open } for pid=4457 comm="syz.2.156" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.022173][ T4454] syz.0.155: attempt to access beyond end of device [ 57.022173][ T4454] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 57.035740][ T4454] syz.0.155: attempt to access beyond end of device [ 57.035740][ T4454] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 57.049322][ T4454] syz.0.155: attempt to access beyond end of device [ 57.049322][ T4454] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 57.063597][ T4454] syz.0.155: attempt to access beyond end of device [ 57.063597][ T4454] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 57.077226][ T4454] syz.0.155: attempt to access beyond end of device [ 57.077226][ T4454] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 57.090762][ T4454] syz.0.155: attempt to access beyond end of device [ 57.090762][ T4454] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 57.119700][ T4454] syz.0.155: attempt to access beyond end of device [ 57.119700][ T4454] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 57.135826][ T29] audit: type=1400 audit(1753472282.515:835): avc: denied { ioctl } for pid=4457 comm="syz.2.156" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.163853][ T4454] syz.0.155: attempt to access beyond end of device [ 57.163853][ T4454] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 57.180394][ T4463] loop3: detected capacity change from 0 to 512 [ 57.213980][ T4454] syz.0.155: attempt to access beyond end of device [ 57.213980][ T4454] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 57.240120][ T4463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.256098][ T4458] unsupported nla_type 52263 [ 57.265875][ T29] audit: type=1400 audit(1753472282.635:836): avc: denied { create } for pid=4457 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.286500][ T29] audit: type=1400 audit(1753472282.635:837): avc: denied { write } for pid=4457 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.306495][ T29] audit: type=1400 audit(1753472282.635:838): avc: denied { nlmsg_write } for pid=4457 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.357116][ T4463] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.403363][ T29] audit: type=1326 audit(1753472282.745:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 57.427059][ T29] audit: type=1326 audit(1753472282.745:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 57.450693][ T29] audit: type=1326 audit(1753472282.745:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 57.474845][ T29] audit: type=1326 audit(1753472282.745:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b98f2e9a9 code=0x7ffc0000 [ 57.550513][ T4503] loop0: detected capacity change from 0 to 1024 [ 57.584987][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.598987][ T4503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.634845][ T4503] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.664429][ T4512] loop3: detected capacity change from 0 to 1024 [ 57.698827][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.748623][ T4512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.816621][ T4503] xt_CT: No such helper "pptp" [ 57.838379][ T4512] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.890810][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.948709][ T4528] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 57.957511][ T4528] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 58.070436][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.111077][ T4551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.166'. [ 58.227526][ T4559] loop3: detected capacity change from 0 to 256 [ 58.273815][ T4559] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.291505][ T4563] syzkaller1: entered promiscuous mode [ 58.297197][ T4563] syzkaller1: entered allmulticast mode [ 58.307952][ T4559] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 58.316635][ T4559] FAT-fs (loop3): Filesystem has been set read-only [ 58.326764][ T4563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.169'. [ 58.489826][ T4574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.513218][ T4574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.533955][ T4574] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 58.555870][ T4574] SELinux: failed to load policy [ 58.719967][ T4591] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 58.738223][ T4591] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 58.794271][ T4601] netlink: 32 bytes leftover after parsing attributes in process `syz.2.179'. [ 58.799035][ T4602] loop0: detected capacity change from 0 to 2048 [ 58.835707][ T4606] usb usb5: usbfs: process 4606 (+}[@) did not claim interface 0 before use [ 58.860731][ T4602] loop0: p1 < > p2 < > p3 p4 < > [ 58.865827][ T4602] loop0: partition table partially beyond EOD, truncated [ 58.897200][ T4602] loop0: p1 start 2305 is beyond EOD, truncated [ 58.903616][ T4602] loop0: p2 start 4294902784 is beyond EOD, truncated [ 58.910500][ T4602] loop0: p3 start 3724543488 is beyond EOD, truncated [ 59.009903][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.017825][ T3659] udevd[3659]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 59.039772][ T2997] ================================================================== [ 59.048257][ T2997] BUG: KCSAN: data-race in d_delete / lookup_fast [ 59.054820][ T2997] [ 59.057165][ T2997] read-write to 0xffff88811a887cc0 of 4 bytes by task 3854 on cpu 0: [ 59.065246][ T2997] d_delete+0x15a/0x180 [ 59.069430][ T2997] d_delete_notify+0x32/0x100 [ 59.074132][ T2997] vfs_unlink+0x30b/0x420 [ 59.078495][ T2997] do_unlinkat+0x28e/0x4c0 [ 59.082936][ T2997] __x64_sys_unlink+0x2e/0x40 [ 59.087638][ T2997] x64_sys_call+0x22a6/0x2fb0 [ 59.092336][ T2997] do_syscall_64+0xd2/0x200 [ 59.096851][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.102761][ T2997] [ 59.105095][ T2997] read to 0xffff88811a887cc0 of 4 bytes by task 2997 on cpu 1: [ 59.112645][ T2997] lookup_fast+0xf0/0x320 [ 59.116994][ T2997] walk_component+0x3f/0x220 [ 59.121601][ T2997] path_lookupat+0xfe/0x2a0 [ 59.126118][ T2997] filename_lookup+0x147/0x340 [ 59.130903][ T2997] do_readlinkat+0x7d/0x320 [ 59.135474][ T2997] __x64_sys_readlink+0x47/0x60 [ 59.140356][ T2997] x64_sys_call+0x2cf3/0x2fb0 [ 59.145049][ T2997] do_syscall_64+0xd2/0x200 [ 59.149566][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.155479][ T2997] [ 59.157809][ T2997] value changed: 0x00300108 -> 0x00004008 [ 59.163534][ T2997] [ 59.165865][ T2997] Reported by Kernel Concurrency Sanitizer on: [ 59.172197][ T2997] CPU: 1 UID: 0 PID: 2997 Comm: udevd Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 59.184189][ T2997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.194258][ T2997] ================================================================== [ 59.210212][ T4625] vlan2: entered allmulticast mode [ 59.215748][ T4625] dummy0: entered allmulticast mode [ 59.256827][ T4621] FAULT_INJECTION: forcing a failure. [ 59.256827][ T4621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.270009][ T4621] CPU: 1 UID: 0 PID: 4621 Comm: syz.2.184 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 59.270045][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.270061][ T4621] Call Trace: [ 59.270070][ T4621] [ 59.270079][ T4621] __dump_stack+0x1d/0x30 [ 59.270125][ T4621] dump_stack_lvl+0xe8/0x140 [ 59.270156][ T4621] dump_stack+0x15/0x1b [ 59.270177][ T4621] should_fail_ex+0x265/0x280 [ 59.270222][ T4621] should_fail+0xb/0x20 [ 59.270247][ T4621] should_fail_usercopy+0x1a/0x20 [ 59.270276][ T4621] fpu__restore_sig+0x12d/0xaa0 [ 59.270315][ T4621] ? should_fail_ex+0xdb/0x280 [ 59.270407][ T4621] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 59.270444][ T4621] x64_sys_call+0x2e8a/0x2fb0 [ 59.270472][ T4621] do_syscall_64+0xd2/0x200 [ 59.270511][ T4621] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.270602][ T4621] ? clear_bhb_loop+0x40/0x90 [ 59.270630][ T4621] ? clear_bhb_loop+0x40/0x90 [ 59.270732][ T4621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.270752][ T4621] RIP: 0033:0x7f211bcae9a7 [ 59.270767][ T4621] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 59.270858][ T4621] RSP: 002b:00007f211a30f038 EFLAGS: 00000246 [ 59.270872][ T4621] RAX: 0000000000000000 RBX: 00007f211bed5fa0 RCX: 00007f211bcae9a9 [ 59.270884][ T4621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 59.270895][ T4621] RBP: 00007f211a30f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.270908][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.270923][ T4621] R13: 0000000000000000 R14: 00007f211bed5fa0 R15: 00007ffecae9bcc8 [ 59.271019][ T4621] [ 59.455809][ T4636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 59.504987][ T4636] bridge0: port 3(team0) entered disabled state [ 59.513356][ T4634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.522016][ T4634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.535027][ T4636] bridge_slave_1: left allmulticast mode [ 59.540948][ T4636] bridge_slave_1: left promiscuous mode [ 59.546706][ T4636] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.555017][ T4636] bridge_slave_0: left allmulticast mode [ 59.560801][ T4636] bridge_slave_0: left promiscuous mode [ 59.566647][ T4636] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.580944][ T4635] loop0: detected capacity change from 0 to 512 [ 59.621181][ T4638] loop1: detected capacity change from 0 to 1024 [ 59.642894][ T4635] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.186: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 59.706233][ T4638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.754977][ T4635] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.186: Bad quota inode: 3, type: 0 [ 59.767588][ T4638] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.779494][ T4635] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 59.801285][ T4635] EXT4-fs (loop0): mount failed [ 60.319603][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.