last executing test programs: 26.260971994s ago: executing program 1 (id=150): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) perf_event_open(0x0, 0x0, 0x40400000000005, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa40}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000300)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r6}, 0x9) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 26.208364245s ago: executing program 1 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) 26.150127495s ago: executing program 1 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000e2fffff4f8122c9180896951b22788e2e2ad0ec37740692dc6f3a30ff083b5c841835399cac800"/58, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="18000001006bce230009000000000000007106004566101f9c7b675b3d5b2200000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x1e0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000100)=@ethtool_channels={0x3c, 0xe35, 0x4, 0x4, 0x7, 0x7, 0x10, 0x7ff, 0xffff}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000001000000050000000400000001180000", @ANYRES32=0x1, @ANYBLOB="0500007fb50000000000ef000000000016000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000020000000600"/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x7, 0x4, {{0x1a, 0x4, 0x1, 0x8, 0x68, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp_addr={0x44, 0xc, 0x5a, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x689}]}, @timestamp_addr={0x44, 0x1c, 0xca, 0x1, 0x3, [{@remote, 0xaa84}, {@multicast2, 0x2}, {@local, 0xd}]}, @rr={0x7, 0x17, 0x83, [@multicast2, @empty, @rand_addr=0x64010100, @private=0xa010101, @loopback]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xf8, [@loopback, @rand_addr=0x64010102, @private=0xa010100]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0xff}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 25.993662708s ago: executing program 1 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200002600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000080)=r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x600, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@noinit_itable}, {@usrquota}, {@jqfmt_vfsv0}, {@abort}, {@nodelalloc}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000c00)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kfree\x00', r6, 0x0, 0x5}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000c32976163e2a80ec0000000000000000020000000000000000000000000000000000006d4f00"/576]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000120010002bbd7000fedbdf252d097f084e230007070000000000000002000000050000a5464abc00ff7f00000700000003000000", @ANYRES32=r5, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r11, 0x4b66, &(0x7f0000000040)={0x2f01, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r9}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) rt_sigaction(0x14, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 25.8712471s ago: executing program 1 (id=158): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r2, @ANYBLOB="0300000000000900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000008000"/17], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000f, 0x13, r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) eventfd2(0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newlink={0x64, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='mm_page_alloc\x00', r6, 0x0, 0xf29}, 0x18) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) 25.696528083s ago: executing program 1 (id=159): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 25.696325203s ago: executing program 32 (id=159): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 20.996369035s ago: executing program 5 (id=224): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) recvfrom$x25(r0, &(0x7f00000002c0)=""/147, 0x93, 0x40000040, 0x0, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x6}, 0x14) ioprio_set$pid(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfd, {0xa, 0x80, 0x14, 0x6, 0x0, 0x4, 0xff, 0x2, 0x1000}, [@RTA_IIF={0x8, 0x3, r4}, @RTA_MARK={0x8, 0x10, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20008800) io_setup(0x4, &(0x7f00000001c0)=0x0) r6 = eventfd2(0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000002200)=[&(0x7f0000000040)={0x40000000, 0x0, 0x30, 0x1, 0x1a5, r6, 0x0, 0x0, 0x1, 0x0, 0x1, r6}]) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x300, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x120, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe4, 0x6, "f7c5f3e1202fd2f308845158f2312eee21fb0224826c59b6923c213309e18aa0979f3de00cc39b06e6523209570ca420151b2bce9463163772a4c2db211a791487dec42cad3cf767ad70c32d26466ddd38d1999f66f6be37f24975fa6369ef89d5c8388374d0bce42017db40cf320feb11f5cb88f5523fca6ebba1c34deda1c2db423c0cb58d4e1559402ffa07ed49e4eda2a8dec8f23716a16bfcc6db8765fc0bcf81733bdee7fec470d5a4ccdf00f3b0a88f071fe6fa06fba860f0ea42b7ca703d6a556fb449a9bc92d44c55bf6964d5963ad26daa8f1cbe1c98573b4442b1"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8001}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_USERDATA={0xa, 0xd, 0x1, 0x0, "bfa8a2557db4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x80}, 0x40000880) 20.73780584s ago: executing program 5 (id=232): syz_io_uring_setup(0x62bd, &(0x7f0000000000)={0x0, 0x22, 0x10000, 0x3, 0x29c}, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x6e, 0x0, 0x0) close(r4) poll(&(0x7f0000000000)=[{r3, 0xd010}], 0x1, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000b00)=""/109) msgget$private(0x0, 0x200) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000038c6039e01e82254e8a84de03937e342a43dc6565a640daed38468d705b24a72d4fdc0e6e41f0f44f365c2648f2cf94d00b9584ac5085f3523b649f82dcb1b02c58741c93205d8e75be6ab86d45f6ac548d3b6b743062bc899085cc025d815fc1edd282125800a1e900ab7", @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r6, 0x4}, 0x50) 20.66574457s ago: executing program 5 (id=234): socket$kcm(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r2, 0x29, 0x4d, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) link(0x0, 0x0) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=""/17, 0x11}, 0xfb9}], 0x1, 0x5aa, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r7, &(0x7f0000004200)='t', 0x1) recvmsg(r2, &(0x7f0000000080)={&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000800)=""/66, 0x42}, {&(0x7f0000000880)=""/199, 0xc7}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/129, 0x81}, {&(0x7f0000000b40)=""/126, 0x7e}, {&(0x7f0000000bc0)=""/127, 0x7f}, {&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000000d40)=""/159, 0x9f}, {&(0x7f0000000e00)=""/227, 0xe3}], 0x9}, 0x40000040) sendfile(r7, r6, 0x0, 0x7ffff000) 20.080657219s ago: executing program 3 (id=243): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x18) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 20.069802269s ago: executing program 3 (id=244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r0], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) alarm(0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000580)={r4, 0x6}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) kexec_load(0x4, 0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="c16ab73023815e", @ANYRES32=0xffffffffffffffff, @ANYRES16=r7, @ANYRES16=r8, @ANYRES64=r8, @ANYRESDEC], 0xfffffdef}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000001", @ANYRES16=0x0, @ANYRESHEX=r9], 0x2c}, 0x1, 0x0, 0x0, 0x24008090}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r12, @ANYRESOCT=r6], 0x84}}, 0x40000) r13 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r13, 0x2285, 0x0) 20.068955169s ago: executing program 3 (id=246): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x41) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x0, 0x6}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212, 0x0, 0x2e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010129bd70080000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000850) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) 19.840558383s ago: executing program 3 (id=249): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3UFvG1kdAPD/OHZp2nSTBQ6wEsvCLkorqJ1s2DbiUIqE4FQJKPcSEieK4sRR7LRNVEEqPgASQoDECS5ckPgASKgSF44IqRKcQYBACFo4cIDOyvY4TVM7cVs3TuPfT5rMmzfz/H/P0YznzTzNBDC03oqIqxHxKE3TCxExnuXnsil2WlNju4cP7sw3piTS9Po/k0iyvPZnJdn8bFbsdER87csR30yejlvb2l6Zq1TKG9lyqb66XqptbV9cXp1bKi+V12Zmpi/NXp59b3aqL+08FxFXvvjXH3z3Z1+68qvP3PrTjb+f/1ajWmPZ+r3teEb5g1a2ml5ofhd7C2w8Z7DjKN9sYWa00xYjT+Xcfcl1AgCgs8Y5/gcj4pMRcSHGY+Tg01kAAADgFZR+fiz+l0SknZ3qkg8AAAC8QnLNMbBJrpiNBRiLXK5YbI3h/XCcyVWqtfqnF6ubawutsbITUcgtLlfKU9lY4YkoJI3l6Wb68fK7+5ZnIuL1iPj++GhzuThfrSwM+uIHAAAADImz+/r//xlv9f8BAACAE2Zi0BUAAAAAXjr9fwAAADj59P8BAADgRPvKtWuNKW2//3rh5tbmSvXmxYVybaW4ujlfnK9urBeXqtWl5jP7Vg/7vEq1uv7ZWNu8XaqXa/VSbWv7xmp1c61+Y/mJV2ADAAAAR+j1j9/7QxIRO58bbU4Np3or2uNmwHGV300l2bzDbv3H11rzvxxRpYAjMTLoCgADkx90BYCBKQy6AsDAJYes7zp457fZ/BP9rQ8AANB/kx/tfv8/d2DJnYNXA8eenRiGl/v/MLya9/97HcnrZAFOlIIzABh6L3z//1Bp+kwVAgAA+m6sOSW5YnZ5byxyuWIx4lzztQCFZHG5Up6KiNci4vfjhQ80lqebJZND+wwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAAJ1pE7m/Jr1vP8p8cf2ds//WBU8l/xyN7ReitH1//4e25en1jupH/r938+o+y/HcHcQUDAAAAhsIzvcC/3U9v9+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePrgz356OMu4/vhARE53i5+N0c346ChFx5t9J5PeUy0XESB/ijzb+fKRT/KRRrd2Q++Mn7bIvaOfugfFjIvsWOsU/24f4MMzuNY4/Vzvtf7l4qznvvP/lI55Yfl7dj3+xe/wb6bL/n+sxxhv3f1HqGv9uxBv5zsefdvykS/y3e4z/ja9vb3dbl/4kYrLj70/yRKxSfXW9VNvavri8OrdUXiqvzcxMX5q9PPve7FRpcblSzv52jPG9j/3y0UHtP9Ml/sQh7X+nx/b///7tBx9qJQud4p9/u0P83/w02+Lp+O3fvk9l6cb6yXZ6p5Xe682f/+7Ng9q/0KX9h/3/z/fY/gtf/c6fe9wUADgCta3tlblKpbxxYhONXvoxqIbEMUx8u68fmKZp2tinXuBzkjgOX0szMegjEwAA0G+PT/oHXRMAAAAAAAAAAAAAAAAAAAAYXkfxOLH9MXd2U0k/HqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAX7wcAAP//ZWfZVg==") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5}) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r7 = dup(0xffffffffffffffff) write$P9_RLERRORu(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00', @ANYBLOB="fe4cecb210"], 0x53) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, 0x0, 0x25, 0xd, @val=@uprobe_multi={&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=[0xeaa], &(0x7f0000000740)=[0x4], 0x1, 0x1}}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000280)='kfree\x00', r4, 0x0, 0x2000000000}, 0x18) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x5, 0x897, 0x200, 0x0, 0xf}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x3) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0200009078000155bbf146ac7278038834525f93f3d8b693ea3a023c4f757d81f4f956627d05cbe0c6256bf126644b7e45e0ca777c71af2cc074ab694851b0f47bf99dea99da2dd2905dad2c77ca649bb0831d5a0ed897c1faf8"], 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.977122627s ago: executing program 3 (id=260): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf, 0x7ff}, 0x10}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000ff", @ANYRES64=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x1000004, 0x2dd, 0x100, 0x0, 0x1, 0x10}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0xffffffffffffffff], 0xb4}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2084083, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES8=r8, @ANYRESHEX=0x0, @ANYRES16], 0x0, 0x23e, &(0x7f0000000e00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$kcm(0x2d, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES64=r5, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 18.975029657s ago: executing program 5 (id=262): socket$kcm(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r2, 0x29, 0x4d, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) link(0x0, 0x0) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=""/17, 0x11}, 0xfb9}], 0x1, 0x5aa, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r7, &(0x7f0000004200)='t', 0x1) recvmsg(r2, &(0x7f0000000080)={&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000800)=""/66, 0x42}, {&(0x7f0000000880)=""/199, 0xc7}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/129, 0x81}, {&(0x7f0000000b40)=""/126, 0x7e}, {&(0x7f0000000bc0)=""/127, 0x7f}, {&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000000d40)=""/159, 0x9f}, {&(0x7f0000000e00)=""/227, 0xe3}], 0x9}, 0x40000040) sendfile(r7, r6, 0x0, 0x7ffff000) 18.644505922s ago: executing program 3 (id=265): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0xfffffffffffffd71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x8041, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x67) close(r3) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000006040000003f8e29ce0800f90a89db5adb00df0c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$key(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xfcc8}}, 0x4000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500007400019078ac1e0001ac1414aa03019078036100004600000000004000002f0009ac148069ac1414bb44440001000086dd000000006401010100000000ac14143200000000000000000000004fe0000002000000007f00000100000008ac1414aa00000004e00000010000000000000000e3a40eb6c6c4d96e29fb4c17f648507222eba4f30b3a59c3354d36f71e8ec6578af09b0e8cd7507a2647667bccaa9454bed351327954dc3affbda041ab4331e92217af5ceae3bbcb50"], 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) membarrier(0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000014000000000000", @ANYRES16=r4, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 18.624371432s ago: executing program 33 (id=265): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0xfffffffffffffd71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x8041, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x67) close(r3) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000006040000003f8e29ce0800f90a89db5adb00df0c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$key(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xfcc8}}, 0x4000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500007400019078ac1e0001ac1414aa03019078036100004600000000004000002f0009ac148069ac1414bb44440001000086dd000000006401010100000000ac14143200000000000000000000004fe0000002000000007f00000100000008ac1414aa00000004e00000010000000000000000e3a40eb6c6c4d96e29fb4c17f648507222eba4f30b3a59c3354d36f71e8ec6578af09b0e8cd7507a2647667bccaa9454bed351327954dc3affbda041ab4331e92217af5ceae3bbcb50"], 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) membarrier(0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000014000000000000", @ANYRES16=r4, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 17.199481264s ago: executing program 5 (id=273): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) flock(r2, 0x2) 17.150994065s ago: executing program 34 (id=273): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x1) flock(r2, 0x2) 2.074212097s ago: executing program 2 (id=543): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {0x0, 0xffffffff}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x1000000, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {0x0, 0x4}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x8000, 0x0, 0x3ff, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xeffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r7], 0x34}}, 0x400c840) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="bad47bc51507f9102ce4a823d6bbc0faa694cc27e5b5fcfe9992231dfa8a79b52ecde9b412469541ed261bfdde16bcb44fbce1cd9f0a5cf281908da64ae179cc0e86211af92aedd86993e5fb34b3fe0da59b8ea2c69c830bb85fd10a945253b2a8adbe952cc48819f3252559"], 0x1c}}, 0x4000054) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r9, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r12 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) io_uring_enter(r12, 0x847ba, 0x2000, 0xe, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x8e\xed\x00\x80\x04\xfe\x04\x80\x00\x00\x00\x00\x00\x00vR}\x87\x97\xa4X\xb6\xe4\xb9\x17\x84\xe5\x86{wy\xf0\xf3\b\x00\x00\x00\x00\x00\x00\x00)Q\nWz\xeb\x97_\xdb\xc8qa\x15<') 1.90664037s ago: executing program 7 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) 1.723813443s ago: executing program 7 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.640380404s ago: executing program 7 (id=557): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000002000000, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000e3375900f1102f00000000009500000000000000876455"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_read_part_table(0x5dc, &(0x7f0000000000)="$eJzs3L9rJFUcAPDvm5md3YAasbZYSCMKRrATF7VQkk780VnYKFhEJBZilSwKgj/+gBQ2ooWxCLG2UJAQDFhcdRyEO7g/4q648I6Zndm95FLdhoODz6eY997M9/u++3hvy5ngyZZXI3KKOGlHv5RtUxUbZff8kxTluYRB16aI+HD/7Xc2x++m4fxec3c3ZinDRVLdtVWMu95fVfy0/+l3RR+x017/v93HRVS5yUux9/CPXmlj0pJLZ3nV37ndrKjjWvwZEVupbA7BMGIav0U8G6M2bj3iuTLn3G7zbruDZdTzc/HIDiZH0zei+iD6U1H3R3Qldr5P+ZUubhDFhcwy4vnX17cvm7TNn6buHLZyzoOn1rpBsXiwdVb33VePb+3EdDSfPXJXsj+nX5y+93IzefN3a+YYLLt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu3AtfvvhP0Q/ebK9pft34PYpF6G7EvbZTRYxHV1T/YHK0+s2320V8Pfns+uepn78znPc+njWHP5yLKJeuv3VW1H/8+u/KhXLN8v9bu3E3567EaXf/q9ceSJ4US9cHAAAAAAAAAAAAAAAAAACAxmFsjt8vRvHWzyk+isXr/jlGESn1w1FEzjnfya3+5f9675mud3IzUpMUuU85rmcfFFh9OiIPf3yp/aDALDHnXLUl0mNcKJe6HwAA//+8u1lf") write(0xffffffffffffffff, &(0x7f00000007c0)="b83496bb480cfd003ba831cbda2de66db3fa6fd5f4b38a899762871060890fff3cec8986bf3684e05c8aebad067e1e19b6c2c37d3324a9bfc437dbc4b1d22df872c7b95de54f713731d19c948938a1920a68e622b0fa9316b87c50211e2f4c631fea86ab65d2a21c5f51d91aa115f6c5e38f642421f1c3c541070842963eaf61e96e7a902ce1ace1c3dd938ef5898d616c7ae69b744dcd1d4e9194cddd1aeeeda07bc1214cf5f8e19bf4cae8b8f9aaf8b09a0b064a7757c0a967696a4e8c009429255d3c65a100e6d5d249252bdb83cdf132074780ec91979911ddf3189e9d16f9b19bd013e015", 0xe7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="000000000000000eb70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0)=0x0) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x2, 0x5, 0x80, 0x1, 0x0, 0x44dcc956, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x5, 0xd}, 0x100000, 0xfffffffffffffff4, 0xb1, 0x7, 0xe3, 0xfffffffb, 0x7, 0x0, 0x5, 0x0, 0x9}, r3, 0xa, 0xffffffffffffffff, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000020000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.639838424s ago: executing program 0 (id=558): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x90, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x600}, [{0x7c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 1.611465945s ago: executing program 0 (id=559): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, @perf_config_ext={0x3, 0x6}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x833}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x3) (fail_nth: 18) 1.555775625s ago: executing program 4 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 1.312464409s ago: executing program 4 (id=562): socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x41) close(r0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c80)=ANY=[@ANYBLOB="88000000040801040000000000000000050000073c00048008000140000000010800024000000003080002400000000008000240aca8000008000240000000ec080001400000000908000240000000000900010073797a3000000022cd002c000480080001400000000708000540542315770800034000000008080002400000800008000a4000000100c74f17ae6e956a020000004ea72682b0320ad8fb8bb93953e293e82cae62d170173756f0f1de2957c895fd5b1811504405e358f305f54bbee7e202566242f67806c01dd2005ffaebcaf47603b177cecc1b081dd448a3778e2515625063a032305d15725e2a6f5d58621b4076716294feaed29174d16acb17c5d45cde1a09e87f0422700daa7e82d3cbd5ebf8969ed96af914a9d106b6ba08b11971b10f63339112e7bdf3393bf22d568d078487ff117932ab736c1f914fce2ac862b1af7ea7fb58eadd50a322a5e58c9d1fc830552dd907325235045c2f8746547c42fbbe0137d5b79b324f63533abf03a0a23925510298b9e6d53f4bc5f22d38de55363c2bacaf50f6717ef19d99693f52a62ead502132956f30bc04830ab17b18d599898384c2762786087b248d1c9240d83043f8e36597d0739ea1e1408a3e94db7d8ad11170d33674c05bce29a5273ea90b632058"], 0x88}, 0x1, 0x0, 0x0, 0x400c4}, 0x800) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4ea3, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0xd}, 0xc1a8, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r4 = fsopen(&(0x7f0000000580)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000003c0)='5\xc7\xefM\x98\xec\x01\x00\x00\x00\x00\x00\x00\x00SC\x90yB', &(0x7f00000006c0)="ffffd4d6f9d0050e922fc751c5e416c76b84e0e0268d89ea2af1d1cb2ade436ea174c304b82f23e24e803f18bc5d935f19c9cf78ead5b863fec1db9db215cadaedf4652bf8dd3865ca73dc0b4511d29c6eb6ef5701c3408c7bd3bb60e7aae515fdbff1237e7733ef00abb6420eb9ab43f0d21a7dd1243474f13e330cef06e23ba825144d572f8e16ae8439ebffe0744e4112116e56c34162c1c119ee595eff419ed33446ab5fde4322a0632f7583cc2b0253e0520b111ceb376318802841c5aca16d4c84b335322e11f89e29b034fb1e3e45e2627e2f", 0xd6) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000980)='K\x7f\xb0mhRI\x89\v\xcc\\\xbc\x19a)\xd2F,\x16\xb6\x1at\xc5\x16\xa2\x98\x81\x99x\x02QiU\xec\xc2\xbf\xa0\xe3\x9fQ\xc3\xd12n.\xf5\xe8\x0e9\x0eD\xad\xfd\x00\x04\x00\x00\xc5\x8a\xf3l\x9aq\xba\xf0u7m\b\xc1G@\xe3\xef\xf4\x18f~\x1e\x1d\x04\xc0\x1a\xcb\xcc\xa9\x80`\x84s\xf3\xde\xa4\x1f\x84om_\xabf>\xc3\x1b\xdc\xe4S0\xb3\x92D\xa9\xe8\xdf;\x94\xe4I^]\b\f\xd45\x87\\\x97\x8d-Ls\x11(\x1e\xad\xe7\xc8!\xe3\xe8\x1c\x81;\xbah\x9fM^\xfc\xe0\xd9\xd3\x9bT\x1b\xa3\xc7\n\xe8*Z\xee@{\xf8-#\xe9\xddk\x8dm\xd8S\xc0\x916gL\x02n\x92l\xb5[e\x01\xe8\xc0c\x95\x80\x1c.\x803\n\x9d\xa2\ax\xa4\x0fp\x06\xd5\xb2\xf5\xa9\akG\x96t\xea\b&\xd9&t\x00\x00\x00\x97z\xe0\xe0\x00\x00\x00\x00\x00\x00\x00\x9a;\x7f\xdew\\\x91\xac% \xe4K\xae\xac\x95g\x1b\xb5\x83!\\\v\xd7\xe1n\xe9\xbbC_\xf7\x11\xec\xdb\xa1\xb8\xcf\xf3\x8f|\xb0\x81\x90\x8b\x9f-\\<\v\x062\xc1o\xaf\x1cm\xd2\xafCc\x87\xf9L\xe9\xbb\n\xdfkD\xbdb\n\xe9\x81\xce\x1c\xa9\xa9\x10\x8e\x00'/325, &(0x7f0000000680)='\xfa\xfa\x01\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00q%\x00\x00\x00\x00\x00\x00', 0x0) close(r4) brk(0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 1.235294041s ago: executing program 7 (id=563): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x9000000, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 1.180065261s ago: executing program 7 (id=564): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x0, 0xc07, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x64, 0x0, 0x0, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ssrr={0x89, 0x13, 0x69, [@dev={0xac, 0x14, 0x14, 0xf}, @multicast1, @rand_addr=0x64010100, @multicast1]}, @generic={0x88, 0xd, "b42fc2ab523ce3869df324"}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000880)={0x128, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r4, 0x900) r6 = dup3(r5, r4, 0x80000) read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7ffff000) 1.171341782s ago: executing program 2 (id=565): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014200000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='svcrdma_wc_read\x00', r4}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00'}, 0x18) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='4', 0x1}], 0x1}}], 0x1, 0x20040084) 1.147816042s ago: executing program 6 (id=566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) 1.136104122s ago: executing program 4 (id=567): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c0012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c00014000000000000000010c000180080001006475700008000340000001"], 0xc8}}, 0x20050800) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x981f40, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={0x0, 0x2cc}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r6, 0x0, 0x5004) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 1.120412442s ago: executing program 2 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x8000002, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x10) 1.018194214s ago: executing program 6 (id=569): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xa, @loopback, 0x1004}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4040043) getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14) 956.516435ms ago: executing program 6 (id=570): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000001480), 0x6, 0x240000) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101403, 0x0) bind$bt_hci(r4, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={r4, 0x58, &(0x7f0000000c40)}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0xf, 0x4}, {0x0, 0x6}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 956.285105ms ago: executing program 4 (id=571): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) eventfd2(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) 940.219205ms ago: executing program 2 (id=572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 923.170725ms ago: executing program 4 (id=573): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES16=r1, @ANYRES8=r0, @ANYRES16=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRES64=r3], &(0x7f0000000180)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, 0x0) r10 = semget$private(0x0, 0x6, 0x492) semtimedop(r10, &(0x7f00000005c0)=[{0x2, 0x4, 0x1800}, {0x0, 0x6, 0x800}], 0x2, 0x0) semop(r10, &(0x7f00000000c0)=[{0x2}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @mcast2, 0x106}, 0x1c) 852.861566ms ago: executing program 2 (id=574): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="1805000000000000ab0c8282e1dd17c4f0cc7e0000000000000000b7080000000000007b8af8ff00f0ff00000000bfa100000200000007010000f8ffffffbfa40000000000000700000000000000000000000000000000aa657811cb83373ddb57e857e0da6e2608af10782a73ef96c96325b478f9a461dcd2ee1e716422f3f444355be6372b5ecbb0dc11a139557176c165f8551e8149bf60533057b01c002e35fd3ad399f65d1ae15ed9062dd5580e5405250351cae5bf43f6a6721b786c2821120494c9c00fa0446e6c86beb524f5a922412f89740781561fc11403ec350092ee30d974a124bd3828a32fe92aca0b571a8bf1660a00"/262, @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000009000000030000000000009304000000070000000000000801000000005f5f5f6561306100"], 0x0, 0x39, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000010000000000000000000000000000000000000047f10000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/consoles\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r3, 0xffffffffffffffff, 0x0, r5}, 0x10) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r6) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x9}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 850.553846ms ago: executing program 6 (id=575): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1000000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000017b86928ac5fcce82d75390ea0590376c59f29b813a64932a8405eaf61351ce540878d50b7ef8910cb975b26a611fae56f49c693ee96c8b8c23d9742bfb11e3acb988c8ca3d309a6da6c99ca87f773a6d5c3299edad69e461af3c27fa4e32373581c8fd2ea684732f6954f0baf20e4f9c73f9a529f2cc6b90bd854f89f4ba0a10d783bef72a39c2753ce102fafcea7b1c6648c55d7dc074b952b75e82df49ba1ae38dc7066a7f7a1dd169dbee58057d6f731650ca5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) readlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=""/55, 0x37) epoll_pwait(r4, 0x0, 0x0, 0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYBLOB="3e4ce58e2365c3f2f7ce9e3ae37467edc9311aaf9fa396af7484ffbaae76a25fcff61a4c0801fd503ec233a9c7ececcf86f0bff0bbe1d6759df2f83682e8aa5fa4179751439774bfcea889c35860e04ac491e3edccbc150f591d6d48c12cf519d232ff32947b2532a2cc953c", @ANYRES32=0x0, @ANYRESDEC=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000e6ffffff00df69000000000018110000", @ANYRES32=r7, @ANYRES32=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000000000a5e50c33ca6fdf4f95d30000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000070108000000b703000000000000850000000600000018110000bd25649a1a6161ab4ff8f6e0e5a0e148fcd23f1eff87780081533f2f166f477baf", @ANYRESHEX=r3, @ANYBLOB="000000b54eb9308bc4b8996a2257d0c97b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000bdb791153147490300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000bc0)={[{@noblock_validity}, {}, {@noinit_itable}, {@nobarrier}, {@init_itable}, {@noquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x187842, 0x167) io_uring_enter(0xffffffffffffffff, 0x246f3, 0x0, 0x1, 0x0, 0x0) r11 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r11, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000240)={0x3920e, r9, 0x0, 0x8, 0x9, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 741.778998ms ago: executing program 7 (id=576): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {0x0, 0xffffffff}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x1000000, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {0x0, 0x4}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x8000, 0x0, 0x3ff, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xeffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r7], 0x34}}, 0x400c840) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="bad47bc51507f9102ce4a823d6bbc0faa694cc27e5b5fcfe9992231dfa8a79b52ecde9b412469541ed261bfdde16bcb44fbce1cd9f0a5cf281908da64ae179cc0e86211af92aedd86993e5fb34b3fe0da59b8ea2c69c830bb85fd10a945253b2a8adbe952cc48819f3252559"], 0x1c}}, 0x4000054) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r9, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r12 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) io_uring_enter(r12, 0x847ba, 0x2000, 0xe, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x8e\xed\x00\x80\x04\xfe\x04\x80\x00\x00\x00\x00\x00\x00vR}\x87\x97\xa4X\xb6\xe4\xb9\x17\x84\xe5\x86{wy\xf0\xf3\b\x00\x00\x00\x00\x00\x00\x00)Q\nWz\xeb\x97_\xdb\xc8qa\x15<') 739.865398ms ago: executing program 4 (id=577): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {0x0, 0xffffffff}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x1000000, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {0x0, 0x4}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x8000, 0x0, 0x3ff, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xeffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r7], 0x34}}, 0x400c840) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="bad47bc51507f9102ce4a823d6bbc0faa694cc27e5b5fcfe9992231dfa8a79b52ecde9b412469541ed261bfdde16bcb44fbce1cd9f0a5cf281908da64ae179cc0e86211af92aedd86993e5fb34b3fe0da59b8ea2c69c830bb85fd10a945253b2a8adbe952cc48819f3252559"], 0x1c}}, 0x4000054) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r9, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r12 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) io_uring_enter(r12, 0x847ba, 0x2000, 0xe, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x8e\xed\x00\x80\x04\xfe\x04\x80\x00\x00\x00\x00\x00\x00vR}\x87\x97\xa4X\xb6\xe4\xb9\x17\x84\xe5\x86{wy\xf0\xf3\b\x00\x00\x00\x00\x00\x00\x00)Q\nWz\xeb\x97_\xdb\xc8qa\x15<') 702.854229ms ago: executing program 0 (id=578): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014200000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='svcrdma_wc_read\x00', r4}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00'}, 0x18) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='4', 0x1}], 0x1}}], 0x1, 0x20040084) 700.531709ms ago: executing program 0 (id=579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) 590.00585ms ago: executing program 0 (id=580): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xa, @loopback, 0x1004}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4040043) getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14) 476.700422ms ago: executing program 0 (id=581): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000)=0x2) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x521, &(0x7f0000000e00)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000006c0)={0x5, 0x2, 0x1, 0x4}) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, 0x0, 0x0}, 0x20) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) write$cgroup_int(r6, &(0x7f0000000000)=0xfe8e, 0x12) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) 475.162162ms ago: executing program 6 (id=582): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x400000000004}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000004240)=0x40000006, 0x4) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}]) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 148.056178ms ago: executing program 6 (id=583): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x397, &(0x7f0000000e00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @gre={{0x26, 0x4, 0x3, 0x3c, 0x389, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@rr={0x7, 0x7, 0xdb, [@loopback]}, @timestamp_addr={0x44, 0xc, 0x82, 0x1, 0x0, [{@local, 0x53}]}, @rr={0x7, 0x1b, 0x80, [@multicast1, @remote, @empty, @multicast2, @multicast2, @empty]}, @cipso={0x86, 0x2c, 0x1, [{0x7, 0xf, "d403917ed3bcee3cbf9d0efcc9"}, {0x6, 0x4, "379b"}, {0x5, 0x11, "06624d88a822ad909f28eba4554570"}, {0x7, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xbe, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x2}, {@local, 0x81}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc6, 0x3, [0x3], "e36dfc27e950c530b28c1a24b3386a8dae7badabe17bb0e39535d5e7bcedac42c5b63f8f208e570d0e574103ef4b59dfb990027ad108c9e2a62e60ef473b9cab31d9ad2e204fcd0eefb665b4ac31469b117fad0ab60e45ff28620d8ab7627ff11eb6ed49379777396264cf2c18f113c6fe836da89e2b9edd1310c85fee846620ad3da9c81779cf479e41e58cf2ad9a4d7a41bf0d8d291437b5b4e498aa1c29b006dba659684ac0274b8b7ae7d7513c3402bcc3e5c46b2057d62de5349002e6907d561890b59d"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x4], "f335af657e76b953d4bf27bb4f86cedeb3dec51148e94270e78f9e47f3e2bd2e51feb91ffb40c5e1f17869629593e11ad766d920f756cbadca9064e6836ddd39c2f88f298489663b88e6b4fcf86018d0379f4e9067032a74a6ecbae1cf1a77288333ecfa29fa56081c3f59edf186f6d55d59ca7c2a35b250f4d7"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5], "06b01b0cca47c3d118c865d5cb24c8d736c7a649044fbfde17be74747f48cf7166c347a92fd0177f9f1f0d9146f8ab72f07840a4b1f4827ae485044ace5c7457f614faadd7c93d99eb3d966371ebf526f4e09a66d505c9bb8e4bc68fcc05fbdf412f5028d7ea22fc2ad57ef25c7a468808b432b0fce1f86a2ca489779970b1b56ffcdd41bd57882c07587bbf637c01bfbbc8dc4da47018a59a5ae32bd6f88f1aeadd11b3ebdac8d88cf9b7d0998d34dbcc5e95383cf2bda5d895ea5364a3bfc312c9d666e1a574593a4c9692362280ea8ac0c04c34ed6fd6b8da64a91ea34cafb948cb373ccd7a25e3dd1d6e53d241ec"}, {0x8, 0x88be, 0x4, {{0x9, 0x1, 0x7, 0x1, 0x0, 0x1, 0x4, 0xac}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0xfa, 0x1, 0x1, 0x2, 0x3, 0x1}, 0x2, {0x8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x3}}}, {0x8, 0x6558, 0x0, "fbbbb6bbb4e455343398f448f974b778b9cd9eae4f24964e1a18f1abefdeb1006f26d98da4e6c532fd06f2c3322eb53ce6ae087ba7921a1982a72cdc8a5ec50483adb4357bb87f06984f050197673b92000f62ed59b69328770725119eb2f4f3315e5afffa51b837ca76292000"/119}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @multicast2}, 0x10) recvfrom(r0, &(0x7f0000000040)=""/249, 0xf9, 0x120, &(0x7f0000000140)=@l2tp={0x2, 0x0, @loopback}, 0x80) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$TIOCSRS485(r5, 0x542f, &(0x7f0000000500)={0x10041, 0x2, 0xfffffffc}) ioctl$TIOCMIWAIT(r5, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r5, 0x5437, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000500000000000000000000000000180100002020148100000000002006fe85cb601c20207b1af8ff00000000bfa100060000000007010000f8ffffffb702000000000000b703000000000000850000007000000095", @ANYRESOCT=r0, @ANYRES32=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xfffffffd}}, 0x10) 0s ago: executing program 2 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x65, 0x0, &(0x7f0000000380)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) rt_tgsigqueueinfo(0x0, r3, 0x40, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204846, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/283], 0xfa, 0x6c5, &(0x7f0000000900)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x0, 0xc6) getdents64(r5, &(0x7f0000004040)=""/4112, 0x1010) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) kernel console output (not intermixed with test programs): _0) entered forwarding state [ 29.541691][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.548842][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.560243][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.592998][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.611798][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.625650][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.642416][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.651787][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.658927][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.673123][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.680217][ T391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.695866][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.716986][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.724095][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.741258][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.748312][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.773335][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.787028][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.797662][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.908402][ T3309] veth0_vlan: entered promiscuous mode [ 29.924750][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.934612][ T3305] veth0_vlan: entered promiscuous mode [ 29.944006][ T3305] veth1_vlan: entered promiscuous mode [ 29.951756][ T3309] veth1_vlan: entered promiscuous mode [ 29.980291][ T3305] veth0_macvtap: entered promiscuous mode [ 29.987070][ T3319] veth0_vlan: entered promiscuous mode [ 29.996372][ T3305] veth1_macvtap: entered promiscuous mode [ 30.005347][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.014731][ T3319] veth1_vlan: entered promiscuous mode [ 30.034882][ T3309] veth0_macvtap: entered promiscuous mode [ 30.047765][ T3319] veth0_macvtap: entered promiscuous mode [ 30.061675][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.069684][ T3309] veth1_macvtap: entered promiscuous mode [ 30.078976][ T3319] veth1_macvtap: entered promiscuous mode [ 30.097893][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.106991][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.117120][ T3304] veth0_vlan: entered promiscuous mode [ 30.125750][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.134716][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.143563][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.152377][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.163901][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.174781][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.186179][ T3304] veth1_vlan: entered promiscuous mode [ 30.196534][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.205423][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.214214][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.222974][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.235446][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.243921][ T3319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.252779][ T3319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.261510][ T3319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.270202][ T3319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.300447][ T3311] veth0_vlan: entered promiscuous mode [ 30.313976][ T3304] veth0_macvtap: entered promiscuous mode [ 30.338327][ T3311] veth1_vlan: entered promiscuous mode [ 30.338888][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.348740][ T3304] veth1_macvtap: entered promiscuous mode [ 30.368812][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.399160][ T3311] veth0_macvtap: entered promiscuous mode [ 30.429263][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.439222][ T3479] program syz.4.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 30.439756][ T3311] veth1_macvtap: entered promiscuous mode [ 30.472568][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.481386][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.490245][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.499011][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.505103][ T3488] loop0: detected capacity change from 0 to 2048 [ 30.515189][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.535426][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.547451][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.556303][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.565115][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.574124][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.682965][ T3501] FAULT_INJECTION: forcing a failure. [ 30.682965][ T3501] name failslab, interval 1, probability 0, space 0, times 1 [ 30.695800][ T3501] CPU: 0 UID: 0 PID: 3501 Comm: syz.1.9 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 30.695823][ T3501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.695838][ T3501] Call Trace: [ 30.695843][ T3501] [ 30.695849][ T3501] __dump_stack+0x1d/0x30 [ 30.695870][ T3501] dump_stack_lvl+0xe8/0x140 [ 30.695948][ T3501] dump_stack+0x15/0x1b [ 30.695962][ T3501] should_fail_ex+0x265/0x280 [ 30.695987][ T3501] should_failslab+0x8c/0xb0 [ 30.696006][ T3501] __kmalloc_node_noprof+0xa9/0x410 [ 30.696057][ T3501] ? __rcu_read_unlock+0x4f/0x70 [ 30.696148][ T3501] ? alloc_slab_obj_exts+0x31/0x80 [ 30.696168][ T3501] alloc_slab_obj_exts+0x31/0x80 [ 30.696191][ T3501] __memcg_slab_post_alloc_hook+0x23f/0x580 [ 30.696222][ T3501] ? alloc_fs_context+0x44/0x4e0 [ 30.696299][ T3501] __kmalloc_cache_noprof+0x22e/0x320 [ 30.696321][ T3501] alloc_fs_context+0x44/0x4e0 [ 30.696345][ T3501] fs_context_for_mount+0x22/0x30 [ 30.696436][ T3501] do_new_mount+0xe9/0x680 [ 30.696467][ T3501] path_mount+0x4a4/0xb20 [ 30.696682][ T3501] ? user_path_at+0x109/0x130 [ 30.696701][ T3501] __se_sys_mount+0x28f/0x2e0 [ 30.696801][ T3501] ? fput+0x8f/0xc0 [ 30.696823][ T3501] __x64_sys_mount+0x67/0x80 [ 30.696850][ T3501] x64_sys_call+0xd36/0x2fb0 [ 30.696871][ T3501] do_syscall_64+0xd2/0x200 [ 30.696894][ T3501] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 30.696914][ T3501] ? clear_bhb_loop+0x40/0x90 [ 30.696939][ T3501] ? clear_bhb_loop+0x40/0x90 [ 30.696956][ T3501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.696973][ T3501] RIP: 0033:0x7f3a8ddbe9a9 [ 30.696992][ T3501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.697010][ T3501] RSP: 002b:00007f3a8c427038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 30.697033][ T3501] RAX: ffffffffffffffda RBX: 00007f3a8dfe5fa0 RCX: 00007f3a8ddbe9a9 [ 30.697046][ T3501] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 30.697058][ T3501] RBP: 00007f3a8c427090 R08: 0000200000000340 R09: 0000000000000000 [ 30.697070][ T3501] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 30.697082][ T3501] R13: 0000000000000000 R14: 00007f3a8dfe5fa0 R15: 00007ffcaee7f2f8 [ 30.697099][ T3501] [ 30.939408][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 30.939421][ T29] audit: type=1400 audit(1753235374.852:116): avc: denied { open } for pid=3503 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.964728][ T29] audit: type=1400 audit(1753235374.852:117): avc: denied { kernel } for pid=3503 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.983913][ T29] audit: type=1400 audit(1753235374.852:118): avc: denied { read write } for pid=3503 comm="syz.2.10" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.007377][ T29] audit: type=1400 audit(1753235374.852:119): avc: denied { open } for pid=3503 comm="syz.2.10" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.017770][ T3499] loop3: detected capacity change from 0 to 8192 [ 31.030442][ T29] audit: type=1400 audit(1753235374.852:120): avc: denied { ioctl } for pid=3503 comm="syz.2.10" path="/dev/uhid" dev="devtmpfs" ino=252 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.064955][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.066148][ T29] audit: type=1400 audit(1753235374.962:121): avc: denied { mount } for pid=3498 comm="syz.3.4" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.072494][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.094214][ T29] audit: type=1326 audit(1753235374.962:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 31.101634][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.124836][ T29] audit: type=1326 audit(1753235374.962:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 31.155540][ T29] audit: type=1326 audit(1753235374.962:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 31.179101][ T29] audit: type=1326 audit(1753235374.962:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 31.238662][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.246419][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.253877][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.261367][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.268843][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.276283][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.284069][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.291492][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.298952][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.306418][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.339607][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 31.349695][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.357282][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.364793][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.372557][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.380030][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.387669][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.387693][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.387712][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.387732][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.387819][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.387839][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.387861][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.387940][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.387962][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.387993][ T1053] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.403998][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 31.423522][ T3517] ipvlan2: entered promiscuous mode [ 31.449308][ T1053] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 31.520003][ T3520] fido_id[3520]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 31.589018][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 31.633805][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 31.633850][ T3529] smc: net device bond0 applied user defined pnetid SYZ0 [ 31.671548][ T3529] smc: net device bond0 erased user defined pnetid SYZ0 [ 31.816096][ T3540] Zero length message leads to an empty skb [ 31.876723][ T3545] syz.1.25 uses obsolete (PF_INET,SOCK_PACKET) [ 31.942705][ T3550] loop1: detected capacity change from 0 to 1024 [ 31.964769][ T3550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.980882][ T3552] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.359789][ T3559] loop4: detected capacity change from 0 to 1024 [ 32.366642][ T3559] EXT4-fs: Ignoring removed orlov option [ 32.374744][ T3559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.510411][ T3564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 32.577048][ T3563] smc: net device bond0 applied user defined pnetid SYZ0 [ 32.584717][ T3563] smc: net device bond0 erased user defined pnetid SYZ0 [ 32.584842][ T3559] syz.4.29 (3559) used greatest stack depth: 10784 bytes left [ 32.600289][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.799129][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.284356][ T3552] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.323642][ T3552] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.374575][ T3552] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.410438][ T3592] loop1: detected capacity change from 0 to 1024 [ 33.417348][ T3592] EXT4-fs: Ignoring removed orlov option [ 33.425991][ T3592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.457400][ T3552] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.468759][ T3552] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.479932][ T3552] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.491330][ T3552] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.508034][ T3552] syz.2.28 (3552) used greatest stack depth: 10776 bytes left [ 33.624862][ T3601] loop2: detected capacity change from 0 to 1024 [ 33.631865][ T3601] ======================================================= [ 33.631865][ T3601] WARNING: The mand mount option has been deprecated and [ 33.631865][ T3601] and is ignored by this kernel. Remove the mand [ 33.631865][ T3601] option from the mount to silence this warning. [ 33.631865][ T3601] ======================================================= [ 33.680877][ T3601] EXT4-fs: Ignoring removed oldalloc option [ 33.686849][ T3601] EXT4-fs: Ignoring removed bh option [ 33.704137][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.729328][ T3601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.849809][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.862382][ T3611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 33.884104][ T3610] lo speed is unknown, defaulting to 1000 [ 33.889878][ T3610] lo speed is unknown, defaulting to 1000 [ 33.895911][ T3610] lo speed is unknown, defaulting to 1000 [ 33.905223][ T3610] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.914136][ T3618] loop2: detected capacity change from 0 to 1024 [ 33.922977][ T3610] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 33.932520][ T41] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xb [ 33.967004][ T3618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.982078][ T3610] lo speed is unknown, defaulting to 1000 [ 33.988408][ T3610] lo speed is unknown, defaulting to 1000 [ 33.991362][ T3618] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 33.994837][ T3610] lo speed is unknown, defaulting to 1000 [ 34.006495][ T3618] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.006495][ T3618] [ 34.012731][ T3610] lo speed is unknown, defaulting to 1000 [ 34.021962][ T3618] EXT4-fs (loop2): Total free blocks count 0 [ 34.021977][ T3618] EXT4-fs (loop2): Free/Dirty block details [ 34.028276][ T3610] lo speed is unknown, defaulting to 1000 [ 34.034035][ T3618] EXT4-fs (loop2): free_blocks=0 [ 34.050766][ T3618] EXT4-fs (loop2): dirty_blocks=0 [ 34.055939][ T3618] EXT4-fs (loop2): Block reservation details [ 34.061955][ T3618] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 34.084051][ T3618] syz.2.50 (3618) used greatest stack depth: 10304 bytes left [ 34.094064][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.173327][ T3630] loop2: detected capacity change from 0 to 512 [ 34.192243][ T3630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.205088][ T3630] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.220587][ T3630] EXT4-fs (loop2): shut down requested (0) [ 34.239463][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.341275][ T3645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 34.397254][ T3643] pimreg: entered allmulticast mode [ 34.927984][ T3657] loop1: detected capacity change from 0 to 2048 [ 34.993270][ T3657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.027927][ T3658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 35.039090][ T3662] loop4: detected capacity change from 0 to 512 [ 35.040591][ T3658] smc: net device bond0 applied user defined pnetid SYZ0 [ 35.058669][ T3658] smc: net device bond0 erased user defined pnetid SYZ0 [ 35.061256][ T3662] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.62: corrupted in-inode xattr: invalid ea_ino [ 35.127496][ T3662] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.62: couldn't read orphan inode 15 (err -117) [ 35.183302][ T3662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.295690][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.382635][ T3684] netlink: 'syz.2.69': attribute type 3 has an invalid length. [ 35.391376][ T3684] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.592773][ T3712] loop0: detected capacity change from 0 to 1024 [ 35.625511][ T3712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.654710][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 35.673509][ T3712] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.705128][ T3720] sctp: [Deprecated]: syz.4.78 (pid 3720) Use of int in max_burst socket option deprecated. [ 35.705128][ T3720] Use struct sctp_assoc_value instead [ 35.707599][ T3718] smc: net device bond0 applied user defined pnetid SYZ0 [ 35.722075][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 35.735091][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.742631][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.750150][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.757750][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.765209][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 35.772770][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.780270][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.787968][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 35.795451][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.803174][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.810586][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.818007][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.825467][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 35.832888][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.840302][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.847830][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.855548][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.863243][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.870698][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.878103][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.885564][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.885984][ T3712] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 35.893049][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.905263][ T3712] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.905263][ T3712] [ 35.912582][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.922245][ T3712] EXT4-fs (loop0): Total free blocks count 0 [ 35.929600][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.936027][ T3712] EXT4-fs (loop0): Free/Dirty block details [ 35.936041][ T3712] EXT4-fs (loop0): free_blocks=0 [ 35.936090][ T3712] EXT4-fs (loop0): dirty_blocks=0 [ 35.936101][ T3712] EXT4-fs (loop0): Block reservation details [ 35.936111][ T3712] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 35.939022][ T3724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 35.943740][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.952401][ T3721] smc: net device bond0 erased user defined pnetid SYZ0 [ 35.954363][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.002275][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.009678][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.017386][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.024959][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.032425][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.040100][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.047596][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.055018][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.077916][ T3728] ipvlan2: entered promiscuous mode [ 36.094048][ T3393] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.121441][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.139525][ T3731] fido_id[3731]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.141834][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.176207][ T3734] netlink: 'syz.1.81': attribute type 39 has an invalid length. [ 36.194442][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 36.194456][ T29] audit: type=1400 audit(1753235380.112:429): avc: denied { create } for pid=3735 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 36.243484][ T29] audit: type=1400 audit(1753235380.142:430): avc: denied { setopt } for pid=3735 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 36.262823][ T29] audit: type=1400 audit(1753235380.152:431): avc: denied { ioctl } for pid=3733 comm="syz.1.81" path="socket:[5446]" dev="sockfs" ino=5446 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.304797][ T3744] 9pnet_fd: Insufficient options for proto=fd [ 36.312183][ T3745] SELinux: policydb version 1675088414 does not match my version range 15-34 [ 36.324983][ T3744] sch_tbf: burst 88 is lower than device vlan0 mtu (1514) ! [ 36.325836][ T3739] loop1: detected capacity change from 0 to 512 [ 36.334561][ T29] audit: type=1400 audit(1753235380.222:432): avc: denied { load_policy } for pid=3742 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.338975][ T3745] SELinux: failed to load policy [ 36.369671][ T3739] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.397551][ T29] audit: type=1326 audit(1753235380.282:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 36.408592][ T3749] loop4: detected capacity change from 0 to 512 [ 36.420965][ T29] audit: type=1326 audit(1753235380.282:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 36.421017][ T29] audit: type=1326 audit(1753235380.282:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 36.473875][ T29] audit: type=1326 audit(1753235380.282:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 36.484337][ T3749] ext4: Unknown parameter 'dont_appraise' [ 36.497054][ T29] audit: type=1326 audit(1753235380.282:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 36.497080][ T29] audit: type=1326 audit(1753235380.282:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 36.556457][ T3750] __nla_validate_parse: 2 callbacks suppressed [ 36.556471][ T3750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 36.571478][ T3750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 36.572915][ T3734] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 36.614373][ T3734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.624497][ T3734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.695478][ T3764] netlink: 'syz.2.92': attribute type 4 has an invalid length. [ 36.749321][ T3349] IPVS: starting estimator thread 0... [ 36.821332][ T3775] loop2: detected capacity change from 0 to 128 [ 36.862308][ T3771] IPVS: using max 3312 ests per chain, 165600 per kthread [ 36.920387][ T3777] loop2: detected capacity change from 0 to 2048 [ 36.953214][ T3777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.978468][ T3319] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 36.995991][ T3319] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 37.009879][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.033544][ T3792] capability: warning: `syz.2.100' uses 32-bit capabilities (legacy support in use) [ 37.048229][ T3794] loop3: detected capacity change from 0 to 512 [ 37.057849][ T3794] ext4: Unknown parameter 'nouser_xattr' [ 37.236693][ T3304] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 37.253494][ T3810] ipvlan3: entered promiscuous mode [ 37.372655][ T3825] 9pnet_fd: Insufficient options for proto=fd [ 37.401977][ T3828] FAULT_INJECTION: forcing a failure. [ 37.401977][ T3828] name failslab, interval 1, probability 0, space 0, times 0 [ 37.414693][ T3828] CPU: 0 UID: 0 PID: 3828 Comm: syz.4.115 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 37.414773][ T3828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.414783][ T3828] Call Trace: [ 37.414789][ T3828] [ 37.414796][ T3828] __dump_stack+0x1d/0x30 [ 37.414881][ T3828] dump_stack_lvl+0xe8/0x140 [ 37.414892][ T3828] dump_stack+0x15/0x1b [ 37.414910][ T3828] should_fail_ex+0x265/0x280 [ 37.414990][ T3828] should_failslab+0x8c/0xb0 [ 37.415002][ T3828] __kmalloc_noprof+0xa5/0x3e0 [ 37.415015][ T3828] ? tcf_idr_create+0x41/0x4a0 [ 37.415028][ T3828] tcf_idr_create+0x41/0x4a0 [ 37.415041][ T3828] tcf_idr_create_from_flags+0x60/0x80 [ 37.415092][ T3828] tcf_pedit_init+0x27b/0x970 [ 37.415109][ T3828] ? should_fail_ex+0xdb/0x280 [ 37.415126][ T3828] tcf_action_init_1+0x367/0x4a0 [ 37.415186][ T3828] tcf_action_init+0x267/0x6d0 [ 37.415198][ T3828] ? mark_reg_read+0x233/0x340 [ 37.415277][ T3828] tc_ctl_action+0x291/0x830 [ 37.415299][ T3828] ? __pfx_tc_ctl_action+0x10/0x10 [ 37.415312][ T3828] rtnetlink_rcv_msg+0x657/0x6d0 [ 37.415371][ T3828] netlink_rcv_skb+0x120/0x220 [ 37.415423][ T3828] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 37.415463][ T3828] rtnetlink_rcv+0x1c/0x30 [ 37.415473][ T3828] netlink_unicast+0x5a8/0x680 [ 37.415489][ T3828] netlink_sendmsg+0x58b/0x6b0 [ 37.415641][ T3828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.415652][ T3828] __sock_sendmsg+0x145/0x180 [ 37.415731][ T3828] ____sys_sendmsg+0x31e/0x4e0 [ 37.415775][ T3828] ___sys_sendmsg+0x17b/0x1d0 [ 37.415798][ T3828] __x64_sys_sendmsg+0xd4/0x160 [ 37.415856][ T3828] x64_sys_call+0x2999/0x2fb0 [ 37.415964][ T3828] do_syscall_64+0xd2/0x200 [ 37.415999][ T3828] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.416013][ T3828] ? clear_bhb_loop+0x40/0x90 [ 37.416024][ T3828] ? clear_bhb_loop+0x40/0x90 [ 37.416035][ T3828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.416046][ T3828] RIP: 0033:0x7f395349e9a9 [ 37.416135][ T3828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.416182][ T3828] RSP: 002b:00007f3951b07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.416253][ T3828] RAX: ffffffffffffffda RBX: 00007f39536c5fa0 RCX: 00007f395349e9a9 [ 37.416260][ T3828] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000006 [ 37.416332][ T3828] RBP: 00007f3951b07090 R08: 0000000000000000 R09: 0000000000000000 [ 37.416338][ T3828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.416384][ T3828] R13: 0000000000000000 R14: 00007f39536c5fa0 R15: 00007ffe4d04b6e8 [ 37.416394][ T3828] [ 37.429965][ T3819] lo speed is unknown, defaulting to 1000 [ 37.437929][ T3828] syz.4.115 (3828) used greatest stack depth: 9880 bytes left [ 37.471401][ T3819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.111'. [ 37.662847][ T3837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'. [ 37.782263][ T3844] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2 sclass=netlink_xfrm_socket pid=3844 comm=syz.0.120 [ 37.880991][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 37.893824][ T3849] smc: net device bond0 applied user defined pnetid SYZ0 [ 37.902008][ T3849] smc: net device bond0 erased user defined pnetid SYZ0 [ 38.180171][ T3873] loop3: detected capacity change from 0 to 1024 [ 38.191921][ T3873] EXT4-fs: Ignoring removed orlov option [ 38.211505][ T3873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.267633][ T3876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 38.277628][ T3876] smc: net device bond0 applied user defined pnetid SYZ0 [ 38.285058][ T3876] smc: net device bond0 erased user defined pnetid SYZ0 [ 38.350103][ T3879] netlink: 'syz.0.131': attribute type 1 has an invalid length. [ 38.481707][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.554218][ T3886] netlink: 76 bytes leftover after parsing attributes in process `syz.0.135'. [ 38.592667][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 38.603963][ T3890] smc: net device bond0 applied user defined pnetid SYZ0 [ 38.611547][ T3890] smc: net device bond0 erased user defined pnetid SYZ0 [ 38.713380][ T3895] ipvlan2: entered promiscuous mode [ 39.014803][ T3908] loop2: detected capacity change from 0 to 1024 [ 39.025716][ T3908] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.034750][ T3908] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 39.045747][ T3908] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 39.055473][ T3908] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.066172][ T3908] EXT4-fs (loop2): invalid journal inode [ 39.071928][ T3908] EXT4-fs (loop2): can't get journal size [ 39.078029][ T3908] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.142: blocks 2-2 from inode overlap system zone [ 39.092233][ T3908] EXT4-fs (loop2): failed to initialize system zone (-117) [ 39.099571][ T3908] EXT4-fs (loop2): mount failed [ 39.104868][ T3911] netlink: 76 bytes leftover after parsing attributes in process `syz.0.141'. [ 39.275433][ T3917] netlink: 32 bytes leftover after parsing attributes in process `syz.2.143'. [ 39.316872][ T3921] FAULT_INJECTION: forcing a failure. [ 39.316872][ T3921] name failslab, interval 1, probability 0, space 0, times 0 [ 39.329747][ T3921] CPU: 0 UID: 0 PID: 3921 Comm: syz.2.145 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 39.329777][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.329789][ T3921] Call Trace: [ 39.329797][ T3921] [ 39.329805][ T3921] __dump_stack+0x1d/0x30 [ 39.329855][ T3921] dump_stack_lvl+0xe8/0x140 [ 39.329871][ T3921] dump_stack+0x15/0x1b [ 39.329885][ T3921] should_fail_ex+0x265/0x280 [ 39.329913][ T3921] should_failslab+0x8c/0xb0 [ 39.329994][ T3921] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 39.330017][ T3921] ? __d_alloc+0x3d/0x350 [ 39.330101][ T3921] __d_alloc+0x3d/0x350 [ 39.330118][ T3921] ? from_vfsgid+0x70/0xa0 [ 39.330135][ T3921] d_alloc_pseudo+0x1e/0x80 [ 39.330152][ T3921] alloc_file_pseudo+0x71/0x160 [ 39.330171][ T3921] ? hugetlbfs_get_inode+0x267/0x370 [ 39.330244][ T3921] hugetlb_file_setup+0x298/0x3d0 [ 39.330269][ T3921] ksys_mmap_pgoff+0x157/0x310 [ 39.330302][ T3921] x64_sys_call+0x1602/0x2fb0 [ 39.330329][ T3921] do_syscall_64+0xd2/0x200 [ 39.330345][ T3921] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.330366][ T3921] ? clear_bhb_loop+0x40/0x90 [ 39.330383][ T3921] ? clear_bhb_loop+0x40/0x90 [ 39.330441][ T3921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.330480][ T3921] RIP: 0033:0x7f90fc49e9a9 [ 39.330495][ T3921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.330512][ T3921] RSP: 002b:00007f90faaff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 39.330580][ T3921] RAX: ffffffffffffffda RBX: 00007f90fc6c5fa0 RCX: 00007f90fc49e9a9 [ 39.330590][ T3921] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 39.330601][ T3921] RBP: 00007f90faaff090 R08: ffffffffffffffff R09: 0000000000000000 [ 39.330611][ T3921] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 39.330626][ T3921] R13: 0000000000000000 R14: 00007f90fc6c5fa0 R15: 00007ffdc71d4ff8 [ 39.330643][ T3921] [ 39.614079][ T3932] netlink: 'syz.1.150': attribute type 4 has an invalid length. [ 39.644277][ C0] hrtimer: interrupt took 47468 ns [ 39.653021][ T3939] netlink: 'syz.1.153': attribute type 10 has an invalid length. [ 39.661569][ T3939] ipvlan0: entered allmulticast mode [ 39.666884][ T3939] veth0_vlan: entered allmulticast mode [ 39.674232][ T3939] team0: Device ipvlan0 failed to register rx_handler [ 39.758649][ T3945] smc: net device bond0 applied user defined pnetid SYZ0 [ 39.766134][ T3945] smc: net device bond0 erased user defined pnetid SYZ0 [ 39.831570][ T3951] 9pnet_fd: Insufficient options for proto=fd [ 39.894873][ T3954] loop1: detected capacity change from 0 to 1024 [ 39.918665][ T3949] loop0: detected capacity change from 0 to 1024 [ 39.920344][ T3954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.942856][ T3949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.989986][ T3304] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 40.001818][ T3304] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 40.025381][ T3960] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.124459][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.164476][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.214358][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.243560][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.256819][ T3964] lo speed is unknown, defaulting to 1000 [ 40.312867][ T3964] chnl_net:caif_netlink_parms(): no params data found [ 40.335173][ T41] bridge_slave_1: left allmulticast mode [ 40.340948][ T41] bridge_slave_1: left promiscuous mode [ 40.346643][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.354401][ T41] bridge_slave_0: left allmulticast mode [ 40.360086][ T41] bridge_slave_0: left promiscuous mode [ 40.365843][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.414271][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.423916][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.433338][ T41] bond0 (unregistering): Released all slaves [ 40.481705][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.488786][ T3964] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.511017][ T3964] bridge_slave_0: entered allmulticast mode [ 40.527577][ T3964] bridge_slave_0: entered promiscuous mode [ 40.555842][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.562980][ T3964] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.570558][ T3964] bridge_slave_1: entered allmulticast mode [ 40.577631][ T3964] bridge_slave_1: entered promiscuous mode [ 40.585515][ T41] hsr_slave_0: left promiscuous mode [ 40.592420][ T41] hsr_slave_1: left promiscuous mode [ 40.598608][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.606093][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.621994][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.629501][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.659187][ T41] veth1_macvtap: left promiscuous mode [ 40.675003][ T41] veth0_macvtap: left promiscuous mode [ 40.686579][ T41] veth1_vlan: left promiscuous mode [ 40.692242][ T41] veth0_vlan: left promiscuous mode [ 40.708289][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.795728][ T4014] loop0: detected capacity change from 0 to 2048 [ 40.805564][ T4014] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.821104][ T4014] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 40.845526][ T4017] loop3: detected capacity change from 0 to 512 [ 40.854453][ T4017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.867156][ T4017] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 40.894664][ T4017] EXT4-fs (loop3): 1 truncate cleaned up [ 40.903077][ T41] team0 (unregistering): Port device team_slave_1 removed [ 40.903405][ T4017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.927082][ T41] team0 (unregistering): Port device team_slave_0 removed [ 40.962742][ T4017] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 41.012023][ T4008] smc: net device bond0 applied user defined pnetid SYZ0 [ 41.013377][ T4011] pimreg: entered allmulticast mode [ 41.019470][ T3997] smc: net device bond0 erased user defined pnetid SYZ0 [ 41.026685][ T3964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.059084][ T3964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.080018][ T3964] team0: Port device team_slave_0 added [ 41.086704][ T3964] team0: Port device team_slave_1 added [ 41.112250][ T3964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.119269][ T3964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.145461][ T3964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.160145][ T3964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.167291][ T3964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.193321][ T3964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.247195][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.263714][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 41.263728][ T29] audit: type=1326 audit(1753235385.182:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 41.272735][ T3964] hsr_slave_0: entered promiscuous mode [ 41.296626][ T29] audit: type=1326 audit(1753235385.182:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 41.300557][ T171] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 41.322979][ T29] audit: type=1326 audit(1753235385.182:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 41.353322][ T29] audit: type=1326 audit(1753235385.182:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 41.355746][ T3964] hsr_slave_1: entered promiscuous mode [ 41.376604][ T29] audit: type=1326 audit(1753235385.182:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 41.405567][ T29] audit: type=1326 audit(1753235385.182:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 41.411132][ T171] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 41.428951][ T29] audit: type=1326 audit(1753235385.182:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 41.459201][ T29] audit: type=1326 audit(1753235385.182:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 41.482466][ T29] audit: type=1326 audit(1753235385.182:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 41.505816][ T29] audit: type=1326 audit(1753235385.182:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 41.508192][ T3964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.588429][ T3964] Cannot create hsr debugfs directory [ 41.783356][ T4062] __nla_validate_parse: 6 callbacks suppressed [ 41.783380][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 41.818786][ T4061] netlink: 'syz.0.175': attribute type 4 has an invalid length. [ 41.897810][ C1] vcan0: j1939_tp_txtimer: 0xffff888104753c00: tx aborted with unknown reason: -2 [ 41.907289][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888104753e00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 41.925297][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888104753c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 41.969366][ T4062] smc: net device bond0 applied user defined pnetid SYZ0 [ 41.987250][ T4062] smc: net device bond0 erased user defined pnetid SYZ0 [ 41.987632][ T3964] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.016688][ T3964] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.039629][ T3964] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.049778][ T3964] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.159811][ T3964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.178626][ T3964] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.208335][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.215480][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.233140][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.240316][ T391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.357911][ T3964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.733762][ T4151] pimreg: entered allmulticast mode [ 42.775325][ T4153] loop0: detected capacity change from 0 to 2048 [ 42.832751][ T4153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.858326][ T3964] veth0_vlan: entered promiscuous mode [ 42.887287][ T3964] veth1_vlan: entered promiscuous mode [ 42.910289][ T4140] netlink: 76 bytes leftover after parsing attributes in process `syz.2.183'. [ 42.951885][ T3964] veth0_macvtap: entered promiscuous mode [ 42.992803][ T3964] veth1_macvtap: entered promiscuous mode [ 43.005795][ T3964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.019118][ T3964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.031426][ T3964] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.040238][ T3964] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.049291][ T3964] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.058302][ T3964] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.217374][ T4188] ipvlan2: entered promiscuous mode [ 43.436771][ T4207] loop3: detected capacity change from 0 to 1024 [ 43.612464][ T4231] Cannot find add_set index 0 as target [ 43.659929][ T4207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.680337][ T4232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4232 comm=syz.4.192 [ 43.710821][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.754190][ T4255] loop5: detected capacity change from 0 to 512 [ 43.785113][ T4255] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.811705][ T4255] EXT4-fs (loop5): mount failed [ 43.815556][ T4256] 9pnet: Unknown protocol version p2000/L [ 43.898617][ T4281] loop4: detected capacity change from 0 to 128 [ 43.997927][ T4289] loop2: detected capacity change from 0 to 2048 [ 44.033385][ T4289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.095330][ T4302] loop4: detected capacity change from 0 to 1024 [ 44.105465][ T4302] EXT4-fs: Ignoring removed orlov option [ 44.115164][ T4302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.303908][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.323567][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.544603][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 44.565962][ T4321] smc: net device bond0 applied user defined pnetid SYZ0 [ 44.574024][ T4321] smc: net device bond0 erased user defined pnetid SYZ0 [ 44.807897][ T4343] netlink: 'syz.5.222': attribute type 10 has an invalid length. [ 44.822011][ T4343] ipvlan0: entered allmulticast mode [ 44.827363][ T4343] veth0_vlan: entered allmulticast mode [ 44.837675][ T4343] team0: Device ipvlan0 failed to register rx_handler [ 44.845408][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.906331][ T4349] netlink: 'syz.5.224': attribute type 2 has an invalid length. [ 44.924423][ T4355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 44.933392][ T4355] netlink: 48 bytes leftover after parsing attributes in process `syz.2.223'. [ 44.962767][ T4352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 44.971839][ T4352] netlink: 48 bytes leftover after parsing attributes in process `syz.2.223'. [ 45.026414][ T4369] loop0: detected capacity change from 0 to 512 [ 45.033850][ T4369] EXT4-fs: Ignoring removed orlov option [ 45.046949][ T4369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.067392][ T4369] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.077038][ T4373] loop2: detected capacity change from 0 to 164 [ 45.093653][ T4369] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.227: bg 0: block 248: padding at end of block bitmap is not set [ 45.109893][ T4369] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.227: Failed to acquire dquot type 1 [ 45.113164][ T4373] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 45.123345][ T4369] EXT4-fs (loop0): 1 truncate cleaned up [ 45.136566][ T4369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.187171][ T4380] lo speed is unknown, defaulting to 1000 [ 45.208638][ T4382] loop5: detected capacity change from 0 to 2048 [ 45.221915][ T4382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.257949][ T4389] netlink: 'syz.2.235': attribute type 10 has an invalid length. [ 45.265980][ T4389] ipvlan0: entered allmulticast mode [ 45.271588][ T4389] veth0_vlan: entered allmulticast mode [ 45.278875][ T4389] team0: Device ipvlan0 failed to register rx_handler [ 45.389606][ T4401] FAULT_INJECTION: forcing a failure. [ 45.389606][ T4401] name failslab, interval 1, probability 0, space 0, times 0 [ 45.402723][ T4401] CPU: 1 UID: 0 PID: 4401 Comm: syz.3.239 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 45.402813][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.402824][ T4401] Call Trace: [ 45.402830][ T4401] [ 45.402838][ T4401] __dump_stack+0x1d/0x30 [ 45.402857][ T4401] dump_stack_lvl+0xe8/0x140 [ 45.402876][ T4401] dump_stack+0x15/0x1b [ 45.402890][ T4401] should_fail_ex+0x265/0x280 [ 45.402977][ T4401] should_failslab+0x8c/0xb0 [ 45.402996][ T4401] kmem_cache_alloc_noprof+0x50/0x310 [ 45.403019][ T4401] ? security_file_alloc+0x32/0x100 [ 45.403050][ T4401] security_file_alloc+0x32/0x100 [ 45.403065][ T4401] init_file+0x5c/0x1d0 [ 45.403087][ T4401] alloc_empty_file+0x8b/0x200 [ 45.403180][ T4401] alloc_file_pseudo+0xc6/0x160 [ 45.403200][ T4401] aio_setup_ring+0x133/0x760 [ 45.403262][ T4401] ioctx_alloc+0x2c4/0x4e0 [ 45.403358][ T4401] ? fput+0x8f/0xc0 [ 45.403439][ T4401] __se_sys_io_setup+0x6b/0x1b0 [ 45.403514][ T4401] __x64_sys_io_setup+0x31/0x40 [ 45.403610][ T4401] x64_sys_call+0x2f0e/0x2fb0 [ 45.403632][ T4401] do_syscall_64+0xd2/0x200 [ 45.403651][ T4401] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.403703][ T4401] ? clear_bhb_loop+0x40/0x90 [ 45.403723][ T4401] ? clear_bhb_loop+0x40/0x90 [ 45.403744][ T4401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.403771][ T4401] RIP: 0033:0x7f441cace9a9 [ 45.403787][ T4401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.403820][ T4401] RSP: 002b:00007f441b137038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 45.403836][ T4401] RAX: ffffffffffffffda RBX: 00007f441ccf5fa0 RCX: 00007f441cace9a9 [ 45.403847][ T4401] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 45.403930][ T4401] RBP: 00007f441b137090 R08: 0000000000000000 R09: 0000000000000000 [ 45.403942][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.403954][ T4401] R13: 0000000000000000 R14: 00007f441ccf5fa0 R15: 00007ffd36f5a758 [ 45.404050][ T4401] [ 45.711049][ T4411] netlink: 'syz.3.242': attribute type 20 has an invalid length. [ 45.719522][ T4411] usb usb1: usbfs: process 4411 (syz.3.242) did not claim interface 0 before use [ 45.808394][ T4417] loop2: detected capacity change from 0 to 128 [ 45.828235][ T4423] loop4: detected capacity change from 0 to 128 [ 45.846706][ T4423] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.863130][ T4423] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.928228][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.995942][ T4433] loop3: detected capacity change from 0 to 512 [ 46.008888][ T4433] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.068158][ T4433] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.249: bg 0: block 248: padding at end of block bitmap is not set [ 46.085229][ T4433] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.249: Failed to acquire dquot type 1 [ 46.086091][ T3964] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.098307][ T4433] EXT4-fs (loop3): 1 truncate cleaned up [ 46.131245][ T4433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.153268][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 46.173318][ T4455] loop5: detected capacity change from 0 to 2048 [ 46.180202][ T4433] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.249: deleted inode referenced: 12 [ 46.180376][ T4449] sch_fq: defrate 4294967295 ignored. [ 46.203782][ T4455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.208257][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 46.289305][ T4455] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.309137][ T4463] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.249: deleted inode referenced: 12 [ 46.330989][ T4455] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 778 with error 28 [ 46.332608][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 46.332620][ T29] audit: type=1326 audit(1753235390.182:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f441cac5967 code=0x7ffc0000 [ 46.343369][ T4455] EXT4-fs (loop5): This should not happen!! Data will be lost [ 46.343369][ T4455] [ 46.349643][ T29] audit: type=1326 audit(1753235390.182:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f441ca6ab89 code=0x7ffc0000 [ 46.372828][ T4455] EXT4-fs (loop5): Total free blocks count 0 [ 46.372844][ T4455] EXT4-fs (loop5): Free/Dirty block details [ 46.382508][ T29] audit: type=1326 audit(1753235390.182:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f441cace9a9 code=0x7ffc0000 [ 46.405737][ T4455] EXT4-fs (loop5): free_blocks=2415919104 [ 46.405752][ T4455] EXT4-fs (loop5): dirty_blocks=784 [ 46.411766][ T29] audit: type=1326 audit(1753235390.192:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f441cac5967 code=0x7ffc0000 [ 46.417601][ T4455] EXT4-fs (loop5): Block reservation details [ 46.440735][ T29] audit: type=1326 audit(1753235390.192:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f441ca6ab89 code=0x7ffc0000 [ 46.446397][ T4455] EXT4-fs (loop5): i_reserved_data_blocks=49 [ 46.510448][ T29] audit: type=1326 audit(1753235390.192:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f441cace9a9 code=0x7ffc0000 [ 46.533605][ T29] audit: type=1400 audit(1753235390.202:1388): avc: denied { map } for pid=4454 comm="syz.5.252" path="/13/file2/memory.events.local" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.557558][ T29] audit: type=1326 audit(1753235390.202:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f441cac5967 code=0x7ffc0000 [ 46.580891][ T29] audit: type=1326 audit(1753235390.202:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f441ca6ab89 code=0x7ffc0000 [ 46.604637][ T29] audit: type=1326 audit(1753235390.202:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f441cace9a9 code=0x7ffc0000 [ 46.650279][ T4465] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.657519][ T4465] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.716468][ T4465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.730041][ T4465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.754353][ T4480] loop2: detected capacity change from 0 to 2048 [ 46.773344][ T4480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.777394][ T4482] loop4: detected capacity change from 0 to 164 [ 46.796469][ T4465] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.805622][ T4465] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.814660][ T4465] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.823751][ T4465] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.833855][ T4433] syz.3.249 (4433) used greatest stack depth: 9496 bytes left [ 46.836711][ T4482] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 46.869859][ T3311] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 46.883176][ T3964] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /13/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 46.899224][ T3311] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 46.908770][ T3964] EXT4-fs error (device loop5): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 46.937779][ T3964] EXT4-fs warning (device loop5): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 46.949697][ T3964] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /13/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 46.974504][ T3964] EXT4-fs error (device loop5): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 46.996758][ T3964] EXT4-fs warning (device loop5): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 47.008641][ T3964] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /13/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 47.033425][ T3964] EXT4-fs error (device loop5): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 47.054360][ T12] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 47.054674][ T391] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 47.064278][ T3964] EXT4-fs warning (device loop5): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 47.079907][ T3964] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /13/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 47.103129][ T3964] EXT4-fs error (device loop5): ext4_empty_dir:3093: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 47.128996][ T3964] EXT4-fs warning (device loop5): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 47.140858][ T3964] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /13/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 47.163652][ T3964] EXT4-fs warning (device loop5): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 47.176750][ T3964] EXT4-fs warning (device loop5): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 47.188805][ T3964] EXT4-fs warning (device loop5): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 47.201314][ T4450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.213308][ T3964] EXT4-fs warning (device loop5): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 47.226025][ T150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.237051][ T3964] EXT4-fs warning (device loop5): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 47.252000][ T3964] EXT4-fs warning (device loop5): ext4_empty_dir:3095: inode #11: comm syz-executor: directory missing '..' [ 47.281984][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 47.291245][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 47.291626][ T150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.353610][ T150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.391228][ T4496] lo speed is unknown, defaulting to 1000 [ 47.435999][ T4496] chnl_net:caif_netlink_parms(): no params data found [ 47.467912][ T150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.487147][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.494352][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.519408][ T3319] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 47.523192][ T4496] bridge_slave_0: entered allmulticast mode [ 47.537315][ T4369] syz.0.227 (4369) used greatest stack depth: 9304 bytes left [ 47.541000][ T4496] bridge_slave_0: entered promiscuous mode [ 47.553371][ T3319] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 47.554655][ T4496] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.569153][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.577044][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.578842][ T4496] bridge_slave_1: entered allmulticast mode [ 47.592789][ T4496] bridge_slave_1: entered promiscuous mode [ 47.599724][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.657285][ T4511] loop4: detected capacity change from 0 to 8192 [ 47.674740][ T4496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.694289][ T150] bridge_slave_1: left allmulticast mode [ 47.700050][ T150] bridge_slave_1: left promiscuous mode [ 47.705938][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.719791][ T4511] vfat: Unknown parameter '' [ 47.739895][ T150] bridge_slave_0: left allmulticast mode [ 47.745636][ T150] bridge_slave_0: left promiscuous mode [ 47.751372][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.878891][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 47.905718][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 48.033525][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.075714][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.103085][ T150] bond0 (unregistering): Released all slaves [ 48.204052][ T150] hsr_slave_0: left promiscuous mode [ 48.211352][ T150] hsr_slave_1: left promiscuous mode [ 48.230102][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.237688][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.269022][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.276635][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.310806][ T150] veth1_macvtap: left promiscuous mode [ 48.316473][ T150] veth0_macvtap: left promiscuous mode [ 48.323794][ T150] veth1_vlan: left promiscuous mode [ 48.329145][ T150] veth0_vlan: left promiscuous mode [ 48.492993][ T150] team0 (unregistering): Port device team_slave_1 removed [ 48.508089][ T150] team0 (unregistering): Port device team_slave_0 removed [ 48.578218][ T4496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.587350][ T4533] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 48.596695][ T4516] smc: net device bond0 applied user defined pnetid SYZ0 [ 48.603812][ T3413] lo speed is unknown, defaulting to 1000 [ 48.606496][ T4533] team0: Device ipvlan0 failed to register rx_handler [ 48.609615][ T3413] infiniband syz0: ib_query_port failed (-19) [ 48.621515][ T4521] smc: net device bond0 erased user defined pnetid SYZ0 [ 48.624118][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 48.660470][ T4496] team0: Port device team_slave_0 added [ 48.672729][ T4496] team0: Port device team_slave_1 added [ 48.718924][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.725972][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.751943][ T4496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.768875][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.775928][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.801933][ T4496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.877802][ T4496] hsr_slave_0: entered promiscuous mode [ 48.898599][ T4496] hsr_slave_1: entered promiscuous mode [ 48.914453][ T4496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.923671][ T4496] Cannot create hsr debugfs directory [ 49.007575][ T4571] loop0: detected capacity change from 0 to 1024 [ 49.038155][ T4571] EXT4-fs: Ignoring removed orlov option [ 49.071981][ T4571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.137853][ T4583] FAULT_INJECTION: forcing a failure. [ 49.137853][ T4583] name failslab, interval 1, probability 0, space 0, times 0 [ 49.150556][ T4583] CPU: 0 UID: 0 PID: 4583 Comm: syz.2.281 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 49.150578][ T4583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.150587][ T4583] Call Trace: [ 49.150592][ T4583] [ 49.150600][ T4583] __dump_stack+0x1d/0x30 [ 49.150623][ T4583] dump_stack_lvl+0xe8/0x140 [ 49.150640][ T4583] dump_stack+0x15/0x1b [ 49.150655][ T4583] should_fail_ex+0x265/0x280 [ 49.150680][ T4583] should_failslab+0x8c/0xb0 [ 49.150698][ T4583] kmem_cache_alloc_noprof+0x50/0x310 [ 49.150718][ T4583] ? vm_area_alloc+0x2c/0xb0 [ 49.150742][ T4583] vm_area_alloc+0x2c/0xb0 [ 49.150761][ T4583] mmap_region+0xa43/0x1580 [ 49.150802][ T4583] do_mmap+0x9b3/0xbe0 [ 49.150830][ T4583] vm_mmap_pgoff+0x17a/0x2e0 [ 49.150853][ T4583] ksys_mmap_pgoff+0xc2/0x310 [ 49.150873][ T4583] ? __x64_sys_mmap+0x49/0x70 [ 49.150891][ T4583] x64_sys_call+0x1602/0x2fb0 [ 49.150910][ T4583] do_syscall_64+0xd2/0x200 [ 49.150928][ T4583] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.150952][ T4583] ? clear_bhb_loop+0x40/0x90 [ 49.150968][ T4583] ? clear_bhb_loop+0x40/0x90 [ 49.150987][ T4583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.151007][ T4583] RIP: 0033:0x7f90fc49e9e3 [ 49.151020][ T4583] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 49.151033][ T4583] RSP: 002b:00007f90faabce18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 49.151048][ T4583] RAX: ffffffffffffffda RBX: 0000000000000443 RCX: 00007f90fc49e9e3 [ 49.151057][ T4583] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 49.151067][ T4583] RBP: 0000200000000802 R08: 00000000ffffffff R09: 0000000000000000 [ 49.151077][ T4583] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000d [ 49.151088][ T4583] R13: 00007f90faabcef0 R14: 00007f90faabceb0 R15: 0000200000000d80 [ 49.151106][ T4583] [ 49.532712][ T4496] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 49.554262][ T4546] chnl_net:caif_netlink_parms(): no params data found [ 49.566469][ T4496] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 49.583675][ T4496] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 49.596786][ T4496] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.626755][ T150] bridge_slave_1: left allmulticast mode [ 49.632532][ T150] bridge_slave_1: left promiscuous mode [ 49.638456][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.646361][ T150] bridge_slave_0: left allmulticast mode [ 49.652146][ T150] bridge_slave_0: left promiscuous mode [ 49.657912][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.674566][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.695993][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.705504][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.713405][ T4608] loop0: detected capacity change from 0 to 2048 [ 49.721083][ T150] bond0 (unregistering): Released all slaves [ 49.733158][ T4608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.763104][ T4546] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.770398][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.778447][ T4546] bridge_slave_0: entered allmulticast mode [ 49.785451][ T4546] bridge_slave_0: entered promiscuous mode [ 49.882585][ T150] hsr_slave_0: left promiscuous mode [ 49.888302][ T150] hsr_slave_1: left promiscuous mode [ 49.895057][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.911203][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.999541][ T150] team0 (unregistering): Port device team_slave_1 removed [ 50.030214][ T150] team0 (unregistering): Port device team_slave_0 removed [ 50.075280][ T4546] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.082579][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.093747][ T4546] bridge_slave_1: entered allmulticast mode [ 50.100377][ T4546] bridge_slave_1: entered promiscuous mode [ 50.148132][ T4546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.198744][ T4546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.223368][ T4496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.264967][ T4546] team0: Port device team_slave_0 added [ 50.276111][ T4546] team0: Port device team_slave_1 added [ 50.310298][ T4546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.317348][ T4546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.343413][ T4546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.360609][ T4496] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.373153][ T4546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.380142][ T4546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.406201][ T4546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.442973][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.450136][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.479201][ T4546] hsr_slave_0: entered promiscuous mode [ 50.486057][ T4546] hsr_slave_1: entered promiscuous mode [ 50.492897][ T4546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.500567][ T4546] Cannot create hsr debugfs directory [ 50.512561][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.519821][ T391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.586811][ T4496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.597297][ T4496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.644148][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.739426][ T4496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.759670][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 50.786415][ T4669] loop0: detected capacity change from 0 to 8192 [ 50.814083][ T4664] smc: net device bond0 applied user defined pnetid SYZ0 [ 50.819626][ T4669] msdos: Unknown parameter 'vots' [ 50.891940][ T4546] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 50.901498][ T4664] smc: net device bond0 erased user defined pnetid SYZ0 [ 50.908768][ T4689] loop4: detected capacity change from 0 to 1024 [ 50.928577][ T4546] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 50.942526][ T4546] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 50.952305][ T4546] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 51.012393][ T4689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.037367][ T4546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.075283][ T4546] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.085243][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.092341][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.115747][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.122847][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.150287][ T4496] veth0_vlan: entered promiscuous mode [ 51.172820][ T4496] veth1_vlan: entered promiscuous mode [ 51.206831][ T4496] veth0_macvtap: entered promiscuous mode [ 51.217437][ T4496] veth1_macvtap: entered promiscuous mode [ 51.231238][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.246003][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.258957][ T4496] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.268030][ T4496] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.276844][ T4496] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.285669][ T4496] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.321226][ T4546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.354907][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 51.354922][ T29] audit: type=1326 audit(1753235395.272:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.6.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bd73e9a9 code=0x7ffc0000 [ 51.391326][ T4741] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 51.399009][ T4741] audit: out of memory in audit_log_start [ 51.435248][ T29] audit: type=1326 audit(1753235395.302:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.6.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bd73e9a9 code=0x7ffc0000 [ 51.458627][ T29] audit: type=1326 audit(1753235395.302:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.6.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22bd73e9a9 code=0x7ffc0000 [ 51.482047][ T29] audit: type=1326 audit(1753235395.302:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.6.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bd73e9a9 code=0x7ffc0000 [ 51.505771][ T29] audit: type=1326 audit(1753235395.302:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.6.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bd73e9a9 code=0x7ffc0000 [ 51.529530][ T29] audit: type=1326 audit(1753235395.302:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.6.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22bd73e9a9 code=0x7ffc0000 [ 51.553388][ T29] audit: type=1326 audit(1753235395.302:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.6.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bd73e9a9 code=0x7ffc0000 [ 51.577137][ T29] audit: type=1326 audit(1753235395.312:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.6.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22bd73e9a9 code=0x7ffc0000 [ 51.617879][ T4764] FAULT_INJECTION: forcing a failure. [ 51.617879][ T4764] name failslab, interval 1, probability 0, space 0, times 0 [ 51.630676][ T4764] CPU: 0 UID: 0 PID: 4764 Comm: syz.6.292 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 51.630735][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.630747][ T4764] Call Trace: [ 51.630753][ T4764] [ 51.630760][ T4764] __dump_stack+0x1d/0x30 [ 51.630778][ T4764] dump_stack_lvl+0xe8/0x140 [ 51.630796][ T4764] dump_stack+0x15/0x1b [ 51.630811][ T4764] should_fail_ex+0x265/0x280 [ 51.630919][ T4764] should_failslab+0x8c/0xb0 [ 51.630940][ T4764] kmem_cache_alloc_noprof+0x50/0x310 [ 51.630963][ T4764] ? alloc_empty_file+0x76/0x200 [ 51.630986][ T4764] alloc_empty_file+0x76/0x200 [ 51.631021][ T4764] path_openat+0x68/0x2170 [ 51.631107][ T4764] ? 0xffffffffa0203c64 [ 51.631120][ T4764] ? _parse_integer_limit+0x170/0x190 [ 51.631148][ T4764] ? kstrtoull+0x111/0x140 [ 51.631171][ T4764] ? kstrtouint+0x76/0xc0 [ 51.631221][ T4764] do_filp_open+0x109/0x230 [ 51.631252][ T4764] do_sys_openat2+0xa6/0x110 [ 51.631276][ T4764] __x64_sys_openat+0xf2/0x120 [ 51.631357][ T4764] x64_sys_call+0x1af/0x2fb0 [ 51.631378][ T4764] do_syscall_64+0xd2/0x200 [ 51.631395][ T4764] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.631458][ T4764] ? clear_bhb_loop+0x40/0x90 [ 51.631533][ T4764] ? clear_bhb_loop+0x40/0x90 [ 51.631616][ T4764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.631636][ T4764] RIP: 0033:0x7f22bd73d310 [ 51.631649][ T4764] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 51.631663][ T4764] RSP: 002b:00007f22bbd9ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 51.631734][ T4764] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f22bd73d310 [ 51.631745][ T4764] RDX: 0000000000000002 RSI: 00007f22bbd9efa0 RDI: 00000000ffffff9c [ 51.631758][ T4764] RBP: 00007f22bbd9efa0 R08: 0000000000000000 R09: 0000000000000000 [ 51.631828][ T4764] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 51.631840][ T4764] R13: 0000000000000000 R14: 00007f22bd965fa0 R15: 00007ffd935001d8 [ 51.631858][ T4764] [ 51.908161][ T4770] loop6: detected capacity change from 0 to 1024 [ 51.922895][ T4770] EXT4-fs: Ignoring removed orlov option [ 51.943021][ T4770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.957295][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.001345][ T4779] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 52.030279][ T4546] veth0_vlan: entered promiscuous mode [ 52.047443][ T4779] team0: Port device dummy0 added [ 52.060186][ T4546] veth1_vlan: entered promiscuous mode [ 52.081163][ T4546] veth0_macvtap: entered promiscuous mode [ 52.099097][ T4546] veth1_macvtap: entered promiscuous mode [ 52.142345][ T4546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.159503][ T4799] loop4: detected capacity change from 0 to 512 [ 52.171909][ T4446] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 52.183429][ T4546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.197196][ T4546] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.206139][ T4546] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.215044][ T4546] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.223858][ T4546] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.243760][ T4799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.263184][ T4799] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.279624][ T4799] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #12: comm syz.4.299: Directory hole found for htree leaf block 0 [ 52.342906][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.391357][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 52.433299][ T4821] smc: net device bond0 applied user defined pnetid SYZ0 [ 52.499363][ T4837] smc: net device bond0 erased user defined pnetid SYZ0 [ 52.558538][ T4831] loop4: detected capacity change from 0 to 2048 [ 52.616350][ T4831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.634451][ T4831] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.671209][ T4831] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.304: reserved inode found cleared - inode=1 [ 52.767922][ T4496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.788578][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.790098][ T4863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 52.811183][ T12] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 52.862570][ T4863] smc: net device bond0 applied user defined pnetid SYZ0 [ 52.904843][ T4863] smc: net device bond0 erased user defined pnetid SYZ0 [ 53.025980][ T4878] hub 6-0:1.0: USB hub found [ 53.046524][ T4878] hub 6-0:1.0: 8 ports detected [ 53.166580][ T4892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.314'. [ 53.288972][ T4906] loop4: detected capacity change from 0 to 1024 [ 53.311030][ T4909] netlink: 28 bytes leftover after parsing attributes in process `syz.6.317'. [ 53.361801][ T4906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.374459][ T4906] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.387825][ T4906] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 53.406670][ T4906] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 53.419159][ T4906] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.419159][ T4906] [ 53.428899][ T4906] EXT4-fs (loop4): Total free blocks count 0 [ 53.434942][ T4906] EXT4-fs (loop4): Free/Dirty block details [ 53.434973][ T4906] EXT4-fs (loop4): free_blocks=4293918720 [ 53.434987][ T4906] EXT4-fs (loop4): dirty_blocks=16 [ 53.434998][ T4906] EXT4-fs (loop4): Block reservation details [ 53.435007][ T4906] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 53.517422][ T31] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 3) [ 53.558086][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 53.617906][ T4941] loop7: detected capacity change from 0 to 164 [ 53.651809][ T4941] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 53.738892][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.333'. [ 54.210736][ T5017] loop7: detected capacity change from 0 to 128 [ 54.241076][ T5019] netlink: 'syz.6.346': attribute type 10 has an invalid length. [ 54.261946][ T5021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 54.272616][ T5019] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 54.371061][ T5035] SELinux: Context Ü is not valid (left unmapped). [ 54.392302][ T5040] sctp: [Deprecated]: syz.4.351 (pid 5040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.392302][ T5040] Use struct sctp_sack_info instead [ 54.645434][ T5031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.349'. [ 54.697827][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.349'. [ 54.733723][ T4988] loop0: detected capacity change from 0 to 65536 [ 54.797420][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 54.847436][ T5091] loop0: detected capacity change from 0 to 128 [ 54.993370][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.359'. [ 55.066102][ T5108] smc: net device bond0 applied user defined pnetid SYZ0 [ 55.115171][ T5093] smc: net device bond0 erased user defined pnetid SYZ0 [ 55.139477][ T5117] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 55.202249][ T5120] loop0: detected capacity change from 0 to 164 [ 55.225031][ T5120] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 55.478308][ T5157] netlink: 'syz.2.374': attribute type 4 has an invalid length. [ 55.488907][ T5153] loop0: detected capacity change from 0 to 512 [ 55.501765][ T5162] loop4: detected capacity change from 0 to 128 [ 55.527325][ T5153] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm gtp: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 55.548535][ T5169] loop2: detected capacity change from 0 to 512 [ 55.561667][ T5163] loop6: detected capacity change from 0 to 2048 [ 55.626859][ T5153] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm gtp: Bad quota inode: 3, type: 0 [ 55.659763][ T5163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.709438][ T5153] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 55.724440][ T5153] EXT4-fs (loop0): mount failed [ 55.731145][ T5163] FAULT_INJECTION: forcing a failure. [ 55.731145][ T5163] name failslab, interval 1, probability 0, space 0, times 0 [ 55.743821][ T5163] CPU: 1 UID: 0 PID: 5163 Comm: syz.6.375 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 55.743918][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.743928][ T5163] Call Trace: [ 55.743934][ T5163] [ 55.743941][ T5163] __dump_stack+0x1d/0x30 [ 55.743959][ T5163] dump_stack_lvl+0xe8/0x140 [ 55.743975][ T5163] dump_stack+0x15/0x1b [ 55.743989][ T5163] should_fail_ex+0x265/0x280 [ 55.744089][ T5163] should_failslab+0x8c/0xb0 [ 55.744110][ T5163] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 55.744137][ T5163] ? tcf_pedit_init+0x5d7/0x970 [ 55.744219][ T5163] kmemdup_noprof+0x2b/0x70 [ 55.744242][ T5163] tcf_pedit_init+0x5d7/0x970 [ 55.744277][ T5163] tcf_action_init_1+0x367/0x4a0 [ 55.744377][ T5163] tcf_action_init+0x267/0x6d0 [ 55.744449][ T5163] ? mark_reg_read+0x59/0x340 [ 55.744488][ T5163] tc_ctl_action+0x291/0x830 [ 55.744523][ T5163] ? __pfx_tc_ctl_action+0x10/0x10 [ 55.744639][ T5163] rtnetlink_rcv_msg+0x657/0x6d0 [ 55.744663][ T5163] netlink_rcv_skb+0x120/0x220 [ 55.744691][ T5163] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.744718][ T5163] rtnetlink_rcv+0x1c/0x30 [ 55.744738][ T5163] netlink_unicast+0x5a8/0x680 [ 55.744767][ T5163] netlink_sendmsg+0x58b/0x6b0 [ 55.744842][ T5163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.744862][ T5163] __sock_sendmsg+0x145/0x180 [ 55.744947][ T5163] ____sys_sendmsg+0x31e/0x4e0 [ 55.745022][ T5163] ___sys_sendmsg+0x17b/0x1d0 [ 55.745063][ T5163] __x64_sys_sendmsg+0xd4/0x160 [ 55.745120][ T5163] x64_sys_call+0x2999/0x2fb0 [ 55.745138][ T5163] do_syscall_64+0xd2/0x200 [ 55.745157][ T5163] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.745178][ T5163] ? clear_bhb_loop+0x40/0x90 [ 55.745226][ T5163] ? clear_bhb_loop+0x40/0x90 [ 55.745243][ T5163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.745314][ T5163] RIP: 0033:0x7f22bd73e9a9 [ 55.745338][ T5163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.745352][ T5163] RSP: 002b:00007f22bbd9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.745370][ T5163] RAX: ffffffffffffffda RBX: 00007f22bd965fa0 RCX: 00007f22bd73e9a9 [ 55.745380][ T5163] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 55.745398][ T5163] RBP: 00007f22bbd9f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.745409][ T5163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.745421][ T5163] R13: 0000000000000000 R14: 00007f22bd965fa0 R15: 00007ffd935001d8 [ 55.745439][ T5163] [ 56.061332][ T5194] netlink: 'syz.4.380': attribute type 10 has an invalid length. [ 56.069208][ T5194] ipvlan0: entered allmulticast mode [ 56.074620][ T5194] veth0_vlan: entered allmulticast mode [ 56.091548][ T4496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.108276][ T5194] team0: Device ipvlan0 failed to register rx_handler [ 56.155431][ T5205] loop2: detected capacity change from 0 to 512 [ 56.166210][ T5205] ext4: Bad value for 'min_batch_time' [ 56.205978][ T3730] kernel write not supported for file /50/loginuid (pid: 3730 comm: kworker/1:4) [ 56.359837][ T5240] loop6: detected capacity change from 0 to 164 [ 56.380547][ T5240] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 56.438134][ T5252] loop6: detected capacity change from 0 to 512 [ 56.462606][ T5252] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 56.471427][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 56.471441][ T29] audit: type=1326 audit(1753235400.392:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395349e9a9 code=0x7ffc0000 [ 56.515790][ T5252] EXT4-fs (loop6): orphan cleanup on readonly fs [ 56.527229][ T5263] smc: net device bond0 applied user defined pnetid SYZ0 [ 56.536392][ T29] audit: type=1326 audit(1753235400.422:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f395349e9a9 code=0x7ffc0000 [ 56.560092][ T29] audit: type=1326 audit(1753235400.422:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395349e9a9 code=0x7ffc0000 [ 56.583574][ T29] audit: type=1326 audit(1753235400.422:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395349e9a9 code=0x7ffc0000 [ 56.586198][ T5252] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 56.606955][ T29] audit: type=1326 audit(1753235400.432:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f395349e9a9 code=0x7ffc0000 [ 56.607036][ T29] audit: type=1326 audit(1753235400.432:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395349e9a9 code=0x7ffc0000 [ 56.607126][ T29] audit: type=1326 audit(1753235400.432:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395349e9a9 code=0x7ffc0000 [ 56.687810][ T29] audit: type=1326 audit(1753235400.432:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f395349e9a9 code=0x7ffc0000 [ 56.689728][ T5252] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.711209][ T29] audit: type=1326 audit(1753235400.432:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.4.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f395349e9a9 code=0x7ffc0000 [ 56.712679][ T5265] smc: net device bond0 erased user defined pnetid SYZ0 [ 56.749284][ T5252] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 56.773782][ T5252] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.394: bg 0: block 40: padding at end of block bitmap is not set [ 56.803831][ T5252] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 56.830597][ T5277] loop4: detected capacity change from 0 to 512 [ 56.842430][ T5252] EXT4-fs (loop6): 1 truncate cleaned up [ 56.849472][ T5277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a04fc128, mo2=0002] [ 56.858987][ T5252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.867112][ T5277] System zones: 1-12 [ 56.891460][ T5277] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.398: invalid indirect mapped block 11 (level 0) [ 56.938165][ T5277] EXT4-fs (loop4): Remounting filesystem read-only [ 56.950412][ T4496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.977611][ T5277] EXT4-fs (loop4): 1 truncate cleaned up [ 56.984121][ T5277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.082897][ T5305] pim6reg: entered allmulticast mode [ 57.088893][ T5305] pim6reg: left allmulticast mode [ 57.112415][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.124329][ T5310] FAULT_INJECTION: forcing a failure. [ 57.124329][ T5310] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 57.137709][ T5310] CPU: 1 UID: 0 PID: 5310 Comm: syz.6.404 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 57.137735][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.137747][ T5310] Call Trace: [ 57.137752][ T5310] [ 57.137759][ T5310] __dump_stack+0x1d/0x30 [ 57.137779][ T5310] dump_stack_lvl+0xe8/0x140 [ 57.137847][ T5310] dump_stack+0x15/0x1b [ 57.137864][ T5310] should_fail_ex+0x265/0x280 [ 57.137909][ T5310] should_fail_alloc_page+0xf2/0x100 [ 57.137933][ T5310] __alloc_frozen_pages_noprof+0xff/0x360 [ 57.138081][ T5310] alloc_pages_mpol+0xb3/0x250 [ 57.138153][ T5310] vma_alloc_folio_noprof+0x1aa/0x300 [ 57.138181][ T5310] handle_mm_fault+0xec2/0x2be0 [ 57.138200][ T5310] ? mas_walk+0xf2/0x120 [ 57.138228][ T5310] do_user_addr_fault+0x636/0x1090 [ 57.138333][ T5310] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 57.138400][ T5310] exc_page_fault+0x62/0xa0 [ 57.138422][ T5310] asm_exc_page_fault+0x26/0x30 [ 57.138476][ T5310] RIP: 0033:0x7f22bd600d50 [ 57.138492][ T5310] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 57.138544][ T5310] RSP: 002b:00007f22bbd9e4a0 EFLAGS: 00010202 [ 57.138561][ T5310] RAX: 000000000000d000 RBX: 00007f22bbd9e540 RCX: 0000000000000004 [ 57.138641][ T5310] RDX: 0000000000000fff RSI: 0000000000002000 RDI: 00007f22bbd9e5e0 [ 57.138653][ T5310] RBP: 0000000000000005 R08: 00007f22b397f000 R09: 0000000000000001 [ 57.138665][ T5310] R10: 0000200000001502 R11: 0000000000000a1a R12: 0000000000001801 [ 57.138677][ T5310] R13: 00007f22bd7dc860 R14: 0000000000000019 R15: 00007f22bbd9e5e0 [ 57.138695][ T5310] [ 57.138703][ T5310] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 57.320454][ T51] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 57.327443][ T5310] loop6: detected capacity change from 0 to 1764 [ 57.426303][ T5344] FAULT_INJECTION: forcing a failure. [ 57.426303][ T5344] name failslab, interval 1, probability 0, space 0, times 0 [ 57.432531][ T5349] loop6: detected capacity change from 0 to 512 [ 57.438961][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.4.405 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 57.438987][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.439072][ T5344] Call Trace: [ 57.439079][ T5344] [ 57.439086][ T5344] __dump_stack+0x1d/0x30 [ 57.439106][ T5344] dump_stack_lvl+0xe8/0x140 [ 57.439204][ T5344] dump_stack+0x15/0x1b [ 57.439219][ T5344] should_fail_ex+0x265/0x280 [ 57.439246][ T5344] ? __pfx_proc_self_get_link+0x10/0x10 [ 57.439276][ T5344] ? proc_self_get_link+0x97/0x110 [ 57.439334][ T5344] should_failslab+0x8c/0xb0 [ 57.439355][ T5344] __kmalloc_cache_noprof+0x4c/0x320 [ 57.439428][ T5344] ? __pfx_proc_self_get_link+0x10/0x10 [ 57.439456][ T5344] proc_self_get_link+0x97/0x110 [ 57.439507][ T5344] pick_link+0x47d/0x830 [ 57.439527][ T5344] step_into+0x7b6/0x820 [ 57.439545][ T5344] ? inode_permission+0x106/0x310 [ 57.439566][ T5344] link_path_walk+0x571/0x900 [ 57.439633][ T5344] path_openat+0x1de/0x2170 [ 57.439661][ T5344] ? perf_swevent_event+0x40d/0x450 [ 57.439689][ T5344] do_filp_open+0x109/0x230 [ 57.439745][ T5344] do_sys_openat2+0xa6/0x110 [ 57.439769][ T5344] __x64_sys_openat+0xf2/0x120 [ 57.439793][ T5344] x64_sys_call+0x1af/0x2fb0 [ 57.439843][ T5344] do_syscall_64+0xd2/0x200 [ 57.439862][ T5344] ? clear_bhb_loop+0x40/0x90 [ 57.439881][ T5344] ? clear_bhb_loop+0x40/0x90 [ 57.439971][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.440017][ T5344] RIP: 0033:0x7f395349d310 [ 57.440032][ T5344] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 57.440081][ T5344] RSP: 002b:00007f3951b06f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 57.440099][ T5344] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f395349d310 [ 57.440111][ T5344] RDX: 0000000000000002 RSI: 00007f3951b06fa0 RDI: 00000000ffffff9c [ 57.440123][ T5344] RBP: 00007f3951b06fa0 R08: 0000000000000000 R09: 0000000000000000 [ 57.440135][ T5344] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 57.440146][ T5344] R13: 0000000000000000 R14: 00007f39536c5fa0 R15: 00007ffe4d04b6e8 [ 57.440164][ T5344] [ 57.553024][ T5355] loop4: detected capacity change from 0 to 512 [ 57.577111][ T5349] EXT4-fs: Ignoring removed orlov option [ 57.678290][ T5355] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.685259][ T5349] ext4: Bad value for 'mb_optimize_scan' [ 57.691159][ T5356] loop0: detected capacity change from 0 to 164 [ 57.699164][ T5355] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.410: bg 0: block 248: padding at end of block bitmap is not set [ 57.763427][ T5355] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.410: Failed to acquire dquot type 1 [ 57.799340][ T5355] EXT4-fs (loop4): 1 truncate cleaned up [ 57.806863][ T5355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.866821][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.945899][ T5379] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5379 comm=syz.6.417 [ 58.056098][ T5394] loop7: detected capacity change from 0 to 164 [ 58.172453][ T5410] xt_hashlimit: size too large, truncated to 1048576 [ 58.376690][ T5423] netem: change failed [ 58.405493][ T5423] __nla_validate_parse: 6 callbacks suppressed [ 58.405508][ T5423] netlink: 60 bytes leftover after parsing attributes in process `syz.6.428'. [ 58.589384][ T4446] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 58.620611][ T5436] loop4: detected capacity change from 0 to 128 [ 58.754603][ T5440] loop2: detected capacity change from 0 to 128 [ 58.938219][ T5445] xt_hashlimit: overflow, try lower: 2/0 [ 58.986604][ T5447] loop6: detected capacity change from 0 to 1024 [ 59.173660][ T5447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.203925][ T5455] loop7: detected capacity change from 0 to 1024 [ 59.252136][ T5455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.512267][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 59.524921][ T5501] smc: net device bond0 applied user defined pnetid SYZ0 [ 59.553226][ T5501] smc: net device bond0 erased user defined pnetid SYZ0 [ 59.810912][ T4496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.864035][ T5540] loop0: detected capacity change from 0 to 128 [ 59.883519][ T5544] FAULT_INJECTION: forcing a failure. [ 59.883519][ T5544] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.896691][ T5544] CPU: 0 UID: 0 PID: 5544 Comm: syz.6.465 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 59.896775][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.896788][ T5544] Call Trace: [ 59.896793][ T5544] [ 59.896801][ T5544] __dump_stack+0x1d/0x30 [ 59.896823][ T5544] dump_stack_lvl+0xe8/0x140 [ 59.896859][ T5544] dump_stack+0x15/0x1b [ 59.896875][ T5544] should_fail_ex+0x265/0x280 [ 59.896899][ T5544] should_fail+0xb/0x20 [ 59.896919][ T5544] should_fail_usercopy+0x1a/0x20 [ 59.896973][ T5544] _copy_to_user+0x20/0xa0 [ 59.896994][ T5544] simple_read_from_buffer+0xb5/0x130 [ 59.897023][ T5544] proc_fail_nth_read+0x100/0x140 [ 59.897124][ T5544] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.897172][ T5544] vfs_read+0x19d/0x6f0 [ 59.897194][ T5544] ? __rcu_read_unlock+0x4f/0x70 [ 59.897231][ T5544] ? __fget_files+0x184/0x1c0 [ 59.897248][ T5544] ? finish_task_switch+0xad/0x2b0 [ 59.897271][ T5544] ksys_read+0xda/0x1a0 [ 59.897359][ T5544] __x64_sys_read+0x40/0x50 [ 59.897384][ T5544] x64_sys_call+0x2d77/0x2fb0 [ 59.897405][ T5544] do_syscall_64+0xd2/0x200 [ 59.897423][ T5544] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.897504][ T5544] ? clear_bhb_loop+0x40/0x90 [ 59.897523][ T5544] ? clear_bhb_loop+0x40/0x90 [ 59.897541][ T5544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.897604][ T5544] RIP: 0033:0x7f22bd73d3bc [ 59.897619][ T5544] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 59.897636][ T5544] RSP: 002b:00007f22bbd9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.897677][ T5544] RAX: ffffffffffffffda RBX: 00007f22bd965fa0 RCX: 00007f22bd73d3bc [ 59.897690][ T5544] RDX: 000000000000000f RSI: 00007f22bbd9f0a0 RDI: 0000000000000003 [ 59.897703][ T5544] RBP: 00007f22bbd9f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.897715][ T5544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.897728][ T5544] R13: 0000000000000000 R14: 00007f22bd965fa0 R15: 00007ffd935001d8 [ 59.897747][ T5544] [ 60.183492][ T4546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.214813][ T5563] loop7: detected capacity change from 0 to 164 [ 60.227679][ T5563] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 60.324236][ T5569] loop7: detected capacity change from 0 to 128 [ 60.749315][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.483'. [ 60.790494][ T5618] smc: net device bond0 applied user defined pnetid SYZ0 [ 60.835978][ T5618] smc: net device bond0 erased user defined pnetid SYZ0 [ 60.937304][ T5633] loop2: detected capacity change from 0 to 164 [ 60.974684][ T5633] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 61.184400][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 61.194563][ T5654] smc: net device bond0 applied user defined pnetid SYZ0 [ 61.201953][ T5654] smc: net device bond0 erased user defined pnetid SYZ0 [ 61.358493][ T5670] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 61.590784][ T5680] netem: change failed [ 61.882627][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 61.882649][ T29] audit: type=1326 audit(1753235405.802:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.4.497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f395349e9a9 code=0x0 [ 61.984050][ T29] audit: type=1400 audit(1753235405.902:1886): avc: granted { setsecparam } for pid=5721 comm="syz.7.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 62.013942][ T5725] loop6: detected capacity change from 0 to 128 [ 62.099556][ T5733] loop7: detected capacity change from 0 to 164 [ 62.147987][ T5729] loop6: detected capacity change from 0 to 128 [ 62.203169][ T5743] loop0: detected capacity change from 0 to 164 [ 62.256781][ T5743] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 62.306904][ T5752] loop0: detected capacity change from 0 to 2048 [ 62.336213][ T5752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.358488][ T29] audit: type=1326 audit(1753235406.272:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 62.382189][ T29] audit: type=1326 audit(1753235406.272:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 62.405554][ T29] audit: type=1326 audit(1753235406.272:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 62.411835][ T391] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 62.429415][ T29] audit: type=1326 audit(1753235406.272:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 62.460232][ T29] audit: type=1326 audit(1753235406.272:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 62.483675][ T29] audit: type=1326 audit(1753235406.272:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 62.507217][ T29] audit: type=1326 audit(1753235406.272:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 62.531045][ T29] audit: type=1326 audit(1753235406.272:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06453fe9a9 code=0x7ffc0000 [ 62.623974][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.513'. [ 62.662220][ T5773] smc: net device bond0 applied user defined pnetid SYZ0 [ 62.671779][ T5773] smc: net device bond0 erased user defined pnetid SYZ0 [ 62.873472][ T5800] loop4: detected capacity change from 0 to 128 [ 62.887781][ T5800] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.950539][ T5806] loop4: detected capacity change from 0 to 164 [ 62.962033][ T5806] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 63.206661][ T5825] netlink: 'syz.4.530': attribute type 10 has an invalid length. [ 63.220331][ T5825] team0: Device ipvlan0 failed to register rx_handler [ 63.329912][ T5813] netem: change failed [ 63.359500][ T5846] lo speed is unknown, defaulting to 1000 [ 63.376458][ T5846] lo speed is unknown, defaulting to 1000 [ 63.409951][ T5846] lo speed is unknown, defaulting to 1000 [ 63.428089][ T5846] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 63.451854][ T5846] lo speed is unknown, defaulting to 1000 [ 63.457995][ T5846] lo speed is unknown, defaulting to 1000 [ 63.465744][ T5846] lo speed is unknown, defaulting to 1000 [ 63.472162][ T5846] lo speed is unknown, defaulting to 1000 [ 63.478793][ T5846] lo speed is unknown, defaulting to 1000 [ 63.504124][ T5863] FAULT_INJECTION: forcing a failure. [ 63.504124][ T5863] name failslab, interval 1, probability 0, space 0, times 0 [ 63.517100][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: syz.2.538 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 63.517128][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.517212][ T5863] Call Trace: [ 63.517218][ T5863] [ 63.517256][ T5863] __dump_stack+0x1d/0x30 [ 63.517277][ T5863] dump_stack_lvl+0xe8/0x140 [ 63.517297][ T5863] dump_stack+0x15/0x1b [ 63.517314][ T5863] should_fail_ex+0x265/0x280 [ 63.517364][ T5863] should_failslab+0x8c/0xb0 [ 63.517387][ T5863] kmem_cache_alloc_noprof+0x50/0x310 [ 63.517413][ T5863] ? audit_log_start+0x365/0x6c0 [ 63.517444][ T5863] audit_log_start+0x365/0x6c0 [ 63.517483][ T5863] ? __traceiter_kfree+0x2b/0x50 [ 63.517562][ T5863] ? sg_read+0xb9f/0xcb0 [ 63.517640][ T5863] audit_seccomp+0x48/0x100 [ 63.517682][ T5863] ? __seccomp_filter+0x68c/0x10d0 [ 63.517759][ T5863] __seccomp_filter+0x69d/0x10d0 [ 63.517781][ T5863] ? vfs_read+0x47f/0x6f0 [ 63.517803][ T5863] ? __rcu_read_unlock+0x4f/0x70 [ 63.517895][ T5863] ? __fget_files+0x184/0x1c0 [ 63.517914][ T5863] __secure_computing+0x82/0x150 [ 63.517989][ T5863] syscall_trace_enter+0xcf/0x1e0 [ 63.518009][ T5863] do_syscall_64+0xac/0x200 [ 63.518025][ T5863] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.518072][ T5863] ? clear_bhb_loop+0x40/0x90 [ 63.518089][ T5863] ? clear_bhb_loop+0x40/0x90 [ 63.518108][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.518125][ T5863] RIP: 0033:0x7f90fc49d3bc [ 63.518140][ T5863] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 63.518155][ T5863] RSP: 002b:00007f90faaff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.518290][ T5863] RAX: ffffffffffffffda RBX: 00007f90fc6c5fa0 RCX: 00007f90fc49d3bc [ 63.518303][ T5863] RDX: 000000000000000f RSI: 00007f90faaff0a0 RDI: 0000000000000009 [ 63.518314][ T5863] RBP: 00007f90faaff090 R08: 0000000000000000 R09: 0000000000000000 [ 63.518324][ T5863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.518335][ T5863] R13: 0000000000000000 R14: 00007f90fc6c5fa0 R15: 00007ffdc71d4ff8 [ 63.518353][ T5863] [ 63.843237][ T5880] loop6: detected capacity change from 0 to 2048 [ 63.940838][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 63.966448][ T5898] netlink: 'syz.7.550': attribute type 10 has an invalid length. [ 63.993976][ T5891] smc: net device bond0 applied user defined pnetid SYZ0 [ 64.000748][ T5898] ipvlan0: entered allmulticast mode [ 64.006640][ T5898] veth0_vlan: entered allmulticast mode [ 64.017745][ T5891] smc: net device bond0 erased user defined pnetid SYZ0 [ 64.042285][ T5898] team0: Device ipvlan0 failed to register rx_handler [ 64.199171][ T5919] loop7: detected capacity change from 0 to 2048 [ 64.255949][ T5923] FAULT_INJECTION: forcing a failure. [ 64.255949][ T5923] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 64.269459][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: syz.0.559 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 64.269509][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.269520][ T5923] Call Trace: [ 64.269525][ T5923] [ 64.269531][ T5923] __dump_stack+0x1d/0x30 [ 64.269602][ T5923] dump_stack_lvl+0xe8/0x140 [ 64.269621][ T5923] dump_stack+0x15/0x1b [ 64.269637][ T5923] should_fail_ex+0x265/0x280 [ 64.269728][ T5923] should_fail_alloc_page+0xf2/0x100 [ 64.269755][ T5923] __alloc_frozen_pages_noprof+0xff/0x360 [ 64.269785][ T5923] alloc_pages_mpol+0xb3/0x250 [ 64.269963][ T5923] vma_alloc_folio_noprof+0x1aa/0x300 [ 64.269990][ T5923] do_wp_page+0x673/0x2400 [ 64.270008][ T5923] ? should_failslab+0x8c/0xb0 [ 64.270028][ T5923] ? __rcu_read_lock+0x37/0x50 [ 64.270072][ T5923] handle_mm_fault+0x77d/0x2be0 [ 64.270161][ T5923] ? mas_walk+0xf2/0x120 [ 64.270193][ T5923] do_user_addr_fault+0x636/0x1090 [ 64.270221][ T5923] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.270280][ T5923] exc_page_fault+0x62/0xa0 [ 64.270308][ T5923] asm_exc_page_fault+0x26/0x30 [ 64.270326][ T5923] RIP: 0033:0x7f06452c0a20 [ 64.270341][ T5923] Code: fc 05 0f 94 c3 31 d2 e8 ee fe 13 00 85 c0 75 7a 8b 4c 24 18 8b 6c 24 1c 0f b6 fb 0f b6 c3 48 8d 15 8d 2b e9 00 be 01 00 00 00 0f c1 34 82 83 fe 08 7f 76 8b 05 58 4c e9 00 48 8d 5c 24 20 45 [ 64.270422][ T5923] RSP: 002b:00007f0643a66f80 EFLAGS: 00010246 [ 64.270517][ T5923] RAX: 0000000000000000 RBX: 00007f0645625f00 RCX: 0000000000000005 [ 64.270528][ T5923] RDX: 00007f06461535a8 RSI: 0000000000000001 RDI: 0000000000000000 [ 64.270539][ T5923] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 64.270549][ T5923] R10: 00007f0643a66f98 R11: 0000000000000246 R12: 0000000000000003 [ 64.270559][ T5923] R13: 0000000000000000 R14: 00007f0645625fa0 R15: 00007ffffc8a9ff8 [ 64.270590][ T5923] [ 64.270599][ T5923] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 64.341762][ T12] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 64.354432][ T5923] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 64.358046][ T5919] loop7: p4 < > [ 64.360785][ T5923] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.360953][ T5923] vhci_hcd vhci_hcd.0: Device attached [ 64.508385][ T2995] loop7: p4 < > [ 64.518567][ T5929] vhci_hcd: connection closed [ 64.520186][ T5935] xt_hashlimit: size too large, truncated to 1048576 [ 64.520875][ T150] vhci_hcd: stop threads [ 64.536089][ T150] vhci_hcd: release socket [ 64.540511][ T150] vhci_hcd: disconnect device [ 64.617764][ T5941] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 64.749902][ T5952] loop7: detected capacity change from 0 to 1024 [ 64.758568][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 64.771894][ T5955] netlink: 'syz.6.566': attribute type 10 has an invalid length. [ 64.779689][ T5955] ipvlan0: entered allmulticast mode [ 64.780917][ T5952] EXT4-fs: Ignoring removed orlov option [ 64.785067][ T5955] veth0_vlan: entered allmulticast mode [ 64.791928][ T5955] team0: Device ipvlan0 failed to register rx_handler [ 64.823101][ T5966] SELinux: Context @ is not valid (left unmapped). [ 64.831063][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 64.874372][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.570'. [ 64.883749][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.891224][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.899589][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.908133][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.016358][ T5979] loop2: detected capacity change from 0 to 1024 [ 65.092869][ T5981] loop6: detected capacity change from 0 to 512 [ 65.099641][ T5981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.146667][ T5981] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.167321][ T5994] netlink: 'syz.0.579': attribute type 10 has an invalid length. [ 65.175987][ T5994] ipvlan0: entered allmulticast mode [ 65.181335][ T5994] veth0_vlan: entered allmulticast mode [ 65.191500][ T5994] team0: Device ipvlan0 failed to register rx_handler [ 65.242157][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 65.281365][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.576'. [ 65.298660][ T5998] smc: net device bond0 applied user defined pnetid SYZ0 [ 65.316177][ T5998] smc: net device bond0 erased user defined pnetid SYZ0 [ 65.359453][ T6005] smc: net device bond0 applied user defined pnetid SYZ0 [ 65.384376][ T4496] EXT4-fs unmount: 9 callbacks suppressed [ 65.384389][ T4496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.388797][ T6007] loop0: detected capacity change from 0 to 512 [ 65.439434][ T6009] loop6: detected capacity change from 0 to 128 [ 65.440990][ T6010] smc: net device bond0 erased user defined pnetid SYZ0 [ 65.462190][ T6007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.513090][ T6009] syz.6.582: attempt to access beyond end of device [ 65.513090][ T6009] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 65.769762][ T6020] pimreg: entered allmulticast mode [ 65.858295][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.886177][ T6023] ================================================================== [ 65.894294][ T6023] BUG: KCSAN: data-race in bdev_statx / queue_limits_commit_update [ 65.902188][ T6023] [ 65.904671][ T6023] read to 0xffff8881023d4848 of 4 bytes by task 3298 on cpu 1: [ 65.912196][ T6023] bdev_statx+0x295/0x2d0 [ 65.916513][ T6023] vfs_getattr_nosec+0x1b6/0x1e0 [ 65.921579][ T6023] vfs_statx+0x113/0x390 [ 65.925853][ T6023] vfs_fstatat+0x115/0x170 [ 65.930280][ T6023] __se_sys_newfstatat+0x55/0x260 [ 65.935293][ T6023] __x64_sys_newfstatat+0x55/0x70 [ 65.940308][ T6023] x64_sys_call+0x2c22/0x2fb0 [ 65.945069][ T6023] do_syscall_64+0xd2/0x200 [ 65.949558][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.955438][ T6023] [ 65.957752][ T6023] write to 0xffff8881023d4808 of 184 bytes by task 6023 on cpu 0: [ 65.965658][ T6023] queue_limits_commit_update+0x4c/0x110 [ 65.971666][ T6023] loop_configure+0x79c/0xa50 [ 65.976352][ T6023] lo_ioctl+0x559/0x15d0 [ 65.980640][ T6023] blkdev_ioctl+0x34f/0x440 [ 65.985156][ T6023] __se_sys_ioctl+0xcb/0x140 [ 65.989747][ T6023] __x64_sys_ioctl+0x43/0x50 [ 65.994335][ T6023] x64_sys_call+0x19a8/0x2fb0 [ 65.999019][ T6023] do_syscall_64+0xd2/0x200 [ 66.003511][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.009531][ T6023] [ 66.011845][ T6023] Reported by Kernel Concurrency Sanitizer on: [ 66.017994][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.2.584 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 66.028679][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.038817][ T6023] ================================================================== [ 66.054753][ T6023] loop2: detected capacity change from 0 to 164 [ 66.074658][ T6023] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 66.231493][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.541101][ T4446] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 69.450930][ T150] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 73.300932][ T4446] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 75.211049][ T12] IPVS: nq: UDP 127.0.0.1:0 - no destination available