last executing test programs: 31.377812205s ago: executing program 1 (id=18): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x200b, 0x10000, 0x3, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) 31.243502707s ago: executing program 1 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (fail_nth: 2) 31.07149554s ago: executing program 1 (id=24): r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x3, 0x203}, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x2, &(0x7f0000000080)=[{0x1000, 0x80, 0xdb, 0xfffffffa}, {0x2, 0x0, 0xfc, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000440)) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000001a00)={0xa24, 0xffffffffffffff3f, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11}, 0x48) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) 30.135716834s ago: executing program 1 (id=36): sendmmsg(0xffffffffffffffff, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000008580)="e5b31db6db9a262fbbf4", 0xa}], 0x1}}], 0x1, 0x40000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff00000000000000", 0x1c) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40002c1, 0x2000a002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffbff}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="00000041000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r3, @ANYBLOB="8663057ba6afc69ce7ba3746a386899575ad0ce5fa68fc084f6291e5bbd6854dd5209f6d9e512fdd45369d13dfd0a491fd0d5c4a1ee0782174a8f12ac83638323b4196904e05ee75ca9314c59313693446059b421ce0a76e41bb773387f3512afafa5b18ec7eb4a6d5aeda7cf7ae63"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000001140)=ANY=[@ANYRES8=0x0, @ANYBLOB="150372626c9d5f3317ad8221d37e160e79c5f6e278be2130ca7330b2", @ANYRESDEC, @ANYRES16, @ANYBLOB="017bd269f7dd3a93fa412d09c2790257816e859e38befc7634f092626c62b45f123b8f0f84059ba4351abe0bfd3933e564c513028b41a418555d5e4c744478e7ca03d24a2c1b0f248513f8f9cfc324431f5d5a6999ad47b61152edad98c141cf359dfcf021d4e8a18166aa7767e69420c5308149bcddd4a62a31d8f902a24645ef50e8395e891793f46aaa025a260c8d784a1ec9233755d12803582f0700000000000000df6c634447f23d2cd9e65d3461d3a09b93f7318e486e862f288bb7ce21e0df72e59ed16f3796c260b5be486b21c5d7cf21996406b4b3240f4255406a009a12c844c2d35cefba99e2b26b01a1347225c1a8cb9f6630d930847f193662a5eea4daf62aeb29324a86f8ec6367bf3105d3529316d3e044bbeedf80c3b301686b44cd51c9ff53690e9269caf72a039b5e32b3e543b8fbba25a1eaf60c3e1da6becef1750a9e8d991ef03ce3d14d85d69f6ff54465fba8ad4aef62561284fdc9cba6fea9a38fb5244e7729c047949660af09fa91fd17928f55f6bed589cdf6e6dde72206336961da8ce2c100ff90ac4a598e9846bc2b868a640021bec390b7f460d14330beadd5458a0352cde0d6c8bc1655da9121090c98cdf98438ab1baa3bbbb60db2436ae26fad78755d3df25b0f03c4c8f39f27a668aa45aa2953ebd6a34233a386f3d63a07f7e491a2db98af12cc6fc814e8a75efcf90c0e2a56a833d53b086be1ec10efe3c7d46abfedb36fc2fc75ebbdabcd356e489fe87dbf67bfe8de6d24d4db48c65da860ccf9f9b2f8b1fc8c8d2e7293a465ea21757521a1b0677f50901ea19c53fd3a8ca59fbc328e69b0d064746a000000a1ed7631a64c8ecb86645f66b4efc49b74ec93f4897a56c7dbb42f094e6685051a0d42bed7598cc30ffc08bc2db500c5e5f9d51fc89d25f3a202b0abc67dd7926f915d61c24e031636d984759a36ba0b3a06151764621bdbe91b510a6064aa51e0a73317ccb02dbb89c701eac52445561f7355071ef71ae5427f612f8620f6b9a80c440af2f162"], 0x40, 0x2f6, &(0x7f0000000e40)="$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") open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8008) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x0, 0x10}, 0xc) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000040) r8 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r8, r8, 0x21) 30.113108155s ago: executing program 1 (id=37): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 29.231503148s ago: executing program 1 (id=42): syz_emit_ethernet(0xe, &(0x7f0000000380)={@link_local, @remote, @void, {@generic={0x4305}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2e3233d17e05506edb5b9fd000000ebffff060200d45e3d9359c77e3e00f8ffffffb703000008000000b70400000000000085f6eda364d4c0d675098c9c0000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x5b, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 29.230364058s ago: executing program 32 (id=42): syz_emit_ethernet(0xe, &(0x7f0000000380)={@link_local, @remote, @void, {@generic={0x4305}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2e3233d17e05506edb5b9fd000000ebffff060200d45e3d9359c77e3e00f8ffffffb703000008000000b70400000000000085f6eda364d4c0d675098c9c0000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x5b, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.514719645s ago: executing program 3 (id=520): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000200)={0x19980330}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e26cff13274e729c516bc3933538afa8af9", 0x89}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x4, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000940)='sys_enter\x00', r3}, 0x18) syncfs(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x8, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x1, @perf_config_ext={0xf60, 0x40ffffffff}, 0x3008, 0x5, 0x10, 0x5, 0x10000000, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r4, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x8040}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000b0000000000000000000000000000000000000003f0b571be4b285837898cc65dba", @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000980)={&(0x7f0000000340)=@generic={0x2a, "395b5dafed7f269736628131b0f8a5f11506d512ae0d6b3acc527f82b1618ca6c9c271afa0f210ce74e99f5fd993ae09ff4a5919053baec4dc108a1c0b836137a82c240b07a9d2cb3fb5a7b8850799c24c777b483c19b4b71a3a4977496bad6d4fc34cd82f074c7b6dd106201ac7abb0540922975c836e0f3362ad14fb43"}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000003c0)="d62357bb1a6889c16c6ad8bbd5a26f9ff5eb125bbc7dcddb28e4333744f16aaee84f2e01", 0x24}, {&(0x7f0000000400)="87ff26bc1c31c904be860c4bde5adcd94028efba9d88fa9e7c6ab21bff49c206bb41cf407b1c72c25c9be417d6057536ab4a832af872eb62f62a886a8054a0ef9a170da8fb78381458126019f06688d434d699b67ed1f3f2431c966f5ccb9cdb03805a716b7fb2a063f3dda6a5", 0x6d}, {&(0x7f0000000480)="ac2ea01eebc5e44b530af850ee8d8141946e76951fc0610b31271c0bc63e5ed4382a58f68e4f32c99c9f2e9f3381e9dfee980fbb441e0615c91d64012b7fafdbb11995316e962dfd98fea8a54872fab1f83e32b78c38ac5fb079efae42ed46bc5a7f2273f67dc6379dbf9a07b6a04cf694bc3d6c2f2895cc4c916462eabfd0bf1adcd2a4f3fc8293c6e98019b431d9b8abe8cad5e5fbb58a37da532dcc6ab43afd45cff72d03e43bf7e9ec7b29079901b5d3e9eb29c8484bc96618a52ab58a22e5399eb223e0ab7b4b6c7bac2b32190c29f9151e897ff3bda733e4aeb009b242bd5f", 0xe2}, {&(0x7f0000000580)="465f5113f216f37a59b29a24945eb13329e02437ee069d3ed1381005e5448489ca0137720dd45797c0ab2d96c4c8c30daebf3a5eedb73a9e307c12f3973d96862528ffecd6fdc5ab13fd1cab1d4884f0bd427b1370f493d78c9502157abf302b7d7a64c5b79c8b9962e1300c61113b23849d0210470c13e0", 0x78}, {&(0x7f0000000600)="33aaa0be5e55fa1d0f506c007cb7d7e51c3312d17cf6c71f50a3fa49cc92b1d713a0409fa3d854bad8543b372e2a757877a0e36b674074fedc020235d1cf6c2330f554784335be016266e19fa9393bbb5a170d7aa7820d06d2536c5a8a5d6a4716b016f19abe586d21ecbed4bf923e4c8f50125a88c6504b70", 0x79}, {0x0}, {&(0x7f0000000780)="956f7b5214248deff6963a7d8b03f76dbaaac66d5b22fbd753ff04531c4619308ba5fe864fa9949051592961f405570a5a1634f15033084161abddffe312481805217bf8252e4f813e737f11db49b8317c4107c39a67fde758e8c6ac0078c5827991c3a79034ba7123bd2df18749a14d78d8ca4d0351dd761920508d39774029b6b8e9499408404180de76c21bb7806e0f4d74293f6948decd0cc551f607f13608e8749e471e2296846d7ec8f476f5b21591eb2cfaf5026fdfdc5227708dabc0432edec443362b1d7449f02540c6e4a8bf4d0142f007463cf7372d58f81a5e632ad3d3b3111aba5fb8881b2f538602", 0xef}, {0x0}], 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x248}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") semop(0x0, &(0x7f0000000180), 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) 3.349756608s ago: executing program 3 (id=521): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) 3.349038968s ago: executing program 3 (id=522): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) accept$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x9a, &(0x7f0000000600)={0x800000, 0x1, 0x84}) 3.037453133s ago: executing program 3 (id=526): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) 3.011491863s ago: executing program 3 (id=527): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{}, 0x0, 0x0}, 0x20) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x1, 0x6, 0x100, 0x5, 0x0, 0x3, 0x8008}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r5) 2.961556784s ago: executing program 3 (id=528): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) (async) fcntl$notify(r3, 0x402, 0x80000010) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x5, 0x3ff, &(0x7f00000005c0)="23f5e301b8d4b6b40bda0b57d291a9e274bce59fa347feeb64a2d6dd1a04f9ee6d44322a71019908a6155937fad1b8a57ad4b193644226d553c3b26c95ff7def2608a3af164459c498669ffeb8deae375429ccca5666e311d31d96b89ebd3483c535d1300d91c21c1935261b7c30eca97bba9f50f2e226a8552838192e7c5562cf716731d7180ded3927a9562749b6a21cfb39959d183e5de0051ae8eef8d98c8413bd8ef97e889432ef91890ed56a94c12e7b5a2a825d8ec34025e98de5159f4ac4ece4f8a1423387c1"}) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) fdatasync(r5) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x55) (async) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r5) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="04040000", @ANYRES16=r6, @ANYBLOB="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"], 0x404}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) (async) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="f2472a2622af81529835c58aeb3a2827bc2df3314c8658d92acd675023355a385a611c104328b5dedaf4bbba8e07b444c63fbf920ce12d5f03dea9bd6c74fa717c340d5bdc1f91e16a7c02dba42a81248e854406", @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x8, 0x5, 0x9, 0x6}]}) (async) socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)}}, {{&(0x7f00000006c0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="f5752aebe5ac40d64f383308eee30dbf9f518aed4dd7ff19c6ddd6c0dae63745a3391f587be3f0a281c866becea212d3d47b72ef9d4b26b5d5423f0315d9de05e62ce3bce85a7d2b8447bbf32352bf95ec341b4b15d5e9962ac2b5b61f39845d02ebd093af236f9a8acaf362a4ccc98a6f3b784e7087e9f8205e77174c382625c42b0ccfa4aefeb88470639039fe593183051c38b630914ae86ddd45022562dfdd1e63b5e94ace2b71c3f135", @ANYRES16=r5, @ANYRESDEC=r4, @ANYRES16=r7], 0x20}}], 0x2, 0x20004800) openat$sndseq(0xffffffffffffff9c, 0x0, 0x218000) 2.441962611s ago: executing program 5 (id=549): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "68601f0d3e655998e589ac7b29b8ddd236da97b33ef8527af339dbfbabaedadfddab0f4eaed006ba42ae8f121395f4b0d144fac86fe3bd1647d2a7507753b6c7", 0x33}, 0x48, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000120000000006"], 0x28}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x3f) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00&\x00'], 0x24}], 0x1, 0x0, 0x0, 0x400c040}, 0x0) 2.369920623s ago: executing program 5 (id=550): r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07447900000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x2000000005}, 0x18) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 1.92839654s ago: executing program 2 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usbip_server_init(0x5) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 1.497594296s ago: executing program 5 (id=572): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) open(0x0, 0x40c5, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mlockall(0x7) syz_open_procfs(0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @fwd={0x6}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000380)=""/101, 0x6f, 0x65, 0x1, 0x2}, 0x28) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40400b0) close(r0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1.143809261s ago: executing program 2 (id=576): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x4c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "07000000373669caaa2f196fee4f3a4765a8f762b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.051637753s ago: executing program 0 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigsuspend(&(0x7f0000000040), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000008020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000010800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 1.024284873s ago: executing program 2 (id=579): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003000000000000020000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000ff000066000200ffffffd0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 995.859044ms ago: executing program 2 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r8, 0x3, {0x0, 0x0, 0x2}, 0x1}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0) tkill(0xffffffffffffffff, 0x3c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 867.384286ms ago: executing program 5 (id=581): fsopen(0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="9e99c53773cc9fa4c38d37034a86", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="bbfb28bd7000fedbdf2567000000080001005d00000008000300", @ANYRES32=0x0, @ANYBLOB="0800c400ff0300000800c3"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 767.248108ms ago: executing program 5 (id=582): r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x2000000005}, 0x18) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 375.961644ms ago: executing program 4 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec00000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000003000000000000020000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000ff000066000200ffffffd0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 374.467783ms ago: executing program 4 (id=586): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r2) 360.085923ms ago: executing program 2 (id=587): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000200)={0x19980330}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x4, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000940)='sys_enter\x00', r3}, 0x18) syncfs(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x8, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x1, @perf_config_ext={0xf60, 0x40ffffffff}, 0x3008, 0x5, 0x10, 0x5, 0x10000000, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r5, &(0x7f0000000040), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000b0000000000000000000000000000000000000003f0b571be4b285837898cc65dba", @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000980)={&(0x7f0000000340)=@generic={0x2a, "395b5dafed7f269736628131b0f8a5f11506d512ae0d6b3acc527f82b1618ca6c9c271afa0f210ce74e99f5fd993ae09ff4a5919053baec4dc108a1c0b836137a82c240b07a9d2cb3fb5a7b8850799c24c777b483c19b4b71a3a4977496bad6d4fc34cd82f074c7b6dd106201ac7abb0540922975c836e0f3362ad14fb43"}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000003c0)="d62357bb1a6889c16c6ad8bbd5a26f9ff5eb125bbc7dcddb28e4333744f16aaee84f2e01", 0x24}, {&(0x7f0000000400)="87ff26bc1c31c904be860c4bde5adcd94028efba9d88fa9e7c6ab21bff49c206bb41cf407b1c72c25c9be417d6057536ab4a832af872eb62f62a886a8054a0ef9a170da8fb78381458126019f06688d434d699b67ed1f3f2431c966f5ccb9cdb03805a716b7fb2a063f3dda6a5", 0x6d}, {&(0x7f0000000580)="465f5113f216f37a59b29a24945eb13329e02437ee069d3ed1381005e5448489ca0137720dd45797c0ab2d96c4c8c30daebf3a5eedb73a9e307c12f3973d96862528ffecd6fdc5ab13fd1cab1d4884f0bd427b1370f493d78c9502157abf302b7d7a64c5b79c8b9962e1300c61113b23849d0210470c13e0", 0x78}, {&(0x7f0000000600)="33aaa0be5e55fa1d0f506c007cb7d7e51c3312d17cf6c71f50a3fa49cc92b1d713a0409fa3d854bad8543b372e2a757877a0e36b674074fedc020235d1cf6c2330f554784335be016266e19fa9393bbb5a170d7aa7820d06d2536c5a8a5d6a4716b016f19abe586d21ecbed4bf923e4c8f50125a88c6504b70", 0x79}, {&(0x7f0000000680)="68a8fff4350d2d4c627aeaa1a5f762e5cd04763942e41bb44c414a1ed71f3df54d5733f3c2144ffc392ec85d8fea0a05e601d8f352d425c0a1fc8c5dd25725aa5c0df656781aeec136f910b565e658378e3e20172a003f390ebe3981124cefee2b33e731f244d3c755e4b08598aadf515e736798836fec2bb0de1ede57a25d42c4b1458e5fad7ffd0008d0f10d0997faa0615659e8aa3fbf7fbf602b452b5b323edb8b100f7429a121aebf63be7e422ecab572a06f225b84bda9ed1dd83d5667b6dd0527910dd25202953e0dfd84a84aa8cb81646263ac", 0xd7}, {&(0x7f0000000780)="956f7b5214248deff6963a7d8b03f76dbaaac66d5b22fbd753ff04531c4619308ba5fe864fa9949051592961f405570a5a1634f15033084161abddffe312481805217bf8252e4f813e737f11db49b8317c4107c39a67fde758e8c6ac0078c5827991c3a79034ba7123bd2df18749a14d78d8ca4d0351dd761920508d39774029b6b8e9499408404180de76c21bb7806e0f4d74293f6948decd0cc551f607f13608e8749e471e2296846d7ec8f476f5b21591eb2cfaf5026fdfdc5227708dabc0432edec443362b1d7449f02540c6e4a8bf4d0142f007463cf7372d58f81a5e632ad3d3b3111aba5fb8881b2f538602", 0xef}, {0x0}], 0x7, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x248}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") socket$netlink(0x10, 0x3, 0x4) 357.216414ms ago: executing program 4 (id=588): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000200)={0x19980330}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e26cff13274e729c516bc3933538afa8af9", 0x89}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x4, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000940)='sys_enter\x00', r3}, 0x18) syncfs(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x8, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x1, @perf_config_ext={0xf60, 0x40ffffffff}, 0x3008, 0x5, 0x10, 0x5, 0x10000000, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r5, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000b0000000000000000000000000000000000000003f0b571be4b285837898cc65dba", @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000980)={&(0x7f0000000340)=@generic={0x2a, "395b5dafed7f269736628131b0f8a5f11506d512ae0d6b3acc527f82b1618ca6c9c271afa0f210ce74e99f5fd993ae09ff4a5919053baec4dc108a1c0b836137a82c240b07a9d2cb3fb5a7b8850799c24c777b483c19b4b71a3a4977496bad6d4fc34cd82f074c7b6dd106201ac7abb0540922975c836e0f3362ad14fb43"}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000003c0)="d62357bb1a6889c16c6ad8bbd5a26f9ff5eb125bbc7dcddb28e4333744f16aaee84f2e01", 0x24}, {&(0x7f0000000400)="87ff26bc1c31c904be860c4bde5adcd94028efba9d88fa9e7c6ab21bff49c206bb41cf407b1c72c25c9be417d6057536ab4a832af872eb62f62a886a8054a0ef9a170da8fb78381458126019f06688d434d699b67ed1f3f2431c966f5ccb9cdb03805a716b7fb2a063f3dda6a5", 0x6d}, {&(0x7f0000000480)="ac2ea01eebc5e44b530af850ee8d8141946e76951fc0610b31271c0bc63e5ed4382a58f68e4f32c99c9f2e9f3381e9dfee980fbb441e0615c91d64012b7fafdbb11995316e962dfd98fea8a54872fab1f83e32b78c38ac5fb079efae42ed46bc5a7f2273f67dc6379dbf9a07b6a04cf694bc3d6c2f2895cc4c916462eabfd0bf1adcd2a4f3fc8293c6e98019b431d9b8abe8cad5e5fbb58a37da532dcc6ab43afd45cff72d03e43bf7e9ec7b29079901b5d3e9eb29c8484bc96618a52ab58a22e5399eb223e0ab7b4b6c7bac2b32190c29f9151e897ff3bda733e4aeb009b242bd5f", 0xe2}, {&(0x7f0000000580)="465f5113f216f37a59b29a24945eb13329e02437ee069d3ed1381005e5448489ca0137720dd45797c0ab2d96c4c8c30daebf3a5eedb73a9e307c12f3973d96862528ffecd6fdc5ab13fd1cab1d4884f0bd427b1370f493d78c9502157abf302b7d7a64c5b79c8b9962e1300c61113b23849d0210470c13e0", 0x78}, {&(0x7f0000000600)="33aaa0be5e55fa1d0f506c007cb7d7e51c3312d17cf6c71f50a3fa49cc92b1d713a0409fa3d854bad8543b372e2a757877a0e36b674074fedc020235d1cf6c2330f554784335be016266e19fa9393bbb5a170d7aa7820d06d2536c5a8a5d6a4716b016f19abe586d21ecbed4bf923e4c8f50125a88c6504b70", 0x79}, {&(0x7f0000000680)="68a8fff4350d2d4c627aeaa1a5f762e5cd04763942e41bb44c414a1ed71f3df54d5733f3c2144ffc392ec85d8fea0a05e601d8f352d425c0a1fc8c5dd25725aa5c0df656781aeec136f910b565e658378e3e20172a003f390ebe3981124cefee2b33e731f244d3c755e4b08598aadf515e736798836fec2bb0de1ede57a25d42c4b1458e5fad7ffd0008d0f10d0997faa0615659e8aa3fbf7fbf602b452b5b323edb8b100f7429a121aebf63be7e422ecab572a06f225b84bda9ed1dd83d5667b6dd0527910dd25202953e0dfd84a84aa8cb81646263ac", 0xd7}, {&(0x7f0000000780)="956f7b5214248deff6963a7d8b03f76dbaaac66d5b22fbd753ff04531c4619308ba5fe864fa9949051592961f405570a5a1634f15033084161abddffe312481805217bf8252e4f813e737f11db49b8317c4107c39a67fde758e8c6ac0078c5827991c3a79034ba7123bd2df18749a14d78d8ca4d0351dd761920508d39774029b6b8e9499408404180de76c21bb7806e0f4d74293f6948decd0cc551f607f13608e8749e471e2296846d7ec8f476f5b21591eb2cfaf5026fdfdc5227708dabc0432edec443362b1d7449f02540c6e4a8bf4d0142f007463cf7372d58f81a5e632ad3d3b3111aba5fb8881b2f538602", 0xef}, {0x0}], 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="a8000000000000000d01000007000000d27ea32e1ffb8ad641a48996738210e7e811d75702f9c657f640e9a786bb76a81437fbd2744b349e4a305f4e841e2ad29af0311c3a2d6dea7b011f4eff0ee8c37db204708d22f83bf8075a03642116655632b78da10f266dbe09a049fea691a558ec0338ebb6c72d5f4ec1a2ca98d552cf1b1a916d6775e488f4ef6fb6b9234b8990ef81dd274c1e88fac9b0690c8cc3a150a1745ad8310098000000000000000101000081000000cfed84d9c6f64d132817dd7695ba9c8126be5f227716169083f0866ffebcf09619fd176632c2b523b7cbc3c3ee20ce2b10e11852e6140244a31a6a07cddb607d2dad5b88484e119022b4f74c4654d6797ee34b2bfad39edb2f99750c94aa08191c741963983d218e14b2ae4c573f62b35d9f43b9b7c8c9ee2ae3eb5bdb35eb62b4cd000000000000880000000000000011010000020000005ff2a93f3c13f42aab6165e8dfbd946c9efcd95a79fa073a333c7108118407f65c61c5d12707128f7604ec7e50b67ab202915027b9fc80eb79952f964b0a42d570699b222e565f00b7529f14a64b8ae5d795c02260cd649ea33c810e4dd2f7fe9aaaa9e095af674ddb81cbe977bf61386940000000008000000000000000060000000200000089d22d0f534be23c3339e8c918574ad32481357d0c2e00000000ecc5641e89437d91bdbf73184cc6ac7e0677b5754225b726bc28de4bfe1aeae24cf3e25f8a6f23a1549b9925aa210a4cf38eb7ed3c2105028280a212ee297ac739d829ce60d4a3eda5e20a1fe4b6865f21a7f4d1c4a14a7bda501b661bf5cc985c488aa13dcb189fc9db05f3f02291e9d11a"], 0x248}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") semop(0x0, &(0x7f0000000180), 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) 204.868186ms ago: executing program 4 (id=589): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{}, 0x0, 0x0}, 0x20) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x1, 0x6, 0x100, 0x5, 0x0, 0x3, 0x8008}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r5) 203.131386ms ago: executing program 4 (id=590): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="8b3329bd70000000000005000000080003"], 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000e96e48f327dd20103c00fd0000000000b61acecce6e485285823e32f75da57306db201e43672fb984d7bab1132fe3c60f737d76e5bab192df6631540e1eacf40048193"], 0x0, 0xb, 0xfea, &(0x7f0000001e00)=""/4074}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) getpid() syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getflags(r9, 0x40a) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) 156.606747ms ago: executing program 0 (id=591): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x8000000000000}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000000000000000000181a0000e8b3b88ef529eb6ee649c127edec900d53fcf2974ebd5e7f5954108628c2b19289f2824e82e8ea0cb815f4853877d4dc8da86ac4d0b4c20e2f7edc60fea5ea6eeab02f2eb84c1b4bb208b5f5c1404be54ba0238e6b3b44ff161c8d4233cbe50e0e0d648ff8bda1c9c20f5da1ee0d48364e0a058ef85bdc1bd82959362c9b589ae281a3da61b48dfe1bba2f0e99df5845cbda6a5d32f9ced28687a25fb7b9cb19cf236ab96b1893c0", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000f8000000f8000000040000001000000000000009010000000300000008000006040000000100cf0007000000070000000500000007000000f9ffffff030000000500000006000000080000000e000000e00f0000050000007f0000000d000000480000001000000000000002000000000a0000000000000e02000000020000000200000005000013080000000d0000000b000000000400000300000081000000f103000007000000ff7f14ea65c7f0aef6af38c5231024d9ff0000090000000100004008000000010000000600000008000000030000000000000002000085070000001000000005000000060000000b00000005000000fdffffff0700000000000008050000000f000000000000090000000000300000"], &(0x7f0000000040)=""/76, 0x114, 0x4c, 0x0, 0xff}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002240)={0xffffffffffffffff, 0x0, 0x1024, 0x1007, &(0x7f0000000240)="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", &(0x7f00000022c0)=""/4103, 0x80000000, 0x0, 0x1c, 0x2, &(0x7f0000000080)="1da6a8c52c6f6ada3360b5a3d3e382aeb49cc0ba8bfe12ea5a5ccd47", &(0x7f0000000180)="46fc", 0x4, 0x0, 0xc}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x2) lstat(&(0x7f0000000200)='./file0\x00', 0x0) unshare(0x22020600) 109.097418ms ago: executing program 0 (id=592): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9", 0x15}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) 96.786748ms ago: executing program 4 (id=593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x12, 0x1, 0x0, 0x1, @connlimit={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_FLAGS]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x0, 0xf, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open(&(0x7f0000000300)='.\x00', 0x0, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@grpquota}, {@data_err_ignore}, {@grpjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@nodelalloc}, {@sysvgroups}, {@norecovery}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4453}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 81.629908ms ago: executing program 0 (id=594): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) 50.068449ms ago: executing program 2 (id=595): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{}, 0x0, 0x0}, 0x20) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x1, 0x6, 0x100, 0x5, 0x0, 0x3, 0x8008}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r5) 29.336599ms ago: executing program 0 (id=596): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)="b8", 0x1}], 0x1}}], 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0) 8.405449ms ago: executing program 0 (id=597): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x8000000000000}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000000000000000000181a0000e8b3b88ef529eb6ee649c127edec900d53fcf2974ebd5e7f5954108628c2b19289f2824e82e8ea0cb815f4853877d4dc8da86ac4d0b4c20e2f7edc60fea5ea6eeab02f2eb84c1b4bb208b5f5c1404be54ba0238e6b3b44ff161c8d4233cbe50e0e0d648ff8bda1c9c20f5da1ee0d48364e0a058ef85bdc1bd82959362c9b589ae281a3da61b48dfe1bba2f0e99df5845cbda6a5d32f9ced28687a25fb7b9cb19cf236ab96b1893c0", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000f8000000f8000000040000001000000000000009010000000300000008000006040000000100cf0007000000070000000500000007000000f9ffffff030000000500000006000000080000000e000000e00f0000050000007f0000000d000000480000001000000000000002000000000a0000000000000e02000000020000000200000005000013080000000d0000000b000000000400000300000081000000f103000007000000ff7f14ea65c7f0aef6af38c5231024d9ff0000090000000100004008000000010000000600000008000000030000000000000002000085070000001000000005000000060000000b00000005000000fdffffff0700000000000008050000000f000000000000090000000000300000"], &(0x7f0000000040)=""/76, 0x114, 0x4c, 0x0, 0xff}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002240)={0xffffffffffffffff, 0x0, 0x1026, 0x1007, &(0x7f0000000240)="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", &(0x7f00000022c0)=""/4103, 0x80000000, 0x0, 0x1c, 0x2, &(0x7f0000000080)="1da6a8c52c6f6ada3360b5a3d3e382aeb49cc0ba8bfe12ea5a5ccd47", &(0x7f0000000180)="46fc", 0x4, 0x0, 0xc}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x2) lstat(&(0x7f0000000200)='./file0\x00', 0x0) unshare(0x22020600) 0s ago: executing program 5 (id=598): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r2) kernel console output (not intermixed with test programs): o small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.300479][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.313051][ T3308] team0: Port device team_slave_0 added [ 29.321717][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.346820][ T3308] team0: Port device team_slave_1 added [ 29.386826][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.393816][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.419896][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.437853][ T3314] hsr_slave_0: entered promiscuous mode [ 29.444603][ T3314] hsr_slave_1: entered promiscuous mode [ 29.451364][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.459009][ T3314] Cannot create hsr debugfs directory [ 29.473587][ T3303] hsr_slave_0: entered promiscuous mode [ 29.479795][ T3303] hsr_slave_1: entered promiscuous mode [ 29.485697][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.493286][ T3303] Cannot create hsr debugfs directory [ 29.499245][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.506257][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.532356][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.543624][ T3315] team0: Port device team_slave_0 added [ 29.550243][ T3315] team0: Port device team_slave_1 added [ 29.578071][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.585057][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.611342][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.625257][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.632286][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.658373][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.730481][ T3308] hsr_slave_0: entered promiscuous mode [ 29.736745][ T3308] hsr_slave_1: entered promiscuous mode [ 29.742821][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.750550][ T3308] Cannot create hsr debugfs directory [ 29.770731][ T3315] hsr_slave_0: entered promiscuous mode [ 29.776840][ T3315] hsr_slave_1: entered promiscuous mode [ 29.782764][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.790524][ T3315] Cannot create hsr debugfs directory [ 29.881593][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.903753][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.923515][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.942388][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.960616][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.971852][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.982536][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.994798][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.017964][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.026863][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.042213][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.050907][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.092681][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.102305][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.116779][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.134596][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.155231][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.166520][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.175874][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.184815][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.194351][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.206855][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.224569][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.238520][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.255235][ T1387] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.262419][ T1387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.271446][ T1387] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.278500][ T1387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.287192][ T1387] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.294244][ T1387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.315245][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.322904][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.347036][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.381761][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.399795][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.420126][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.437764][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.446735][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.453945][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.462745][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.469810][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.491371][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.501036][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.520355][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.527457][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.536402][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.543492][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.558046][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.568961][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.576196][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.584689][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.591845][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.604271][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.649382][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.662223][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.738316][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.766470][ T3304] veth0_vlan: entered promiscuous mode [ 30.804303][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.817665][ T3304] veth1_vlan: entered promiscuous mode [ 30.846870][ T3314] veth0_vlan: entered promiscuous mode [ 30.857112][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.890939][ T3314] veth1_vlan: entered promiscuous mode [ 30.909227][ T3304] veth0_macvtap: entered promiscuous mode [ 30.918734][ T3304] veth1_macvtap: entered promiscuous mode [ 30.950239][ T3308] veth0_vlan: entered promiscuous mode [ 30.960107][ T3314] veth0_macvtap: entered promiscuous mode [ 30.967829][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.981038][ T3308] veth1_vlan: entered promiscuous mode [ 30.992572][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.003804][ T3314] veth1_macvtap: entered promiscuous mode [ 31.011660][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.020413][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.029346][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.038253][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.065000][ T3303] veth0_vlan: entered promiscuous mode [ 31.074672][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.092746][ T3303] veth1_vlan: entered promiscuous mode [ 31.102021][ T3315] veth0_vlan: entered promiscuous mode [ 31.110237][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.123774][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.132602][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.141499][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.150275][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.160624][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.160636][ T29] audit: type=1400 audit(1751817985.066:81): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.YIPw44/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.162864][ T3315] veth1_vlan: entered promiscuous mode [ 31.166847][ T29] audit: type=1400 audit(1751817985.066:82): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.207725][ T3315] veth0_macvtap: entered promiscuous mode [ 31.218983][ T29] audit: type=1400 audit(1751817985.066:83): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.YIPw44/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.227988][ T3308] veth0_macvtap: entered promiscuous mode [ 31.250074][ T29] audit: type=1400 audit(1751817985.066:84): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.259232][ T3308] veth1_macvtap: entered promiscuous mode [ 31.277920][ T29] audit: type=1400 audit(1751817985.066:85): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.YIPw44/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.291813][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.310379][ T29] audit: type=1400 audit(1751817985.066:86): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.YIPw44/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.346133][ T29] audit: type=1400 audit(1751817985.066:87): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.365726][ T29] audit: type=1400 audit(1751817985.086:88): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.388465][ T29] audit: type=1400 audit(1751817985.086:89): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.414836][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.437429][ T3315] veth1_macvtap: entered promiscuous mode [ 31.445734][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.459737][ T29] audit: type=1400 audit(1751817985.386:90): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.488411][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.497264][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.506006][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.514730][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.545450][ T3303] veth0_macvtap: entered promiscuous mode [ 31.575939][ T3303] veth1_macvtap: entered promiscuous mode [ 31.581383][ T3475] 9pnet_virtio: no channels available for device 127.0.0.1 [ 31.592774][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.607489][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.622851][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.653567][ T3315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.653599][ T3315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.653662][ T3315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.653691][ T3315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.696196][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.697385][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.697443][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.697492][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.697517][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.767206][ T3487] loop1: detected capacity change from 0 to 512 [ 31.797912][ T3487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.827480][ T3480] loop2: detected capacity change from 0 to 1024 [ 31.837837][ T3495] FAULT_INJECTION: forcing a failure. [ 31.837837][ T3495] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.848177][ T3480] ======================================================= [ 31.848177][ T3480] WARNING: The mand mount option has been deprecated and [ 31.848177][ T3480] and is ignored by this kernel. Remove the mand [ 31.848177][ T3480] option from the mount to silence this warning. [ 31.848177][ T3480] ======================================================= [ 31.851200][ T3495] CPU: 0 UID: 0 PID: 3495 Comm: syz.0.10 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 31.851255][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.851270][ T3495] Call Trace: [ 31.851276][ T3495] [ 31.851284][ T3495] __dump_stack+0x1d/0x30 [ 31.851308][ T3495] dump_stack_lvl+0xe8/0x140 [ 31.851338][ T3495] dump_stack+0x15/0x1b [ 31.851354][ T3495] should_fail_ex+0x265/0x280 [ 31.851383][ T3495] should_fail+0xb/0x20 [ 31.851409][ T3495] should_fail_usercopy+0x1a/0x20 [ 31.851440][ T3495] _copy_from_user+0x1c/0xb0 [ 31.851467][ T3495] __sys_bpf+0x178/0x790 [ 31.851560][ T3495] __x64_sys_bpf+0x41/0x50 [ 31.851586][ T3495] x64_sys_call+0x2478/0x2fb0 [ 31.851606][ T3495] do_syscall_64+0xd2/0x200 [ 31.851624][ T3495] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 31.851652][ T3495] ? clear_bhb_loop+0x40/0x90 [ 31.851673][ T3495] ? clear_bhb_loop+0x40/0x90 [ 31.851693][ T3495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.851713][ T3495] RIP: 0033:0x7fcb424be929 [ 31.851781][ T3495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.851796][ T3495] RSP: 002b:00007fcb40b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 31.851818][ T3495] RAX: ffffffffffffffda RBX: 00007fcb426e5fa0 RCX: 00007fcb424be929 [ 31.851830][ T3495] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 31.851842][ T3495] RBP: 00007fcb40b27090 R08: 0000000000000000 R09: 0000000000000000 [ 31.851853][ T3495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.851928][ T3495] R13: 0000000000000000 R14: 00007fcb426e5fa0 R15: 00007fffbfa7ddf8 [ 31.851945][ T3495] [ 31.913689][ T3487] EXT4-fs (loop1): 1 orphan inode deleted [ 31.992917][ T3480] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 32.012594][ T3487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.019867][ T363] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 32.051034][ T3487] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.084758][ T3504] loop0: detected capacity change from 0 to 512 [ 32.147089][ T3504] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.160806][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.188466][ T3504] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.226108][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 32.236551][ T3504] EXT4-fs (loop0): 1 truncate cleaned up [ 32.243425][ T3504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.268753][ T3516] 9pnet_fd: Insufficient options for proto=fd [ 32.384388][ T3523] smc: net device bond0 applied user defined pnetid SYZ2 [ 32.394176][ T3525] loop4: detected capacity change from 0 to 512 [ 32.411752][ T3525] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.448547][ T3525] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.509357][ T3539] FAULT_INJECTION: forcing a failure. [ 32.509357][ T3539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.510346][ T3525] EXT4-fs (loop4): 1 truncate cleaned up [ 32.522602][ T3539] CPU: 0 UID: 0 PID: 3539 Comm: syz.1.23 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 32.522629][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.522640][ T3539] Call Trace: [ 32.522646][ T3539] [ 32.522653][ T3539] __dump_stack+0x1d/0x30 [ 32.522736][ T3539] dump_stack_lvl+0xe8/0x140 [ 32.522755][ T3539] dump_stack+0x15/0x1b [ 32.522772][ T3539] should_fail_ex+0x265/0x280 [ 32.522801][ T3539] should_fail+0xb/0x20 [ 32.522838][ T3539] should_fail_usercopy+0x1a/0x20 [ 32.522927][ T3539] strncpy_from_user+0x25/0x230 [ 32.522950][ T3539] ? kmem_cache_alloc_noprof+0x186/0x310 [ 32.522975][ T3539] ? getname_flags+0x80/0x3b0 [ 32.522998][ T3539] getname_flags+0xae/0x3b0 [ 32.523091][ T3539] user_path_at+0x28/0x130 [ 32.523123][ T3539] __x64_sys_umount+0x85/0xe0 [ 32.523155][ T3539] x64_sys_call+0x2915/0x2fb0 [ 32.523184][ T3539] do_syscall_64+0xd2/0x200 [ 32.523202][ T3539] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.523227][ T3539] ? clear_bhb_loop+0x40/0x90 [ 32.523247][ T3539] ? clear_bhb_loop+0x40/0x90 [ 32.523302][ T3539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.523417][ T3539] RIP: 0033:0x7f7d1963e929 [ 32.523432][ T3539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.523448][ T3539] RSP: 002b:00007f7d17ca7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.523466][ T3539] RAX: ffffffffffffffda RBX: 00007f7d19865fa0 RCX: 00007f7d1963e929 [ 32.523478][ T3539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 32.523490][ T3539] RBP: 00007f7d17ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 32.523546][ T3539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.523557][ T3539] R13: 0000000000000000 R14: 00007f7d19865fa0 R15: 00007ffe48a1f4b8 [ 32.523575][ T3539] [ 32.743268][ T3525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.770896][ T3525] FAULT_INJECTION: forcing a failure. [ 32.770896][ T3525] name failslab, interval 1, probability 0, space 0, times 1 [ 32.784253][ T3525] CPU: 1 UID: 0 PID: 3525 Comm: syz.4.17 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 32.784278][ T3525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.784288][ T3525] Call Trace: [ 32.784293][ T3525] [ 32.784299][ T3525] __dump_stack+0x1d/0x30 [ 32.784325][ T3525] dump_stack_lvl+0xe8/0x140 [ 32.784345][ T3525] dump_stack+0x15/0x1b [ 32.784362][ T3525] should_fail_ex+0x265/0x280 [ 32.784392][ T3525] should_failslab+0x8c/0xb0 [ 32.784422][ T3525] kmem_cache_alloc_noprof+0x50/0x310 [ 32.784483][ T3525] ? getname_flags+0x80/0x3b0 [ 32.784502][ T3525] getname_flags+0x80/0x3b0 [ 32.784524][ T3525] user_path_at+0x28/0x130 [ 32.784552][ T3525] __se_sys_name_to_handle_at+0xff/0x5d0 [ 32.784655][ T3525] ? ksys_write+0x192/0x1a0 [ 32.784688][ T3525] __x64_sys_name_to_handle_at+0x67/0x80 [ 32.784708][ T3525] x64_sys_call+0x279f/0x2fb0 [ 32.784792][ T3525] do_syscall_64+0xd2/0x200 [ 32.784808][ T3525] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.784847][ T3525] ? clear_bhb_loop+0x40/0x90 [ 32.784910][ T3525] ? clear_bhb_loop+0x40/0x90 [ 32.784927][ T3525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.784944][ T3525] RIP: 0033:0x7f1ecde1e929 [ 32.784984][ T3525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.785001][ T3525] RSP: 002b:00007f1ecc487038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 32.785021][ T3525] RAX: ffffffffffffffda RBX: 00007f1ece045fa0 RCX: 00007f1ecde1e929 [ 32.785032][ T3525] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 32.785097][ T3525] RBP: 00007f1ecc487090 R08: 0000000000000000 R09: 0000000000000000 [ 32.785107][ T3525] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 32.785118][ T3525] R13: 0000000000000000 R14: 00007f1ece045fa0 R15: 00007ffe1b231d68 [ 32.785133][ T3525] [ 33.013302][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.032697][ T3551] SELinux: syz.4.27 (3551) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 33.083082][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.104215][ C1] hrtimer: interrupt took 38307 ns [ 33.225549][ T3572] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.233442][ T3572] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 33.263650][ T3576] mmap: syz.2.30 (3576) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.287958][ T3553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 33.638370][ T3633] loop1: detected capacity change from 0 to 128 [ 33.650189][ T3633] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 34.069570][ T3572] syz.0.34 (3572) used greatest stack depth: 10712 bytes left [ 34.154307][ T3717] FAULT_INJECTION: forcing a failure. [ 34.154307][ T3717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.167979][ T3717] CPU: 0 UID: 0 PID: 3717 Comm: syz.0.39 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 34.168005][ T3717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.168017][ T3717] Call Trace: [ 34.168023][ T3717] [ 34.168030][ T3717] __dump_stack+0x1d/0x30 [ 34.168053][ T3717] dump_stack_lvl+0xe8/0x140 [ 34.168077][ T3717] dump_stack+0x15/0x1b [ 34.168104][ T3717] should_fail_ex+0x265/0x280 [ 34.168149][ T3717] should_fail+0xb/0x20 [ 34.168175][ T3717] should_fail_usercopy+0x1a/0x20 [ 34.168260][ T3717] strncpy_from_user+0x25/0x230 [ 34.168284][ T3717] ? kmem_cache_alloc_noprof+0x186/0x310 [ 34.168320][ T3717] ? getname_flags+0x80/0x3b0 [ 34.168402][ T3717] getname_flags+0xae/0x3b0 [ 34.168426][ T3717] do_sys_openat2+0x60/0x110 [ 34.168453][ T3717] __x64_sys_creat+0x65/0x90 [ 34.168482][ T3717] x64_sys_call+0x114d/0x2fb0 [ 34.168560][ T3717] do_syscall_64+0xd2/0x200 [ 34.168580][ T3717] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 34.168666][ T3717] ? clear_bhb_loop+0x40/0x90 [ 34.168689][ T3717] ? clear_bhb_loop+0x40/0x90 [ 34.168710][ T3717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.168728][ T3717] RIP: 0033:0x7fcb424be929 [ 34.168810][ T3717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.168826][ T3717] RSP: 002b:00007fcb40b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 34.168844][ T3717] RAX: ffffffffffffffda RBX: 00007fcb426e5fa0 RCX: 00007fcb424be929 [ 34.168856][ T3717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 34.168869][ T3717] RBP: 00007fcb40b27090 R08: 0000000000000000 R09: 0000000000000000 [ 34.168881][ T3717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.168893][ T3717] R13: 0000000000000000 R14: 00007fcb426e5fa0 R15: 00007fffbfa7ddf8 [ 34.168938][ T3717] [ 34.457518][ T3737] random: crng reseeded on system resumption [ 34.511872][ T125] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 34.551640][ T125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.587851][ T3749] loop2: detected capacity change from 0 to 512 [ 34.590337][ T3750] netlink: 'syz.0.46': attribute type 3 has an invalid length. [ 34.614377][ T3749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.628858][ T3749] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.641564][ T125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.684718][ T125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.725377][ T3760] tipc: Started in network mode [ 34.730567][ T3760] tipc: Node identity 4, cluster identity 4711 [ 34.736928][ T3760] tipc: Node number set to 4 [ 34.752961][ T125] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.769430][ T3762] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm syz.2.45: corrupted inode contents [ 34.789226][ T3762] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #19: comm syz.2.45: mark_inode_dirty error [ 34.813267][ T3762] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm syz.2.45: corrupted inode contents [ 34.832563][ T3762] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.45: mark_inode_dirty error [ 34.858790][ T3762] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.45: mark inode dirty (error -117) [ 34.880113][ T3754] chnl_net:caif_netlink_parms(): no params data found [ 34.888289][ T3762] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 34.926763][ T3775] loop0: detected capacity change from 0 to 512 [ 34.939365][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.971622][ T3783] siw: device registration error -23 [ 34.990830][ T3775] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.035265][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.042613][ T3754] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.054228][ T3785] loop3: detected capacity change from 0 to 8192 [ 35.054337][ T3792] SELinux: syz.2.51 (3792) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 35.075570][ T3775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 35.078049][ T3754] bridge_slave_0: entered allmulticast mode [ 35.093577][ T3754] bridge_slave_0: entered promiscuous mode [ 35.099726][ T3775] System zones: 1-12 [ 35.099760][ T3294] loop3: p1 p2[DM] p3 p4 [ 35.109106][ T125] bridge_slave_1: left allmulticast mode [ 35.114815][ T125] bridge_slave_1: left promiscuous mode [ 35.120720][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.128283][ T3294] loop3: p1 size 196608 extends beyond EOD, truncated [ 35.136150][ T3294] loop3: p2 start 4292936063 is beyond EOD, truncated [ 35.142991][ T3294] loop3: p3 size 201326592 extends beyond EOD, truncated [ 35.144147][ T3775] EXT4-fs (loop0): 1 orphan inode deleted [ 35.156315][ T3775] EXT4-fs (loop0): 1 truncate cleaned up [ 35.162165][ T125] bridge_slave_0: left allmulticast mode [ 35.168438][ T125] bridge_slave_0: left promiscuous mode [ 35.174227][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.181927][ T3775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.194509][ T3294] loop3: p4 start 786432 is beyond EOD, truncated [ 35.220713][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.232998][ T3785] loop3: p1 p2[DM] p3 p4 [ 35.237462][ T3785] loop3: p1 size 196608 extends beyond EOD, truncated [ 35.252818][ T3785] loop3: p2 start 4292936063 is beyond EOD, truncated [ 35.259884][ T3785] loop3: p3 size 201326592 extends beyond EOD, truncated [ 35.265737][ T3803] loop0: detected capacity change from 0 to 512 [ 35.273777][ T3785] loop3: p4 start 786432 is beyond EOD, truncated [ 35.283298][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.296846][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.309306][ T125] bond0 (unregistering): Released all slaves [ 35.316393][ T3803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.331413][ T3803] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.342940][ T3801] loop2: detected capacity change from 0 to 164 [ 35.349450][ T3754] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.356632][ T3754] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.376984][ T3754] bridge_slave_1: entered allmulticast mode [ 35.388434][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.399402][ T3801] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 35.402544][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.422940][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.434143][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.438010][ T3754] bridge_slave_1: entered promiscuous mode [ 35.472160][ T125] hsr_slave_0: left promiscuous mode [ 35.487294][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.502337][ T125] hsr_slave_1: left promiscuous mode [ 35.516241][ T125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.524544][ T125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.532964][ T125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.540540][ T125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.554572][ T125] veth1_macvtap: left promiscuous mode [ 35.560972][ T125] veth0_macvtap: left promiscuous mode [ 35.566654][ T125] veth1_vlan: left promiscuous mode [ 35.572304][ T125] veth0_vlan: left promiscuous mode [ 35.580097][ T3826] capability: warning: `syz.0.59' uses 32-bit capabilities (legacy support in use) [ 35.688897][ T125] team0 (unregistering): Port device team_slave_1 removed [ 35.698683][ T125] team0 (unregistering): Port device team_slave_0 removed [ 35.710544][ T3832] loop0: detected capacity change from 0 to 2048 [ 35.727376][ T3832] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.749107][ T3832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.773095][ T3754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.783711][ T3754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.824573][ T3754] team0: Port device team_slave_0 added [ 35.834745][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.840816][ T3754] team0: Port device team_slave_1 added [ 35.878067][ T3754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.885308][ T3754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.913523][ T3754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.926470][ T3754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.933659][ T3754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.961787][ T3754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.972159][ T3857] SELinux: syz.4.63 (3857) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 36.033997][ T3754] hsr_slave_0: entered promiscuous mode [ 36.051808][ T3754] hsr_slave_1: entered promiscuous mode [ 36.178829][ T29] kauditd_printk_skb: 707 callbacks suppressed [ 36.178846][ T29] audit: type=1400 audit(1751817990.096:797): avc: denied { connect } for pid=3868 comm="syz.4.64" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.201979][ T3896] loop0: detected capacity change from 0 to 4096 [ 36.205850][ T29] audit: type=1400 audit(1751817990.096:798): avc: denied { setopt } for pid=3868 comm="syz.4.64" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.234156][ T29] audit: type=1400 audit(1751817990.096:799): avc: denied { write } for pid=3868 comm="syz.4.64" path="socket:[5536]" dev="sockfs" ino=5536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.257604][ T29] audit: type=1400 audit(1751817990.096:800): avc: denied { create } for pid=3887 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.277464][ T29] audit: type=1400 audit(1751817990.096:801): avc: denied { setopt } for pid=3887 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.297452][ T3909] netlink: 60 bytes leftover after parsing attributes in process `syz.4.64'. [ 36.319493][ T29] audit: type=1400 audit(1751817990.246:802): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 36.356647][ T3896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.372022][ T3895] netlink: 60 bytes leftover after parsing attributes in process `syz.4.64'. [ 36.382361][ T3754] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.382593][ T3896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.408734][ T3754] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.439044][ T3754] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.455018][ T3754] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.461890][ T3896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.470461][ T3896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.515583][ T3754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.537899][ T3754] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.551341][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.558868][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.580159][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.587417][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.706695][ T3754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.942174][ T3754] veth0_vlan: entered promiscuous mode [ 36.967474][ T3754] veth1_vlan: entered promiscuous mode [ 36.995643][ T3754] veth0_macvtap: entered promiscuous mode [ 37.018136][ T4015] loop4: detected capacity change from 0 to 2048 [ 37.025783][ T4015] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.035141][ T3754] veth1_macvtap: entered promiscuous mode [ 37.047593][ T4015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.067027][ T3754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.090473][ T3754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.099628][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.100409][ T3754] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.118519][ T3754] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.127583][ T3754] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.136542][ T3754] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.191361][ T29] audit: type=1400 audit(1751817991.116:803): avc: denied { mounton } for pid=3754 comm="syz-executor" path="/root/syzkaller.lVnbIf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.231894][ T4044] FAULT_INJECTION: forcing a failure. [ 37.231894][ T4044] name failslab, interval 1, probability 0, space 0, times 0 [ 37.245188][ T4044] CPU: 1 UID: 0 PID: 4044 Comm: syz.4.69 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 37.245216][ T4044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.245225][ T4044] Call Trace: [ 37.245237][ T4044] [ 37.245244][ T4044] __dump_stack+0x1d/0x30 [ 37.245264][ T4044] dump_stack_lvl+0xe8/0x140 [ 37.245284][ T4044] dump_stack+0x15/0x1b [ 37.245302][ T4044] should_fail_ex+0x265/0x280 [ 37.245390][ T4044] should_failslab+0x8c/0xb0 [ 37.245413][ T4044] kmem_cache_alloc_node_noprof+0x57/0x320 [ 37.245469][ T4044] ? __alloc_skb+0x101/0x320 [ 37.245494][ T4044] __alloc_skb+0x101/0x320 [ 37.245523][ T4044] alloc_skb_with_frags+0x7d/0x470 [ 37.245554][ T4044] ? obj_cgroup_charge_account+0x122/0x1a0 [ 37.245652][ T4044] ? should_fail_ex+0x30/0x280 [ 37.245682][ T4044] sock_alloc_send_pskb+0x43a/0x4f0 [ 37.245707][ T4044] unix_dgram_sendmsg+0x394/0xfa0 [ 37.245739][ T4044] ? selinux_socket_sendmsg+0x175/0x1b0 [ 37.245846][ T4044] unix_seqpacket_sendmsg+0xd1/0x110 [ 37.245874][ T4044] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 37.245903][ T4044] __sock_sendmsg+0x145/0x180 [ 37.245927][ T4044] ____sys_sendmsg+0x31e/0x4e0 [ 37.245999][ T4044] ___sys_sendmsg+0x17b/0x1d0 [ 37.246083][ T4044] __x64_sys_sendmsg+0xd4/0x160 [ 37.246157][ T4044] x64_sys_call+0x2999/0x2fb0 [ 37.246179][ T4044] do_syscall_64+0xd2/0x200 [ 37.246284][ T4044] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.246311][ T4044] ? clear_bhb_loop+0x40/0x90 [ 37.246332][ T4044] ? clear_bhb_loop+0x40/0x90 [ 37.246355][ T4044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.246376][ T4044] RIP: 0033:0x7f1ecde1e929 [ 37.246460][ T4044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.246476][ T4044] RSP: 002b:00007f1ecc487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.246496][ T4044] RAX: ffffffffffffffda RBX: 00007f1ece045fa0 RCX: 00007f1ecde1e929 [ 37.246509][ T4044] RDX: 0000000000000884 RSI: 00002000000006c0 RDI: 0000000000000005 [ 37.246522][ T4044] RBP: 00007f1ecc487090 R08: 0000000000000000 R09: 0000000000000000 [ 37.246535][ T4044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.246548][ T4044] R13: 0000000000000000 R14: 00007f1ece045fa0 R15: 00007ffe1b231d68 [ 37.246566][ T4044] [ 37.573397][ T4065] loop4: detected capacity change from 0 to 512 [ 37.610344][ T4056] syz.5.44 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.684593][ T4065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.698455][ T4065] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.846211][ T4088] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.70: corrupted inode contents [ 37.861676][ T4103] SELinux: syz.5.73 (4103) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 37.880587][ T4088] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #19: comm syz.4.70: mark_inode_dirty error [ 37.893328][ T4088] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.70: corrupted inode contents [ 37.905988][ T4088] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.70: mark_inode_dirty error [ 37.920233][ T4088] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.70: mark inode dirty (error -117) [ 37.939661][ T4088] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 37.971099][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.113307][ T29] audit: type=1400 audit(1751817992.036:804): avc: denied { write } for pid=4127 comm="syz.4.76" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.116802][ T4129] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.76' sets config #0 [ 38.159606][ T4133] loop5: detected capacity change from 0 to 2048 [ 38.185369][ T2995] udevd[2995]: worker [3297] terminated by signal 33 (Unknown signal 33) [ 38.185562][ T4133] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.195940][ T2995] udevd[2995]: worker [3297] failed while handling '/devices/virtual/block/loop5' [ 38.234277][ T4133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.283651][ T29] audit: type=1400 audit(1751817992.216:805): avc: denied { create } for pid=4141 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.310638][ T29] audit: type=1400 audit(1751817992.236:806): avc: denied { ioctl } for pid=4141 comm="syz.2.80" path="socket:[4830]" dev="sockfs" ino=4830 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.364130][ T3754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.497658][ T4140] loop4: detected capacity change from 0 to 2048 [ 38.508733][ T4140] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.550983][ T4140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.598593][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.633548][ T4180] tipc: Started in network mode [ 38.638552][ T4180] tipc: Node identity 4, cluster identity 4711 [ 38.644938][ T4180] tipc: Node number set to 4 [ 38.695928][ T4185] bridge_slave_0: left allmulticast mode [ 38.701920][ T4185] bridge_slave_0: left promiscuous mode [ 38.707608][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.718864][ T4185] bridge_slave_1: left allmulticast mode [ 38.724768][ T4185] bridge_slave_1: left promiscuous mode [ 38.730783][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.742841][ T4185] bond0: (slave bond_slave_0): Releasing backup interface [ 38.753804][ T4185] bond0: (slave bond_slave_1): Releasing backup interface [ 38.767485][ T4185] team0: Failed to send options change via netlink (err -105) [ 38.775626][ T4185] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 38.786846][ T4185] team0: Port device team_slave_0 removed [ 38.796278][ T4185] team0: Failed to send options change via netlink (err -105) [ 38.804951][ T4185] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 38.815074][ T4185] team0: Port device team_slave_1 removed [ 38.821941][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.829404][ T4185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.838566][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.846099][ T4185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.867467][ T4190] veth1_macvtap: left promiscuous mode [ 38.874964][ T4190] macsec0: entered allmulticast mode [ 38.937630][ T4220] siw: device registration error -23 [ 38.954264][ T4185] syz.3.84 (4185) used greatest stack depth: 10208 bytes left [ 38.998922][ T4229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 39.098441][ T4248] 9pnet_fd: Insufficient options for proto=fd [ 39.139019][ T4252] tipc: Started in network mode [ 39.144044][ T4252] tipc: Node identity 4, cluster identity 4711 [ 39.150341][ T4252] tipc: Node number set to 4 [ 39.215256][ T4259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.96'. [ 39.309317][ T4279] loop0: detected capacity change from 0 to 1024 [ 39.323255][ T4279] ext4: Unknown parameter 'subj_type' [ 39.368182][ T4291] 9pnet_fd: Insufficient options for proto=fd [ 39.583824][ T4319] loop0: detected capacity change from 0 to 512 [ 39.608372][ T4319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.623363][ T4319] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.647734][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.669941][ T4327] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.105' sets config #0 [ 39.870716][ T4336] loop4: detected capacity change from 0 to 2048 [ 39.881206][ T4336] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.912774][ T4336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.954728][ T4342] FAULT_INJECTION: forcing a failure. [ 39.954728][ T4342] name failslab, interval 1, probability 0, space 0, times 0 [ 39.967592][ T4342] CPU: 0 UID: 0 PID: 4342 Comm: syz.0.110 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 39.967686][ T4342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.967701][ T4342] Call Trace: [ 39.967708][ T4342] [ 39.967726][ T4342] __dump_stack+0x1d/0x30 [ 39.967779][ T4342] dump_stack_lvl+0xe8/0x140 [ 39.967794][ T4342] dump_stack+0x15/0x1b [ 39.967808][ T4342] should_fail_ex+0x265/0x280 [ 39.967838][ T4342] should_failslab+0x8c/0xb0 [ 39.967884][ T4342] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 39.967956][ T4342] ? scm_fp_dup+0x40/0x200 [ 39.967977][ T4342] kmemdup_noprof+0x2b/0x70 [ 39.968003][ T4342] scm_fp_dup+0x40/0x200 [ 39.968034][ T4342] __unix_dgram_recvmsg+0x693/0x840 [ 39.968062][ T4342] unix_seqpacket_recvmsg+0xaf/0xc0 [ 39.968085][ T4342] ? __pfx_unix_seqpacket_recvmsg+0x10/0x10 [ 39.968129][ T4342] sock_recvmsg+0x136/0x170 [ 39.968150][ T4342] ____sys_recvmsg+0xf5/0x280 [ 39.968170][ T4342] ___sys_recvmsg+0x11f/0x370 [ 39.968194][ T4342] __x64_sys_recvmsg+0xd1/0x160 [ 39.968252][ T4342] x64_sys_call+0xf19/0x2fb0 [ 39.968271][ T4342] do_syscall_64+0xd2/0x200 [ 39.968287][ T4342] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.968317][ T4342] ? clear_bhb_loop+0x40/0x90 [ 39.968362][ T4342] ? clear_bhb_loop+0x40/0x90 [ 39.968379][ T4342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.968400][ T4342] RIP: 0033:0x7fcb424be929 [ 39.968415][ T4342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.968431][ T4342] RSP: 002b:00007fcb40b27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 39.968448][ T4342] RAX: ffffffffffffffda RBX: 00007fcb426e5fa0 RCX: 00007fcb424be929 [ 39.968508][ T4342] RDX: 0000000000000122 RSI: 0000200000000000 RDI: 000000000000000b [ 39.968576][ T4342] RBP: 00007fcb40b27090 R08: 0000000000000000 R09: 0000000000000000 [ 39.968588][ T4342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.968601][ T4342] R13: 0000000000000000 R14: 00007fcb426e5fa0 R15: 00007fffbfa7ddf8 [ 39.968618][ T4342] [ 39.969397][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.311415][ T4356] 9pnet_fd: Insufficient options for proto=fd [ 40.331722][ T4352] loop4: detected capacity change from 0 to 2048 [ 40.338532][ T4352] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.365325][ T4352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.400541][ T4369] siw: device registration error -23 [ 40.475806][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.488429][ T4371] loop5: detected capacity change from 0 to 2048 [ 40.495926][ T4371] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.503771][ T4375] loop4: detected capacity change from 0 to 128 [ 40.514022][ T4371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.519175][ T4378] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 40.538503][ T4375] IPVS: stopping master sync thread 4378 ... [ 40.584039][ T3754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.662039][ T4384] loop4: detected capacity change from 0 to 2048 [ 40.670052][ T4384] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.684381][ T4384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.747912][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.866493][ T4416] loop4: detected capacity change from 0 to 2048 [ 40.874487][ T4416] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.903057][ T4416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.952962][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.025920][ T4454] 9pnet_fd: Insufficient options for proto=fd [ 41.184659][ T29] kauditd_printk_skb: 1246 callbacks suppressed [ 41.184697][ T29] audit: type=1326 audit(1751817995.116:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b5fe758e7 code=0x7ffc0000 [ 41.214919][ T29] audit: type=1326 audit(1751817995.116:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b5fe1ab19 code=0x7ffc0000 [ 41.238177][ T29] audit: type=1326 audit(1751817995.116:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.2.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3b5fe7e929 code=0x7ffc0000 [ 41.284361][ T4482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.132'. [ 41.389498][ T4500] loop2: detected capacity change from 0 to 2048 [ 41.397140][ T4500] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.435131][ T4500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.482802][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.028525][ T4553] netlink: 64 bytes leftover after parsing attributes in process `syz.0.137'. [ 42.053815][ T4555] 9pnet_fd: Insufficient options for proto=fd [ 42.074571][ T29] audit: type=1326 audit(1751817996.006:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb424be929 code=0x7ffc0000 [ 42.099126][ T29] audit: type=1326 audit(1751817996.006:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb424be929 code=0x7ffc0000 [ 42.101933][ T4557] netlink: 'syz.0.139': attribute type 3 has an invalid length. [ 42.123262][ T29] audit: type=1326 audit(1751817996.006:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcb424be929 code=0x7ffc0000 [ 42.155028][ T29] audit: type=1326 audit(1751817996.006:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb424be929 code=0x7ffc0000 [ 42.180602][ T29] audit: type=1326 audit(1751817996.006:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcb424be929 code=0x7ffc0000 [ 42.204389][ T29] audit: type=1326 audit(1751817996.006:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb424be929 code=0x7ffc0000 [ 42.229017][ T29] audit: type=1326 audit(1751817996.006:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fcb424be929 code=0x7ffc0000 [ 42.273117][ T4563] 9pnet_fd: Insufficient options for proto=fd [ 42.303210][ T4567] Zero length message leads to an empty skb [ 42.356954][ T4570] netlink: 'syz.0.145': attribute type 10 has an invalid length. [ 42.365785][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.373304][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.387046][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.394387][ T4570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.401794][ T4570] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.409138][ T4570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.412339][ T4577] loop2: detected capacity change from 0 to 512 [ 42.428224][ T4570] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 42.430516][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 42.449464][ T4577] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.147: corrupted in-inode xattr: invalid ea_ino [ 42.472133][ T4577] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.147: couldn't read orphan inode 15 (err -117) [ 42.472598][ T4580] bridge_slave_1: left allmulticast mode [ 42.490310][ T4580] bridge_slave_1: left promiscuous mode [ 42.496268][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.507823][ T4580] bridge_slave_0: left allmulticast mode [ 42.513618][ T4580] bridge_slave_0: left promiscuous mode [ 42.517353][ T4577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.519492][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.532684][ T4586] 9pnet_fd: Insufficient options for proto=fd [ 42.549551][ T4580] bond0: (slave bridge0): Releasing backup interface [ 42.689250][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.775558][ T4614] SELinux: syz.2.155 (4614) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 42.807448][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 42.892969][ T4635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.159'. [ 42.943150][ T4651] loop5: detected capacity change from 0 to 1024 [ 42.951083][ T4651] EXT4-fs: Ignoring removed nobh option [ 42.957696][ T4651] EXT4-fs: Ignoring removed nobh option [ 42.965285][ T4651] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 42.975456][ T4651] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 43.005810][ T4662] netlink: 16 bytes leftover after parsing attributes in process `syz.5.162'. [ 43.118823][ T4676] loop5: detected capacity change from 0 to 2048 [ 43.147584][ T4676] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.163610][ T4676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.214271][ T3754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.365592][ T4729] SELinux: syz.0.168 (4729) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 43.383404][ T4729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'. [ 43.457117][ T4743] bond0: (slave bond_slave_0): Releasing backup interface [ 43.467931][ T4743] bond0: (slave bond_slave_1): Releasing backup interface [ 43.482988][ T4743] team0: Port device team_slave_0 removed [ 43.494557][ T4743] team0: Port device team_slave_1 removed [ 43.503736][ T4743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.511448][ T4743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.521102][ T4743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.528755][ T4743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.557718][ T3399] srz1: Port: 1 Link DOWN [ 43.605421][ T4769] 9pnet_fd: Insufficient options for proto=fd [ 43.615276][ T4771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.173'. [ 43.641688][ T4773] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 43.705957][ T4777] loop3: detected capacity change from 0 to 256 [ 43.756003][ T4780] loop3: detected capacity change from 0 to 512 [ 43.782946][ T4780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.795911][ T4780] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.880095][ T4783] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.177: corrupted inode contents [ 43.892524][ T4783] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #19: comm syz.3.177: mark_inode_dirty error [ 43.904223][ T4783] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.177: corrupted inode contents [ 43.916359][ T4783] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.177: mark_inode_dirty error [ 43.928551][ T4783] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.177: mark inode dirty (error -117) [ 43.941831][ T4783] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 43.961140][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.163365][ T4793] bridge_slave_0: left allmulticast mode [ 44.169051][ T4793] bridge_slave_0: left promiscuous mode [ 44.174765][ T4793] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.198050][ T4803] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 44.202005][ T4793] bridge_slave_1: left allmulticast mode [ 44.206107][ T4803] __nla_validate_parse: 1 callbacks suppressed [ 44.206123][ T4803] netlink: 80 bytes leftover after parsing attributes in process `syz.2.186'. [ 44.211860][ T4793] bridge_slave_1: left promiscuous mode [ 44.232740][ T4793] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.257597][ T4793] bond0: (slave bond_slave_0): Releasing backup interface [ 44.273906][ T4793] bond0: (slave bond_slave_1): Releasing backup interface [ 44.274326][ T4805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.187'. [ 44.296214][ T4793] team0: Failed to send options change via netlink (err -105) [ 44.304472][ T4793] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 44.316556][ T4793] team0: Port device team_slave_0 removed [ 44.325865][ T4793] team0: Failed to send options change via netlink (err -105) [ 44.334171][ T4793] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 44.345048][ T4793] team0: Port device team_slave_1 removed [ 44.353695][ T4789] capability: warning: `syz.3.180' uses deprecated v2 capabilities in a way that may be insecure [ 44.363813][ T4793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.371737][ T4793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.383182][ T4793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.390874][ T4793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.412465][ T4809] loop5: detected capacity change from 0 to 512 [ 44.465345][ T4809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.484682][ T4809] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.538498][ T4822] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.191' sets config #0 [ 44.551302][ T4830] veth1_macvtap: left promiscuous mode [ 44.556795][ T4830] macsec0: entered allmulticast mode [ 44.595077][ T4837] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 44.602804][ T4837] netlink: 80 bytes leftover after parsing attributes in process `syz.0.198'. [ 44.616230][ T4840] loop4: detected capacity change from 0 to 512 [ 44.626456][ T4838] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 44.626456][ T4838] program syz.3.199 not setting count and/or reply_len properly [ 44.629039][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.201'. [ 44.654359][ T3754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.676278][ T4840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.706414][ T4849] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 44.713179][ T4849] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.718264][ T4840] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.720949][ T4849] vhci_hcd vhci_hcd.0: Device attached [ 44.747742][ T4849] loop5: detected capacity change from 0 to 164 [ 44.837752][ T4860] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.200: corrupted inode contents [ 44.852674][ T4860] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #19: comm syz.4.200: mark_inode_dirty error [ 44.865858][ T4860] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.200: corrupted inode contents [ 44.871902][ T4849] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 44.879047][ T4860] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.200: mark_inode_dirty error [ 44.904403][ T4851] vhci_hcd: connection closed [ 44.904601][ T51] vhci_hcd: stop threads [ 44.904726][ T4860] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.200: mark inode dirty (error -117) [ 44.909402][ T51] vhci_hcd: release socket [ 44.909417][ T51] vhci_hcd: disconnect device [ 44.916051][ T4860] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 44.927104][ T3358] vhci_hcd: vhci_device speed not set [ 44.966738][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.057538][ T4870] loop4: detected capacity change from 0 to 2048 [ 45.091606][ T4870] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 45.096850][ T4870] loop4: partition table partially beyond EOD, truncated [ 45.104233][ T4870] loop4: p1 start 4278190080 is beyond EOD, truncated [ 45.111093][ T4870] loop4: p2 start 16908800 is beyond EOD, truncated [ 45.118247][ T4870] loop4: p5 start 16908800 is beyond EOD, truncated [ 45.207396][ T4879] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.250408][ T4879] FAULT_INJECTION: forcing a failure. [ 45.250408][ T4879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.263504][ T4879] CPU: 1 UID: 0 PID: 4879 Comm: +}[@ Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 45.263521][ T4879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.263528][ T4879] Call Trace: [ 45.263532][ T4879] [ 45.263537][ T4879] __dump_stack+0x1d/0x30 [ 45.263582][ T4879] dump_stack_lvl+0xe8/0x140 [ 45.263593][ T4879] dump_stack+0x15/0x1b [ 45.263602][ T4879] should_fail_ex+0x265/0x280 [ 45.263657][ T4879] should_fail+0xb/0x20 [ 45.263746][ T4879] should_fail_usercopy+0x1a/0x20 [ 45.263763][ T4879] _copy_to_user+0x20/0xa0 [ 45.263775][ T4879] copy_siginfo_to_user+0x22/0xb0 [ 45.263820][ T4879] x64_setup_rt_frame+0x2b5/0x580 [ 45.263856][ T4879] arch_do_signal_or_restart+0x27c/0x480 [ 45.263870][ T4879] exit_to_user_mode_loop+0x7a/0x100 [ 45.263883][ T4879] do_syscall_64+0x1d6/0x200 [ 45.263894][ T4879] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.263969][ T4879] ? clear_bhb_loop+0x40/0x90 [ 45.263981][ T4879] ? clear_bhb_loop+0x40/0x90 [ 45.263992][ T4879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.264039][ T4879] RIP: 0033:0x7f1ecde1e927 [ 45.264050][ T4879] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 45.264116][ T4879] RSP: 002b:00007f1ecc466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.264127][ T4879] RAX: 0000000000000010 RBX: 00007f1ece046080 RCX: 00007f1ecde1e929 [ 45.264134][ T4879] RDX: 0000000000000003 RSI: 000000000000540a RDI: 0000000000000003 [ 45.264141][ T4879] RBP: 00007f1ecc466090 R08: 0000000000000000 R09: 0000000000000000 [ 45.264148][ T4879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.264154][ T4879] R13: 0000000000000000 R14: 00007f1ece046080 R15: 00007ffe1b231d68 [ 45.264165][ T4879] [ 45.513151][ T4881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.214'. [ 45.613089][ T4887] SELinux: syz.5.216 (4887) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.658564][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.666053][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.673621][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.681090][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.689078][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.696673][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.704466][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.712446][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.720446][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.728588][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.736145][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.743663][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.751329][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.758952][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.766641][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.774310][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.782551][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.790434][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.798411][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.806109][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.815043][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.824828][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.834145][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.841994][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.849560][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.857055][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.864523][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.872076][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.879720][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.887508][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.895025][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.902974][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.911151][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.918846][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.926352][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.935186][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.943167][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.950663][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.958197][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.965775][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.973631][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.981600][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.989036][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.997305][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 46.118533][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 46.142452][ T4904] loop0: detected capacity change from 0 to 512 [ 46.172024][ T4902] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 46.188500][ T4902] SELinux: failed to load policy [ 46.193977][ T4904] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.224: corrupted in-inode xattr: invalid ea_ino [ 46.207581][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 46.207592][ T29] audit: type=1400 audit(1751818000.126:2224): avc: denied { ioctl } for pid=4907 comm="syz.5.225" path="socket:[6784]" dev="sockfs" ino=6784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.225616][ T4904] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.224: couldn't read orphan inode 15 (err -117) [ 46.238774][ T29] audit: type=1400 audit(1751818000.126:2225): avc: denied { bind } for pid=4907 comm="syz.5.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.285525][ T4904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.299682][ T4912] SELinux: syz.3.226 (4912) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.317195][ T29] audit: type=1400 audit(1751818000.246:2226): avc: denied { create } for pid=4911 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.372240][ T4916] SELinux: syz.4.228 (4916) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.382428][ T4904] vlan2: entered promiscuous mode [ 46.386452][ T29] audit: type=1400 audit(1751818000.296:2227): avc: denied { mount } for pid=4903 comm="syz.0.224" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.391513][ T4904] team0: entered promiscuous mode [ 46.419928][ T4904] vlan2: entered allmulticast mode [ 46.425257][ T4904] team0: entered allmulticast mode [ 46.441332][ T29] audit: type=1400 audit(1751818000.346:2228): avc: denied { create } for pid=4913 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.461872][ T29] audit: type=1400 audit(1751818000.366:2229): avc: denied { connect } for pid=4915 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.481728][ T29] audit: type=1400 audit(1751818000.366:2230): avc: denied { bind } for pid=4915 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.486291][ T4912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.226'. [ 46.515674][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.525555][ T29] audit: type=1400 audit(1751818000.446:2231): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.587975][ T29] audit: type=1400 audit(1751818000.486:2232): avc: denied { read write } for pid=4920 comm="syz.0.230" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.605139][ T4919] bond1: entered promiscuous mode [ 46.611927][ T29] audit: type=1400 audit(1751818000.486:2233): avc: denied { open } for pid=4920 comm="syz.0.230" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.617083][ T4919] bond1: entered allmulticast mode [ 46.618092][ T4919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.666742][ T4919] bond1 (unregistering): Released all slaves [ 46.744646][ T4937] FAULT_INJECTION: forcing a failure. [ 46.744646][ T4937] name failslab, interval 1, probability 0, space 0, times 0 [ 46.757381][ T4937] CPU: 0 UID: 0 PID: 4937 Comm: syz.3.236 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 46.757450][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.757462][ T4937] Call Trace: [ 46.757468][ T4937] [ 46.757501][ T4937] __dump_stack+0x1d/0x30 [ 46.757520][ T4937] dump_stack_lvl+0xe8/0x140 [ 46.757540][ T4937] dump_stack+0x15/0x1b [ 46.757557][ T4937] should_fail_ex+0x265/0x280 [ 46.757587][ T4937] ? resv_map_alloc+0x57/0x190 [ 46.757744][ T4937] should_failslab+0x8c/0xb0 [ 46.757767][ T4937] __kmalloc_cache_noprof+0x4c/0x320 [ 46.757792][ T4937] resv_map_alloc+0x57/0x190 [ 46.757817][ T4937] hugetlbfs_get_inode+0x67/0x370 [ 46.757873][ T4937] hugetlb_file_setup+0x192/0x3d0 [ 46.757964][ T4937] ksys_mmap_pgoff+0x157/0x310 [ 46.757995][ T4937] x64_sys_call+0x1602/0x2fb0 [ 46.758013][ T4937] do_syscall_64+0xd2/0x200 [ 46.758100][ T4937] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.758125][ T4937] ? clear_bhb_loop+0x40/0x90 [ 46.758143][ T4937] ? clear_bhb_loop+0x40/0x90 [ 46.758160][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.758193][ T4937] RIP: 0033:0x7fbf1398e929 [ 46.758209][ T4937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.758226][ T4937] RSP: 002b:00007fbf11ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 46.758246][ T4937] RAX: ffffffffffffffda RBX: 00007fbf13bb5fa0 RCX: 00007fbf1398e929 [ 46.758259][ T4937] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 46.758272][ T4937] RBP: 00007fbf11ff7090 R08: ffffffffffffffff R09: 0000000000000000 [ 46.758352][ T4937] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 46.758365][ T4937] R13: 0000000000000000 R14: 00007fbf13bb5fa0 R15: 00007ffc5f3337e8 [ 46.758384][ T4937] [ 47.004828][ T4944] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 47.046979][ T4944] loop3: detected capacity change from 0 to 1024 [ 47.067580][ T4944] EXT4-fs: Ignoring removed nobh option [ 47.073317][ T4944] EXT4-fs: Ignoring removed nobh option [ 47.095544][ T4944] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 47.117363][ T4944] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 47.134950][ T4944] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 47.817194][ T5088] loop3: detected capacity change from 0 to 512 [ 47.836900][ T5088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.852707][ T5088] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.907194][ T5096] bond1: entered promiscuous mode [ 47.912367][ T5096] bond1: entered allmulticast mode [ 47.920535][ T5096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.936388][ T5096] bond1 (unregistering): Released all slaves [ 47.989206][ T5102] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.248: corrupted inode contents [ 48.002055][ T5102] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #19: comm syz.3.248: mark_inode_dirty error [ 48.014833][ T5102] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.248: corrupted inode contents [ 48.060689][ T5102] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.248: mark_inode_dirty error [ 48.081083][ T5102] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.248: mark inode dirty (error -117) [ 48.100456][ T5102] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 48.133520][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.143600][ T5109] 9pnet_fd: Insufficient options for proto=fd [ 48.217722][ T5115] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 48.225551][ T5115] netlink: 80 bytes leftover after parsing attributes in process `syz.0.258'. [ 48.253706][ T5116] loop3: detected capacity change from 0 to 2048 [ 48.260737][ T5116] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.292173][ T5116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.313320][ T5121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.260'. [ 48.370081][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.410157][ T5133] loop3: detected capacity change from 0 to 512 [ 48.423787][ T5133] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.265: corrupted in-inode xattr: invalid ea_ino [ 48.447381][ T5133] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.265: couldn't read orphan inode 15 (err -117) [ 48.458454][ T5138] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 48.459918][ T5133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.465696][ T5138] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 48.465815][ T5138] vhci_hcd vhci_hcd.0: Device attached [ 48.492709][ T5133] vlan2: entered promiscuous mode [ 48.497783][ T5133] team0: entered promiscuous mode [ 48.502965][ T5133] vlan2: entered allmulticast mode [ 48.508981][ T5133] team0: entered allmulticast mode [ 48.518544][ T5138] pim6reg: entered allmulticast mode [ 48.538177][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.547383][ T5138] pim6reg: left allmulticast mode [ 48.588730][ T5152] siw: device registration error -23 [ 48.603825][ T5154] FAULT_INJECTION: forcing a failure. [ 48.603825][ T5154] name failslab, interval 1, probability 0, space 0, times 0 [ 48.603851][ T5154] CPU: 0 UID: 0 PID: 5154 Comm: syz.4.273 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 48.603876][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.603886][ T5154] Call Trace: [ 48.603892][ T5154] [ 48.603898][ T5154] __dump_stack+0x1d/0x30 [ 48.603915][ T5154] dump_stack_lvl+0xe8/0x140 [ 48.603967][ T5154] dump_stack+0x15/0x1b [ 48.604017][ T5154] should_fail_ex+0x265/0x280 [ 48.604053][ T5154] should_failslab+0x8c/0xb0 [ 48.604076][ T5154] kmem_cache_alloc_noprof+0x50/0x310 [ 48.604106][ T5154] ? getname_flags+0x80/0x3b0 [ 48.604208][ T5154] getname_flags+0x80/0x3b0 [ 48.604230][ T5154] __x64_sys_execve+0x42/0x70 [ 48.604258][ T5154] x64_sys_call+0x13ab/0x2fb0 [ 48.604279][ T5154] do_syscall_64+0xd2/0x200 [ 48.604326][ T5154] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.604350][ T5154] ? clear_bhb_loop+0x40/0x90 [ 48.604371][ T5154] ? clear_bhb_loop+0x40/0x90 [ 48.604471][ T5154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.604492][ T5154] RIP: 0033:0x7f1ecde1e929 [ 48.604506][ T5154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.604522][ T5154] RSP: 002b:00007f1ecc487038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 48.604540][ T5154] RAX: ffffffffffffffda RBX: 00007f1ece045fa0 RCX: 00007f1ecde1e929 [ 48.604576][ T5154] RDX: 0000200000000a80 RSI: 0000200000000440 RDI: 0000000000000000 [ 48.604588][ T5154] RBP: 00007f1ecc487090 R08: 0000000000000000 R09: 0000000000000000 [ 48.604670][ T5154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.604682][ T5154] R13: 0000000000000000 R14: 00007f1ece045fa0 R15: 00007ffe1b231d68 [ 48.604700][ T5154] [ 48.638361][ T5138] netlink: 14 bytes leftover after parsing attributes in process `syz.0.268'. [ 48.675165][ T5160] loop4: detected capacity change from 0 to 512 [ 48.761343][ T3358] usb 2-1: SetAddress Request (2) to port 0 [ 48.764844][ T5160] EXT4-fs: Ignoring removed i_version option [ 48.774167][ T3358] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 48.790309][ T5160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.853842][ T5160] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.854244][ T5160] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.275: bg 0: block 248: padding at end of block bitmap is not set [ 48.879737][ T5160] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.275: Failed to acquire dquot type 1 [ 48.891930][ T5140] vhci_hcd: connection reset by peer [ 48.898889][ T5160] EXT4-fs (loop4): 1 truncate cleaned up [ 48.899116][ T12] vhci_hcd: stop threads [ 48.909227][ T12] vhci_hcd: release socket [ 48.913863][ T12] vhci_hcd: disconnect device [ 48.920164][ T5160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.934524][ T5160] FAULT_INJECTION: forcing a failure. [ 48.934524][ T5160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.948899][ T5160] CPU: 0 UID: 0 PID: 5160 Comm: syz.4.275 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 48.948991][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.948999][ T5160] Call Trace: [ 48.949014][ T5160] [ 48.949021][ T5160] __dump_stack+0x1d/0x30 [ 48.949042][ T5160] dump_stack_lvl+0xe8/0x140 [ 48.949200][ T5160] dump_stack+0x15/0x1b [ 48.949215][ T5160] should_fail_ex+0x265/0x280 [ 48.949348][ T5160] should_fail+0xb/0x20 [ 48.949401][ T5160] should_fail_usercopy+0x1a/0x20 [ 48.949438][ T5160] _copy_from_user+0x1c/0xb0 [ 48.949450][ T5160] memdup_user+0x5e/0xd0 [ 48.949473][ T5160] strndup_user+0x68/0xb0 [ 48.949486][ T5160] __se_sys_mount+0x4d/0x2e0 [ 48.949497][ T5160] ? do_mkdirat+0x3ac/0x3f0 [ 48.949514][ T5160] __x64_sys_mount+0x67/0x80 [ 48.949575][ T5160] x64_sys_call+0xd36/0x2fb0 [ 48.949595][ T5160] do_syscall_64+0xd2/0x200 [ 48.949613][ T5160] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.949681][ T5160] ? clear_bhb_loop+0x40/0x90 [ 48.949694][ T5160] ? clear_bhb_loop+0x40/0x90 [ 48.949759][ T5160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.949772][ T5160] RIP: 0033:0x7f1ecde200ca [ 48.949782][ T5160] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.949791][ T5160] RSP: 002b:00007f1ecc486e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 48.949887][ T5160] RAX: ffffffffffffffda RBX: 00007f1ecc486ef0 RCX: 00007f1ecde200ca [ 48.949894][ T5160] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 48.949901][ T5160] RBP: 0000200000000f40 R08: 00007f1ecc486ef0 R09: 0000000001a4a438 [ 48.949908][ T5160] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 48.949914][ T5160] R13: 00007f1ecc486eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 48.949926][ T5160] [ 49.144291][ T5160] syz.4.275 (5160) used greatest stack depth: 9304 bytes left [ 49.159280][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.252486][ T5170] loop4: detected capacity change from 0 to 2048 [ 49.259284][ T5170] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.276192][ T5170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.324160][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.348962][ T5176] 9pnet_fd: Insufficient options for proto=fd [ 49.410348][ T5180] siw: device registration error -23 [ 49.438110][ T5185] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 49.438173][ T5186] __nla_validate_parse: 3 callbacks suppressed [ 49.438185][ T5186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 49.448813][ T5185] SELinux: failed to load policy [ 49.454002][ T5186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 49.543327][ T5186] loop3: detected capacity change from 0 to 164 [ 49.563305][ T5192] loop4: detected capacity change from 0 to 2048 [ 49.570090][ T5192] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.606673][ T5195] veth1_macvtap: left promiscuous mode [ 49.613498][ T5195] macsec0: entered allmulticast mode [ 49.622377][ T5192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.653862][ T5200] FAULT_INJECTION: forcing a failure. [ 49.653862][ T5200] name failslab, interval 1, probability 0, space 0, times 0 [ 49.653887][ T5196] bridge_slave_0: left allmulticast mode [ 49.667235][ T5200] CPU: 1 UID: 0 PID: 5200 Comm: syz.0.289 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 49.667347][ T5200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.667359][ T5200] Call Trace: [ 49.667365][ T5200] [ 49.667373][ T5200] __dump_stack+0x1d/0x30 [ 49.667445][ T5200] dump_stack_lvl+0xe8/0x140 [ 49.667464][ T5200] dump_stack+0x15/0x1b [ 49.667554][ T5200] should_fail_ex+0x265/0x280 [ 49.667599][ T5200] should_failslab+0x8c/0xb0 [ 49.667622][ T5200] kmem_cache_alloc_node_noprof+0x57/0x320 [ 49.667650][ T5200] ? __alloc_skb+0x101/0x320 [ 49.667732][ T5200] __alloc_skb+0x101/0x320 [ 49.667759][ T5200] tipc_buf_acquire+0x2c/0xb0 [ 49.667784][ T5200] tipc_named_withdraw+0x13b/0x360 [ 49.667872][ T5200] tipc_nametbl_withdraw+0x114/0x200 [ 49.667904][ T5200] tipc_sk_leave+0x258/0x270 [ 49.667927][ T5200] tipc_release+0x83/0xd10 [ 49.667963][ T5200] ? task_work_add+0x268/0x2c0 [ 49.668089][ T5200] sock_close+0x6b/0x150 [ 49.668110][ T5200] ? __pfx_sock_close+0x10/0x10 [ 49.668131][ T5200] __fput+0x298/0x650 [ 49.668186][ T5200] ____fput+0x1c/0x30 [ 49.668210][ T5200] task_work_run+0x131/0x1a0 [ 49.668233][ T5200] exit_to_user_mode_loop+0xe4/0x100 [ 49.668256][ T5200] do_syscall_64+0x1d6/0x200 [ 49.668315][ T5200] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.668340][ T5200] ? clear_bhb_loop+0x40/0x90 [ 49.668361][ T5200] ? clear_bhb_loop+0x40/0x90 [ 49.668382][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.668402][ T5200] RIP: 0033:0x7fcb424be929 [ 49.668433][ T5200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.668448][ T5200] RSP: 002b:00007fcb40b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 49.668467][ T5200] RAX: 0000000000000003 RBX: 00007fcb426e5fa0 RCX: 00007fcb424be929 [ 49.668479][ T5200] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 49.668491][ T5200] RBP: 00007fcb40b27090 R08: 0000000000000000 R09: 0000000000000000 [ 49.668503][ T5200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.668578][ T5200] R13: 0000000000000000 R14: 00007fcb426e5fa0 R15: 00007fffbfa7ddf8 [ 49.668661][ T5200] [ 49.668669][ T5200] tipc: Withdrawal distribution failure [ 49.672927][ T5196] bridge_slave_0: left promiscuous mode [ 49.915060][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.933915][ T5196] bridge_slave_1: left allmulticast mode [ 49.939988][ T5196] bridge_slave_1: left promiscuous mode [ 49.946352][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.957229][ T5196] bond0: (slave bond_slave_0): Releasing backup interface [ 49.966324][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.979840][ T5196] bond0: (slave bond_slave_1): Releasing backup interface [ 49.992713][ T5196] team0: Port device team_slave_0 removed [ 49.998921][ T5207] 9pnet_fd: Insufficient options for proto=fd [ 50.015029][ T5196] team0: Port device team_slave_1 removed [ 50.024303][ T5196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.032152][ T5196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.040934][ T5196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.048469][ T5196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.146842][ T5218] SELinux: failed to load policy [ 50.174154][ T5220] loop5: detected capacity change from 0 to 2048 [ 50.181150][ T5220] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.256508][ T5220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.324243][ T5234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.303'. [ 50.373569][ T5238] netlink: 'syz.4.306': attribute type 10 has an invalid length. [ 50.383608][ T5240] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 50.383608][ T5240] program syz.2.305 not setting count and/or reply_len properly [ 50.402585][ T5236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.304'. [ 50.413050][ T3754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.433409][ T5241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 50.448783][ T5244] loop3: detected capacity change from 0 to 512 [ 50.449249][ T5238] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 50.470401][ T5241] bond0: (slave bridge0): Releasing backup interface [ 50.481889][ T5244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.498642][ T5244] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.563246][ T5253] loop0: detected capacity change from 0 to 2048 [ 50.577582][ T5246] tipc: Started in network mode [ 50.583656][ T5246] tipc: Node identity 4, cluster identity 4711 [ 50.590433][ T5246] tipc: Node number set to 4 [ 50.596850][ T5253] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.629739][ T5253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.710986][ T5265] 9pnet_fd: Insufficient options for proto=fd [ 50.736797][ T5254] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.308: corrupted inode contents [ 50.749293][ T5254] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #19: comm syz.3.308: mark_inode_dirty error [ 50.764753][ T5254] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm syz.3.308: corrupted inode contents [ 50.808832][ T5254] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.308: mark_inode_dirty error [ 50.834106][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.873754][ T5254] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.308: mark inode dirty (error -117) [ 50.896746][ T5254] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 50.944043][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.012251][ T5278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.318'. [ 51.052620][ T5256] loop4: detected capacity change from 0 to 2048 [ 51.061204][ T5256] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.100906][ T5256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.144407][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.283075][ T5324] SELinux: syz.4.333 (5324) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 51.389094][ T5341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'. [ 51.443835][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 51.443851][ T29] audit: type=1400 audit(1751818005.376:2615): avc: denied { ioctl } for pid=5352 comm="syz.4.340" path="socket:[8411]" dev="sockfs" ino=8411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.468006][ T5353] netlink: 'syz.4.340': attribute type 10 has an invalid length. [ 51.475480][ T29] audit: type=1400 audit(1751818005.396:2616): avc: denied { create } for pid=5352 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.502385][ T29] audit: type=1400 audit(1751818005.396:2617): avc: denied { ioctl } for pid=5352 comm="syz.4.340" path="socket:[7919]" dev="sockfs" ino=7919 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.527314][ T29] audit: type=1400 audit(1751818005.396:2618): avc: denied { bind } for pid=5352 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.548370][ T29] audit: type=1400 audit(1751818005.396:2619): avc: denied { connect } for pid=5352 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.087311][ T5458] infiniband syz!: set down [ 52.091937][ T5458] infiniband syz!: added team_slave_0 [ 52.117515][ T29] audit: type=1326 audit(1751818006.046:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecde1e929 code=0x7ffc0000 [ 52.140939][ T29] audit: type=1326 audit(1751818006.046:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecde1e929 code=0x7ffc0000 [ 52.164639][ T29] audit: type=1326 audit(1751818006.046:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ecde1e929 code=0x7ffc0000 [ 52.188152][ T29] audit: type=1326 audit(1751818006.046:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecde1e929 code=0x7ffc0000 [ 52.211647][ T29] audit: type=1326 audit(1751818006.046:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecde1e929 code=0x7ffc0000 [ 52.238672][ T5468] syz.2.345 uses obsolete (PF_INET,SOCK_PACKET) [ 52.245247][ T5463] loop4: detected capacity change from 0 to 512 [ 52.274194][ T5463] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.275773][ T5458] RDS/IB: syz!: added [ 52.293022][ T5458] smc: adding ib device syz! with port count 1 [ 52.299220][ T5458] smc: ib device syz! port 1 has pnetid [ 52.309888][ T5475] 9pnet_fd: Insufficient options for proto=fd [ 52.339678][ T5463] EXT4-fs (loop4): mount failed [ 52.570900][ T5500] tipc: Started in network mode [ 52.576052][ T5500] tipc: Node identity 4, cluster identity 4711 [ 52.582310][ T5500] tipc: Node number set to 4 [ 52.589664][ T5503] SELinux: syz.3.360 (5503) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 52.608193][ T5505] 9pnet_fd: Insufficient options for proto=fd [ 52.679194][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.366'. [ 52.715276][ T5519] veth1_macvtap: left promiscuous mode [ 52.722883][ T5519] macsec0: entered allmulticast mode [ 52.778516][ T5523] SELinux: failed to load policy [ 52.807920][ T5531] 9pnet_fd: Insufficient options for proto=fd [ 52.825049][ T5533] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 52.825049][ T5533] program syz.3.374 not setting count and/or reply_len properly [ 52.856084][ T5539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.378'. [ 53.033918][ T5568] netlink: 60 bytes leftover after parsing attributes in process `syz.2.380'. [ 53.232541][ T5599] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 53.246944][ T5599] loop3: detected capacity change from 0 to 512 [ 53.265168][ T5599] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.280454][ T5599] EXT4-fs (loop3): mount failed [ 53.397780][ T5632] loop4: detected capacity change from 0 to 512 [ 53.413879][ T5632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.426993][ T5632] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.519828][ T5650] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.388: corrupted inode contents [ 53.533091][ T5650] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #19: comm syz.4.388: mark_inode_dirty error [ 53.545911][ T5650] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm syz.4.388: corrupted inode contents [ 53.565321][ T5650] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.388: mark_inode_dirty error [ 53.578326][ T5650] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.388: mark inode dirty (error -117) [ 53.594191][ T5650] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 53.618879][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.834636][ T5700] SELinux: failed to load policy [ 53.842837][ T3358] usb 2-1: device descriptor read/8, error -110 [ 53.951297][ T3358] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 53.971773][ T3358] usb 2-1: enqueue for inactive port 0 [ 53.977716][ T3358] usb 2-1: enqueue for inactive port 0 [ 53.983454][ T3358] usb 2-1: enqueue for inactive port 0 [ 53.993590][ T5674] loop4: detected capacity change from 0 to 2048 [ 54.004535][ T5674] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.046653][ T5722] loop0: detected capacity change from 0 to 2048 [ 54.070383][ T5722] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.105826][ T5674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.122903][ T5722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.150661][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.273282][ T5765] loop4: detected capacity change from 0 to 1024 [ 54.281091][ T5765] EXT4-fs: Ignoring removed nobh option [ 54.287561][ T5765] EXT4-fs: Ignoring removed nobh option [ 54.295606][ T5765] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 54.307681][ T5765] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 54.346957][ T5775] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 54.346957][ T5775] program syz.4.404 not setting count and/or reply_len properly [ 54.798893][ T5852] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 54.810226][ T5852] SELinux: failed to load policy [ 55.001565][ T3358] usb usb2-port1: attempt power cycle [ 55.029909][ T5890] __nla_validate_parse: 1 callbacks suppressed [ 55.029923][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'. [ 55.064294][ T5894] 9pnet_fd: Insufficient options for proto=fd [ 55.148450][ T5898] bond1: entered promiscuous mode [ 55.153667][ T5898] bond1: entered allmulticast mode [ 55.159411][ T5898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.168961][ T5898] bond1 (unregistering): Released all slaves [ 55.208214][ T5904] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 55.214883][ T5904] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 55.222682][ T5904] vhci_hcd vhci_hcd.0: Device attached [ 55.231286][ T5904] pim6reg: entered allmulticast mode [ 55.237409][ T5904] pim6reg: left allmulticast mode [ 55.255812][ T5908] siw: device registration error -23 [ 55.291896][ T5905] vhci_hcd: connection closed [ 55.292049][ T4255] vhci_hcd: stop threads [ 55.301208][ T4255] vhci_hcd: release socket [ 55.305689][ T4255] vhci_hcd: disconnect device [ 55.341339][ T3358] usb 2-1: enqueue for inactive port 0 [ 55.480725][ T5917] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 55.496217][ T5917] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 55.551402][ T3358] usb 2-1: enqueue for inactive port 0 [ 55.808962][ T5925] loop0: detected capacity change from 0 to 1024 [ 55.815860][ T5925] EXT4-fs: Ignoring removed nobh option [ 55.821500][ T5925] EXT4-fs: Ignoring removed nobh option [ 55.827532][ T5925] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 55.837556][ T5925] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 56.133873][ T5945] loop4: detected capacity change from 0 to 1024 [ 56.140832][ T5945] EXT4-fs: Ignoring removed nobh option [ 56.336801][ T5962] bond1: entered promiscuous mode [ 56.342083][ T5962] bond1: entered allmulticast mode [ 56.347564][ T5962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.356963][ T5962] bond1 (unregistering): Released all slaves [ 56.419869][ T5965] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 56.430342][ T5965] SELinux: failed to load policy [ 56.473639][ T5968] bond1: entered promiscuous mode [ 56.478934][ T5968] bond1: entered allmulticast mode [ 56.484635][ T5968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.494522][ T5968] bond1 (unregistering): Released all slaves [ 56.567301][ T5981] siw: device registration error -23 [ 56.575992][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 56.576005][ T29] audit: type=1326 audit(1751818010.506:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5fe7e929 code=0x7ffc0000 [ 56.605914][ T29] audit: type=1326 audit(1751818010.506:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5fe7e929 code=0x7ffc0000 [ 56.629284][ T29] audit: type=1326 audit(1751818010.506:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3b5fe7e929 code=0x7ffc0000 [ 56.629308][ T29] audit: type=1326 audit(1751818010.506:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5fe7e929 code=0x7ffc0000 [ 56.676983][ T29] audit: type=1326 audit(1751818010.506:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5fe7e929 code=0x7ffc0000 [ 56.700666][ T29] audit: type=1326 audit(1751818010.506:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3b5fe7e929 code=0x7ffc0000 [ 56.700690][ T29] audit: type=1326 audit(1751818010.506:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5fe7e929 code=0x7ffc0000 [ 56.700711][ T29] audit: type=1326 audit(1751818010.506:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3b5fe7e929 code=0x7ffc0000 [ 56.700735][ T29] audit: type=1326 audit(1751818010.506:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b5fe758e7 code=0x7ffc0000 [ 56.748853][ T3358] usb usb2-port1: unable to enumerate USB device [ 56.772254][ T29] audit: type=1326 audit(1751818010.506:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b5fe1ab19 code=0x7ffc0000 [ 56.799472][ T5988] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 56.799472][ T5988] program syz.2.448 not setting count and/or reply_len properly [ 56.884591][ T5992] netlink: 60 bytes leftover after parsing attributes in process `syz.5.447'. [ 56.894230][ T5986] netlink: 60 bytes leftover after parsing attributes in process `syz.5.447'. [ 56.947310][ T5998] bond0: (slave bridge0): Releasing backup interface [ 56.993616][ T6001] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 57.004036][ T6001] SELinux: failed to load policy [ 57.071212][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.456'. [ 57.174696][ T6015] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 57.174696][ T6015] program syz.3.459 not setting count and/or reply_len properly [ 57.272210][ T6017] loop4: detected capacity change from 0 to 2048 [ 57.279236][ T6017] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.431103][ T6033] loop2: detected capacity change from 0 to 2048 [ 57.453854][ T6033] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.499164][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.464'. [ 57.600254][ T6054] siw: device registration error -23 [ 57.722735][ T6068] SELinux: syz.5.476 (6068) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 57.786612][ T6072] netlink: 'syz.5.478': attribute type 10 has an invalid length. [ 57.794904][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.802132][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.813673][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.820879][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.828395][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.835464][ T6072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.845591][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.478'. [ 57.846698][ T6072] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 57.863420][ T6074] bridge_slave_1: left allmulticast mode [ 57.869367][ T6074] bridge_slave_1: left promiscuous mode [ 57.875342][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.885211][ T6074] bridge_slave_0: left allmulticast mode [ 57.890977][ T6074] bridge_slave_0: left promiscuous mode [ 57.896783][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.913245][ T6074] bond0: (slave bridge0): Releasing backup interface [ 58.548779][ T6146] siw: device registration error -23 [ 58.799793][ T6183] bond1: entered promiscuous mode [ 58.805385][ T6183] bond1: entered allmulticast mode [ 58.845084][ T6183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.870185][ T6183] bond1 (unregistering): Released all slaves [ 58.981150][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.493'. [ 59.025698][ T6228] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.064604][ T6228] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.065261][ T6232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.495'. [ 59.077243][ T6238] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=6238 comm=syz.5.494 [ 59.127126][ T6228] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.164109][ T6248] netlink: 60 bytes leftover after parsing attributes in process `syz.0.492'. [ 59.174067][ T6237] netlink: 60 bytes leftover after parsing attributes in process `syz.0.492'. [ 59.205014][ T6228] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.226348][ T6250] FAULT_INJECTION: forcing a failure. [ 59.226348][ T6250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.239551][ T6250] CPU: 0 UID: 0 PID: 6250 Comm: syz.2.499 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 59.239587][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.239599][ T6250] Call Trace: [ 59.239606][ T6250] [ 59.239615][ T6250] __dump_stack+0x1d/0x30 [ 59.239633][ T6250] dump_stack_lvl+0xe8/0x140 [ 59.239649][ T6250] dump_stack+0x15/0x1b [ 59.239671][ T6250] should_fail_ex+0x265/0x280 [ 59.239700][ T6250] should_fail+0xb/0x20 [ 59.239763][ T6250] should_fail_usercopy+0x1a/0x20 [ 59.239828][ T6250] _copy_from_user+0x1c/0xb0 [ 59.239850][ T6250] dev_ethtool+0x52/0x1650 [ 59.239874][ T6250] ? strcmp+0x22/0x50 [ 59.239893][ T6250] dev_ioctl+0x2e0/0x960 [ 59.239913][ T6250] sock_do_ioctl+0x197/0x220 [ 59.239972][ T6250] sock_ioctl+0x41b/0x610 [ 59.239990][ T6250] ? __pfx_sock_ioctl+0x10/0x10 [ 59.240008][ T6250] __se_sys_ioctl+0xce/0x140 [ 59.240038][ T6250] __x64_sys_ioctl+0x43/0x50 [ 59.240143][ T6250] x64_sys_call+0x19a8/0x2fb0 [ 59.240163][ T6250] do_syscall_64+0xd2/0x200 [ 59.240178][ T6250] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.240202][ T6250] ? clear_bhb_loop+0x40/0x90 [ 59.240299][ T6250] ? clear_bhb_loop+0x40/0x90 [ 59.240343][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.240365][ T6250] RIP: 0033:0x7f3b5fe7e929 [ 59.240381][ T6250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.240395][ T6250] RSP: 002b:00007f3b5e4e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.240411][ T6250] RAX: ffffffffffffffda RBX: 00007f3b600a5fa0 RCX: 00007f3b5fe7e929 [ 59.240421][ T6250] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000042 [ 59.240473][ T6250] RBP: 00007f3b5e4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.240491][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.240504][ T6250] R13: 0000000000000000 R14: 00007f3b600a5fa0 R15: 00007ffcdbf5ce88 [ 59.240520][ T6250] [ 59.472397][ T6254] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 59.472397][ T6254] program syz.3.501 not setting count and/or reply_len properly [ 59.509106][ T6228] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.522273][ T6228] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.534294][ T6228] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.553135][ T6228] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.032736][ T6311] loop0: detected capacity change from 0 to 2048 [ 60.041855][ T6311] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.110469][ T6329] __nla_validate_parse: 1 callbacks suppressed [ 60.110519][ T6329] netlink: 72 bytes leftover after parsing attributes in process `syz.3.516'. [ 60.149662][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'. [ 60.159020][ T6329] loop3: detected capacity change from 0 to 1024 [ 60.166463][ T6329] EXT4-fs: test_dummy_encryption option not supported [ 60.197698][ T6354] siw: device registration error -23 [ 60.349154][ T6380] loop3: detected capacity change from 0 to 2048 [ 60.358783][ T6380] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.521584][ T6412] netlink: 'syz.3.522': attribute type 21 has an invalid length. [ 60.529375][ T6412] IPv6: NLM_F_CREATE should be specified when creating new route [ 60.637176][ T6401] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.647005][ T6401] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.656670][ T6401] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.666093][ T6401] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.690703][ T6401] vlan2: left promiscuous mode [ 60.696174][ T6401] team0: left promiscuous mode [ 60.845171][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 60.873829][ T6454] loop3: detected capacity change from 0 to 128 [ 60.907744][ T6461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.532'. [ 60.943096][ T6467] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 60.943096][ T6467] program syz.4.534 not setting count and/or reply_len properly [ 60.958031][ T6470] Unknown options in mask 5 [ 60.965459][ T6469] Unknown options in mask 5 [ 61.118431][ T6485] loop0: detected capacity change from 0 to 1024 [ 61.271494][ T6496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'. [ 61.292938][ T6498] loop0: detected capacity change from 0 to 256 [ 61.309872][ T6500] loop2: detected capacity change from 0 to 512 [ 61.318102][ T6500] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.331156][ T6500] EXT4-fs (loop2): 1 truncate cleaned up [ 61.339915][ T6500] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 225 (only 1 groups) [ 61.361461][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.5.549'. [ 61.455119][ T6503] tipc: New replicast peer: 255.255.255.83 [ 61.461799][ T6503] tipc: Enabled bearer , priority 10 [ 61.469009][ T6503] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.469147][ T6517] veth1_macvtap: left promiscuous mode [ 61.487222][ T6517] macsec0: entered allmulticast mode [ 61.633639][ T6531] loop2: detected capacity change from 0 to 2048 [ 61.640612][ T6531] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.677501][ T6536] 9pnet: Could not find request transport: 0xffffffffffffffff [ 61.685767][ T6533] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.560' sets config #0 [ 61.751725][ T6543] netlink: 124 bytes leftover after parsing attributes in process `syz.2.563'. [ 61.802133][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'. [ 61.846529][ T6552] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 61.853174][ T6552] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 61.861272][ T6552] vhci_hcd vhci_hcd.0: Device attached [ 61.869150][ T6553] vhci_hcd: connection closed [ 61.869467][ T12] vhci_hcd: stop threads [ 61.878827][ T12] vhci_hcd: release socket [ 61.883335][ T12] vhci_hcd: disconnect device [ 61.918788][ T6556] loop4: detected capacity change from 0 to 128 [ 61.930952][ T6556] netlink: 36 bytes leftover after parsing attributes in process `syz.4.568'. [ 61.944549][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 61.944562][ T29] audit: type=1400 audit(1751818015.876:3434): avc: denied { remount } for pid=6555 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 61.980573][ T29] audit: type=1400 audit(1751818015.906:3435): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 62.004068][ T6560] FAULT_INJECTION: forcing a failure. [ 62.004068][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 62.017265][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.4.569 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 62.017347][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.017359][ T6560] Call Trace: [ 62.017366][ T6560] [ 62.017374][ T6560] __dump_stack+0x1d/0x30 [ 62.017395][ T6560] dump_stack_lvl+0xe8/0x140 [ 62.017450][ T6560] dump_stack+0x15/0x1b [ 62.017464][ T6560] should_fail_ex+0x265/0x280 [ 62.017492][ T6560] should_failslab+0x8c/0xb0 [ 62.017513][ T6560] __kmalloc_noprof+0xa5/0x3e0 [ 62.017539][ T6560] ? usb_alloc_urb+0x42/0xc0 [ 62.017635][ T6560] usb_alloc_urb+0x42/0xc0 [ 62.017666][ T6560] do_proc_control+0x1a8/0x8b0 [ 62.017685][ T6560] ? should_fail_ex+0xdb/0x280 [ 62.017710][ T6560] proc_control_compat+0xae/0xe0 [ 62.017829][ T6560] usbdev_ioctl+0xee1/0x1710 [ 62.017854][ T6560] ? __pfx_usbdev_ioctl+0x10/0x10 [ 62.017883][ T6560] __se_sys_ioctl+0xce/0x140 [ 62.017986][ T6560] __x64_sys_ioctl+0x43/0x50 [ 62.018035][ T6560] x64_sys_call+0x19a8/0x2fb0 [ 62.018057][ T6560] do_syscall_64+0xd2/0x200 [ 62.018074][ T6560] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.018106][ T6560] ? clear_bhb_loop+0x40/0x90 [ 62.018129][ T6560] ? clear_bhb_loop+0x40/0x90 [ 62.018149][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.018239][ T6560] RIP: 0033:0x7f1ecde1e929 [ 62.018254][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.018268][ T6560] RSP: 002b:00007f1ecc487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.018323][ T6560] RAX: ffffffffffffffda RBX: 00007f1ece045fa0 RCX: 00007f1ecde1e929 [ 62.018336][ T6560] RDX: 0000200000000600 RSI: 00000000c0105500 RDI: 0000000000000003 [ 62.018384][ T6560] RBP: 00007f1ecc487090 R08: 0000000000000000 R09: 0000000000000000 [ 62.018394][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.018405][ T6560] R13: 0000000000000000 R14: 00007f1ece045fa0 R15: 00007ffe1b231d68 [ 62.018420][ T6560] [ 62.362448][ T6573] netlink: 124 bytes leftover after parsing attributes in process `syz.4.574'. [ 62.421719][ T6575] siw: device registration error -23 [ 62.430979][ T6564] loop0: detected capacity change from 0 to 2048 [ 62.442405][ T29] audit: type=1326 audit(1751818016.376:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecde1e929 code=0x7ffc0000 [ 62.449476][ T6564] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.480073][ T29] audit: type=1326 audit(1751818016.376:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1ecde1e929 code=0x7ffc0000 [ 62.505124][ T29] audit: type=1326 audit(1751818016.376:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecde1e929 code=0x7ffc0000 [ 62.528917][ T29] audit: type=1326 audit(1751818016.376:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1ecde1e929 code=0x7ffc0000 [ 62.552724][ T29] audit: type=1326 audit(1751818016.376:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ecde1e929 code=0x7ffc0000 [ 62.576786][ T29] audit: type=1326 audit(1751818016.376:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1ecde1e929 code=0x7ffc0000 [ 62.601590][ T29] audit: type=1326 audit(1751818016.376:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1ecde158e7 code=0x7ffc0000 [ 62.626413][ T29] audit: type=1326 audit(1751818016.376:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6574 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ecddbab19 code=0x7ffc0000 [ 62.728187][ T6576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6576 comm=syz.5.572 [ 62.811609][ T6590] netlink: 'syz.2.580': attribute type 10 has an invalid length. [ 62.824745][ T6590] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 62.838352][ T6590] bond0: (slave bridge0): Releasing backup interface [ 62.861569][ T36] usb usb2-port1: attempt power cycle [ 62.948846][ T6592] bond1: entered promiscuous mode [ 62.954014][ T6592] bond1: entered allmulticast mode [ 62.959303][ T6592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.969304][ T6592] bond1 (unregistering): Released all slaves [ 63.515170][ T6611] loop4: detected capacity change from 0 to 2048 [ 63.522305][ T6611] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.629281][ T6608] loop2: detected capacity change from 0 to 2048 [ 63.644079][ T6608] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.778202][ T6631] loop4: detected capacity change from 0 to 512 [ 63.800309][ T6628] ================================================================== [ 63.808725][ T6628] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 63.818394][ T6628] [ 63.820759][ T6628] read to 0xffff888103e27720 of 4 bytes by task 6627 on cpu 1: [ 63.828745][ T6628] selinux_inode_permission+0x2a7/0x620 [ 63.834392][ T6628] security_inode_permission+0x6d/0xb0 [ 63.841031][ T6628] inode_permission+0x106/0x310 [ 63.846520][ T6628] link_path_walk+0x162/0x900 [ 63.852423][ T6628] path_openat+0x1de/0x2170 [ 63.856950][ T6628] do_filp_open+0x109/0x230 [ 63.861722][ T6628] io_openat2+0x272/0x390 [ 63.866048][ T6628] io_openat+0x1b/0x30 [ 63.870199][ T6628] __io_issue_sqe+0xfe/0x2e0 [ 63.875237][ T6628] io_issue_sqe+0x53/0x970 [ 63.880654][ T6628] io_submit_sqes+0x667/0xfd0 [ 63.885442][ T6628] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 63.891006][ T6628] __x64_sys_io_uring_enter+0x78/0x90 [ 63.896375][ T6628] x64_sys_call+0x28c8/0x2fb0 [ 63.901129][ T6628] do_syscall_64+0xd2/0x200 [ 63.906048][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.912041][ T6628] [ 63.914579][ T6628] write to 0xffff888103e27720 of 4 bytes by task 6628 on cpu 0: [ 63.922227][ T6628] selinux_inode_permission+0x31b/0x620 [ 63.927770][ T6628] security_inode_permission+0x6d/0xb0 [ 63.933235][ T6628] inode_permission+0x106/0x310 [ 63.938275][ T6628] link_path_walk+0x162/0x900 [ 63.942974][ T6628] path_openat+0x1de/0x2170 [ 63.947758][ T6628] do_filp_open+0x109/0x230 [ 63.952390][ T6628] io_openat2+0x272/0x390 [ 63.956713][ T6628] io_openat+0x1b/0x30 [ 63.960771][ T6628] __io_issue_sqe+0xfe/0x2e0 [ 63.965356][ T6628] io_issue_sqe+0x53/0x970 [ 63.969770][ T6628] io_wq_submit_work+0x3f7/0x5f0 [ 63.974793][ T6628] io_worker_handle_work+0x44e/0x9b0 [ 63.980075][ T6628] io_wq_worker+0x22e/0x870 [ 63.984606][ T6628] ret_from_fork+0xda/0x150 [ 63.989105][ T6628] ret_from_fork_asm+0x1a/0x30 [ 63.993858][ T6628] [ 63.996203][ T6628] value changed: 0x00000002 -> 0x00000003 [ 64.001931][ T6628] [ 64.004367][ T6628] Reported by Kernel Concurrency Sanitizer on: [ 64.010859][ T6628] CPU: 0 UID: 0 PID: 6628 Comm: iou-wrk-6627 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 64.024044][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.034103][ T6628] ================================================================== [ 64.082896][ T6627] hub 8-0:1.0: USB hub found [ 64.087724][ T6627] hub 8-0:1.0: 8 ports detected [ 64.901497][ T36] usb usb2-port1: unable to enumerate USB device [ 64.915279][ T4255] kworker/u8:7: attempt to access beyond end of device [ 64.915279][ T4255] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 64.929156][ T4255] kworker/u8:7: attempt to access beyond end of device [ 64.929156][ T4255] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 64.944224][ T4255] kworker/u8:7: attempt to access beyond end of device [ 64.944224][ T4255] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 64.958691][ T4255] kworker/u8:7: attempt to access beyond end of device [ 64.958691][ T4255] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 64.973413][ T4255] kworker/u8:7: attempt to access beyond end of device [ 64.973413][ T4255] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 64.986941][ T4255] kworker/u8:7: attempt to access beyond end of device [ 64.986941][ T4255] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 65.000689][ T4255] kworker/u8:7: attempt to access beyond end of device [ 65.000689][ T4255] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 65.014321][ T4255] kworker/u8:7: attempt to access beyond end of device [ 65.014321][ T4255] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 65.027897][ T4255] kworker/u8:7: attempt to access beyond end of device [ 65.027897][ T4255] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 65.041912][ T4255] kworker/u8:7: attempt to access beyond end of device [ 65.041912][ T4255] loop3: rw=1, sector=289, nr_sectors = 8 limit=128