last executing test programs: 1m37.80807717s ago: executing program 4 (id=2504): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000000400)=""/238, 0xee}], 0x6, 0x4, 0xd) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x7, 0x3, 0x7c, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1, 0x7800, 0x5, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000740)={'gre0\x00', r3, 0x0, 0x20, 0xe3ce, 0x10e, {{0x1a, 0x4, 0x3, 0x25, 0x68, 0x64, 0x80, 0x6, 0x29, 0x0, @private=0xa010101, @empty, {[@end, @generic={0x7, 0x6, '>+\tU'}, @noop, @end, @end, @timestamp={0x44, 0x24, 0xdc, 0x0, 0x0, [0xe, 0x40, 0x40, 0x9, 0x400, 0x8, 0x7, 0x7]}, @cipso={0x86, 0x24, 0x2, [{0x1, 0xf, "83e533dc72c95a5f85268d395d"}, {0x5, 0x2}, {0x0, 0xd, "e86cf1dbb77b9ab424d6b5"}]}]}}}}}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x2, 0x30, 0x7, 0x6}, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x24, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2f, &(0x7f0000000880)=0x2, 0x4) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000840)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m37.760277591s ago: executing program 4 (id=2506): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000480)='./file0\x00', 0x1bd) 1m37.129292379s ago: executing program 4 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0}, 0x50) 1m37.05404662s ago: executing program 4 (id=2518): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x4, 0x3, 0xb, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m37.01086215s ago: executing program 4 (id=2520): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r1, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 1m36.926528402s ago: executing program 4 (id=2522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00:\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r5, 0x3, r1, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x6}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8080) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x400, 0x0, 0x25dfdbfc, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x2}, [{}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x1adbeed8}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc, 0x100}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x7d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x5}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9, 0x9}, {}, {}, {}, {0x0, 0xea}, {}, {0x0, 0x0, 0x0, 0x2}, {0xfffffffc, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x800002}, {}, {}, {}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x400}, {}, {0x0, 0x200}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {0x0, 0xa3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x0, 0x6f3f}, {0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x4, 0x78000000, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}], [{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1m36.910212282s ago: executing program 32 (id=2522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00:\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r5, 0x3, r1, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x6}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8080) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x400, 0x0, 0x25dfdbfc, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x2}, [{}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x1adbeed8}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc, 0x100}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x7d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x5}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9, 0x9}, {}, {}, {}, {0x0, 0xea}, {}, {0x0, 0x0, 0x0, 0x2}, {0xfffffffc, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x800002}, {}, {}, {}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x400}, {}, {0x0, 0x200}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {0x0, 0xa3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x0, 0x6f3f}, {0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x4, 0x78000000, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}], [{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1m32.295153823s ago: executing program 5 (id=2621): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x13db}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x60}}, 0x8840) unshare(0x68040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x200}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x50, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r3, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$inet_dccp(0x2, 0x6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280067000000069078ac1414bbac1414aa00004e224f93c545910b8e3b7664ebbdf3b8caec5acb6ed56838730bd09b1e3ae80c9ff484db5aff8f329ccd14acf71172317eeea28f8b1b35e9ac53938babb823d5c12c08f96273009a43fa7ad1fd6266", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYRES8=r7], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r9}, 0x10) utime(0x0, 0x0) r10 = socket(0x10, 0x3, 0x9) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500100000201030000000000000000000a0000010800084000000002140019800800020010000000080002000800000078000e800c000280050001003a00000006000340000400000c0002800500010088000000060003400003000006000340000100000600034000040000060003400004000006000340000100002c00018014000300fc02000000000000000000000000000014000400200100000000000000000000000000003c0002800c000280050001"], 0x150}, 0x1, 0x0, 0x0, 0x8040891}, 0x4080) connect$netlink(r10, &(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r13}, 0x10) 1m31.675852761s ago: executing program 5 (id=2634): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b", 0x71}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cf", 0x18}, {&(0x7f0000000740)="c8605474ee573ad5ad5acedf22046d983c7964dad745eb7c8eb102c0d2b166382d3f325806513b1eb3fe7b13", 0x2c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3", 0x27}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd06", 0xb3}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m31.598295092s ago: executing program 5 (id=2636): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="c346c1c2180081064e81f782db44b9b54dc7910006007c09e8", 0x19}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r5}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)='s', 0x1}], 0x1}}], 0x1, 0x40) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x8ff, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m31.544910633s ago: executing program 5 (id=2637): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x200000) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/15) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x4, 0x3, 0xb, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m31.450728994s ago: executing program 5 (id=2638): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000100)=""/87, 0x57}, {0x0}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000000400)=""/238, 0xee}], 0x7, 0x4, 0xd) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x7, 0x3, 0x7c, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1, 0x7800, 0x5, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000740)={'gre0\x00', r3, 0x0, 0x20, 0xe3ce, 0x10e, {{0x1a, 0x4, 0x3, 0x25, 0x68, 0x64, 0x80, 0x6, 0x29, 0x0, @private=0xa010101, @empty, {[@end, @generic={0x7, 0x6, '>+\tU'}, @noop, @end, @end, @timestamp={0x44, 0x24, 0xdc, 0x0, 0x0, [0xe, 0x40, 0x40, 0x9, 0x400, 0x8, 0x7, 0x7]}, @cipso={0x86, 0x24, 0x2, [{0x1, 0xf, "83e533dc72c95a5f85268d395d"}, {0x5, 0x2}, {0x0, 0xd, "e86cf1dbb77b9ab424d6b5"}]}]}}}}}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x2, 0x30, 0x7, 0x6}, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x24, 0x0, &(0x7f0000000240)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2f, &(0x7f0000000880)=0x2, 0x4) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000840)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m29.770469436s ago: executing program 5 (id=2667): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 1m29.769940486s ago: executing program 33 (id=2667): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 50.940196418s ago: executing program 6 (id=3344): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000002000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 50.715171012s ago: executing program 6 (id=3349): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000d00)='devices.deny\x00', 0x2, 0x0) unshare(0x20000400) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000200)={0x2, @long}, 0x8) write$cgroup_devices(r1, &(0x7f0000000d40)={'b', ' *:* ', 'rw\x00'}, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8b6d6194fcfacc6f}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=@dellinkprop={0x84, 0x6d, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x610a, 0x42800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x8}}}}, @IFLA_GROUP={0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xc}, @IFLA_PHYS_SWITCH_ID={0x18, 0x24, "cd3e02726e0e0c1ae1022b88ba0b998a7b5a117d"}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6e66}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_LINKMODE={0x5, 0x11, 0xc}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x49505ab, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) 50.642421652s ago: executing program 6 (id=3350): add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4054}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b5af000000000000000001000000100002800c0001"], 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@mcast2, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="00082abd7000fddbdf2518000000080007000000010008000700010000000800070000a10000050005001000000084000180080003000100000008000300010000000800030001000000140002007665746830000000000000000000000014000200776c616e300000000000000000000000140002006d6163766c616e300000000000000000080003000200000008000100", @ANYRES32=r4, @ANYBLOB="080003000100000014000200766574683100"/28], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x3, 0x0, 0x10, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0x8}, 0x800, 0x340, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r6, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000091}, 0x880) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r13 = syz_open_pts(r12, 0x141601) write(r13, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r11, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000000)=""/76, 0x4c) 50.459310464s ago: executing program 6 (id=3365): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x2, 0x4}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 50.405811165s ago: executing program 6 (id=3359): add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4054}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b5af000000000000000001000000100002800c0001"], 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@mcast2, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="00082abd7000fddbdf2518000000080007000000010008000700010000000800070000a10000050005001000000084000180080003000100000008000300010000000800030001000000140002007665746830000000000000000000000014000200776c616e300000000000000000000000140002006d6163766c616e300000000000000000080003000200000008000100", @ANYRES32=r4, @ANYBLOB="080003000100000014000200766574683100"/28], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x3, 0x0, 0x10, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0x8}, 0x800, 0x340, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r6, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000091}, 0x880) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r13 = syz_open_pts(r12, 0x141601) write(r13, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r11, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000000)=""/76, 0x4c) 50.286576517s ago: executing program 6 (id=3362): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e21, 0x6f49, @empty}, {0xa, 0x4e24, 0x8000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe}, 0x0, {[0x2, 0x8, 0x4, 0xffffffff, 0x1, 0x1, 0xfffffffe, 0x9]}}, 0x5c) r1 = socket$kcm(0x10, 0x2, 0x4) pause() sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}, {&(0x7f0000000640)="e0575f6efdf1b9b4bf0e9df7f58a7c64ad435eae91e7cb3fb515826abde6021be0e9830f22aea6a0d5f61b749c599987f789fdfdf986226ca17f9708c55b91b3a726279c970e8c3c2b2ff2c522a932e0fd92225e6bc32a143e8609f815d584fa6d4b227dcfb0d72e6ac593012cb600b0985795a557ef0fc1a0561a685ce4489cd5a087612e187d902bce03f5e37dfd7bf8e7269eb129351db20383f94521fa04", 0xa0}], 0x2, 0x0, 0x0, 0x7}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x527, &(0x7f0000019580)="$eJzs3W1rZFcdAPD/vZPZZndTM1WRtWBbbGW36M5sGttGkXYF0RdSUOv7NSaTEDLJhMykbkLRLH4AQUSFfgDfCH4AQfoRRCjoe1FRRLf6UnvlztyxeZhJhjzN7uT3g5M55z6c/zmXzJ37cLg3gEvruYi4GxGliHgxIqaL6WmRYreb8uXef/j2Qp6SyLI3/5FEUkzr1ZWXJyLierHaZER862sR300Ox21t76zONxr1zaJca69t1FrbO7dX1uaX68v19dnZmVfmXp17ee5OVjhVPysR8dpX/vLTH/3iq6/95nPf++O9v936ft6sL32i2+6IWDhVgAG6dZc726In30ab5xFsRPL+lEujbgUAAMPIj/E/GhGf7hz/T0epczQHAAAAjJPs9an4TxKRAQAAAGMrjYipSNJqMRZgKtK0Wu2O4f14XEsbzVb7s0vNrfXFfF5EJcrp0kqjfqcYK1yJcpKXZ4oxtr3ySwfKsxHxVET8ZPpqp1xdaDYWR33xAwAAAC6J68/uP///93TayQMAAABjpjKwAAAAAIwLp/wAAAAw/pz/AwAAwFj7xhtv5Cnrvcd78a3trdXmW7cX663V6trWQnWhublRXW42lzvP7Fs7rr5Gs7nx+Vjful9r11vtWmt7595ac2u9fW9l3yuwAQAAgAv01LPv/iGJiN0vXu2kKJ4DCFwWX78y1GJ/PveGABeoNOoGACMzMeoGACNTPnYJewgYd8kx8w8P3uleK4zfnk97AACAs3fzk3vv/7/Tmda7GXj8tQHgcWasDwBcPu7uweVVjtKDE61448ybAozIR7ofTwyaP/DhHUPc/+9eY8iyEzUMAAA4M1OdlKTV4jh9KtK0Wo14svNagHKytNKo3ynOD34/XX4iL8901kyOHTMMAAAAAAAAAAAAAAAAAAAAAAAAAHRlWRJZX1G8Fbz/XAAAAODxEZH+NSnO9G9OvzC1/+rAgbd+vfPmz+7Pt9ubMxFXkn9O55OuRET758X0lzKvBAAAAIBHQPc8vficGXVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg37z98e6GXLjLu378cEZV+8SdisvM5GeWIuPavJCb2rJdEROkM4u8+iIgb/eIn8UGWZZWiFf3iXz3n+JXOpukfP42I62cQHy6zd/P9z91+3780nut89v/+TRTptAbv/9L/7/9KA/Y/Tx4oD/L0e7+qDYz/IOLpif77n178pBt/X4i88PyQffzOt3d2+s7YU2W/+Htj1dprG7XW9s7tlbX55fpyfX12duaVuVfnXp67U1taadSLv33D/PhTv/7gqP5fGxC/sr//h7b/C0P1Pov/vnf/4ce6hXK/+Lee7//7e2NA/LT47ftMkc/n3+zld7v5vZ755e+eOar/iwP6P3lM/28N1f/4wovf/OGf+s45tDUAgIvQ2t5ZnW806ptHZCaHWOaCM68/Gs04w0w8Gs0YVSb7Qff/8XT1nHL1Q5nsNKtPxBk048qh72kpTlphErGb1zXkPyQAADBmPjzoP+oOEgAAAAAAAAAAAAAAAAAAAHCeTvhYssmIOHKZu3tqPhhzdzRdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40v8CAAD//+SZylA=") ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './file1\x00'}) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f00007f8000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlockall() r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0xfffe, 0x808, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xc}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x1b5, 0x4) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="553992c6c01585e701206c30929c0000000000008e49e0229380c599edcb846f514b8d2abec24d027c2bf05565217218607f93e90bf3df41a6642a0562ba4960e400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7, 0x6, 0x2030, r5, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0xb, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_free_batched\x00', r9}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000009daddc1dd96033ebedd9d4ab7cbd390018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000", @ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r10}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x10, &(0x7f0000000080)=0x6, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 35.089990457s ago: executing program 34 (id=3362): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e21, 0x6f49, @empty}, {0xa, 0x4e24, 0x8000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe}, 0x0, {[0x2, 0x8, 0x4, 0xffffffff, 0x1, 0x1, 0xfffffffe, 0x9]}}, 0x5c) r1 = socket$kcm(0x10, 0x2, 0x4) pause() sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}, {&(0x7f0000000640)="e0575f6efdf1b9b4bf0e9df7f58a7c64ad435eae91e7cb3fb515826abde6021be0e9830f22aea6a0d5f61b749c599987f789fdfdf986226ca17f9708c55b91b3a726279c970e8c3c2b2ff2c522a932e0fd92225e6bc32a143e8609f815d584fa6d4b227dcfb0d72e6ac593012cb600b0985795a557ef0fc1a0561a685ce4489cd5a087612e187d902bce03f5e37dfd7bf8e7269eb129351db20383f94521fa04", 0xa0}], 0x2, 0x0, 0x0, 0x7}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x527, &(0x7f0000019580)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './file1\x00'}) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f00007f8000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlockall() r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0xfffe, 0x808, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xc}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x1b5, 0x4) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="553992c6c01585e701206c30929c0000000000008e49e0229380c599edcb846f514b8d2abec24d027c2bf05565217218607f93e90bf3df41a6642a0562ba4960e400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7, 0x6, 0x2030, r5, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0xb, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_free_batched\x00', r9}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000009daddc1dd96033ebedd9d4ab7cbd390018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000", @ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r10}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x10, &(0x7f0000000080)=0x6, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 3.387388455s ago: executing program 7 (id=4288): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x740, 0x140) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_prio={{0x3a}, {0x18, 0x2, {0xf, "080000000000000000008000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) r4 = syz_io_uring_setup(0xfbb, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10000, 0x5, 0x1a6}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7727c5846dfceb1c4ac4bc934b51a8c576ea827430f48a3cbaf53bf3961d0a841bc918ea849b5a2ff14c3cd41ee97a9410d1d8a0d81585ef281171459e401aba76033b9540daf1983ca5ff761704de304c38b48f147e71f120b1c10508cf8d287c99c9cfd2dab2330c0c10a94e601956e04484327cd2e602ed47c828a68332baefd69a50cf5e59fe5214f0a0759dbc40951cb0a9", @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r5, &(0x7f00000001c0)="b4979f35a50faecccd29a3094ac1f8741763aa1d62", 0x15, 0x41, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=@gettfilter={0x5c, 0x2e, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10021, 0xf}, {0xffff, 0xb}, {0xc, 0xe}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x40000) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) r10 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r10, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) 2.518105697s ago: executing program 7 (id=4309): mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f7c000/0x3000)=nil, 0x3000, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000040)=0xd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x1, 0xcc, &(0x7f0000000700)=[{&(0x7f0000000800)=""/215, 0xd7}]}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x3}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x4000001) 1.607202049s ago: executing program 7 (id=4316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000006528f0b000000058df000039e401"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085000000b4000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x200) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000740)=""/218) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmmsg$inet(r4, &(0x7f00000017c0), 0xa, 0x14) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9eb9, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002cc0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='!\x00\x00\x00\x00\n'], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)) ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, &(0x7f0000000300)="b49ad9a3322fe22d5b8036180d6e9df109a9a9aa9f5b2a578124b6355ce11be920140dcb8a7a3620c0140ed49536fb2387d56cf3") 1.325815823s ago: executing program 7 (id=4322): syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88441) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x31, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.275401423s ago: executing program 3 (id=4325): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x64b2, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x7fffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.219146904s ago: executing program 7 (id=4329): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 1.116828905s ago: executing program 7 (id=4330): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x401, 0x4) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/16, 0x10}], 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x64, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x31d4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xc000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x11) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000700)=""/180, 0xb4) 1.115488035s ago: executing program 0 (id=4331): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x2, 0x4}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 1.114208245s ago: executing program 3 (id=4332): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.031063096s ago: executing program 0 (id=4336): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYBLOB="080001"], 0x30}}, 0x0) 1.030132387s ago: executing program 3 (id=4337): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x8, &(0x7f0000002cc0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab6818c7b6b50e4664adf22d634787a8334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009731807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69d3b6d479d176c9748b3a18d84d23da2a3a7913237e145d2b4b3c027822713f3684b98db5b6827abffdfcfb645e90c696c452f2248eb2014311ab444314ea031a0c7c6097bb4ac29fc7b238d4a15b3d4f3c4b0372bea5fa0bf805eeddf30850401c98990321c0"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96590014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000090feed82"], 0x0) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000980)="97ec6c649c04458b566611987a992585030000000000000073dabb989c0b67713e8ec9fac74b8af3fb7154864fdf8ba52471827ee21cb75afdf4677ec2861f9ca812dc9f3c613c2deab72a24742039a3cd2d2b0d831921985dbfbedfc5a4db878c5bbbdd5bf0117521bd2851088533ccbc905610a6153994a14062e7acb07c1b0c0c2cbd1dcbe403829441e083df29f80b36a24caefaa2aa4175c1eed6606dd0f7a37ca5eeaf4f2a1b9f04d32fffa5edecf629015549d4b598a423fe190d", 0xbe}, {&(0x7f0000000b00)="ea89844a9594d33829523ffe8c9ffc0a94b66a4e4ce5afe9f000c8e7c5cb02d920a4c77ac15265288deea98cb0879919d9fbcb681d28263d4f41db1ae23e8fb678ee5d06239d4dbc4bc0c0af89fb979c6f3a2e1f8b2cb061e8cad581b7ae5c8390fd1e0cd7121b25cc7be35e888295d678c7b132213027a448", 0x79}, {&(0x7f0000000b80)="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", 0x105d}, {&(0x7f0000001d40)="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", 0x130}, {&(0x7f0000001c00)="a87382f2e04d89b89c621c948e0f240213029bb0110b74dc1074746701abd097c6a7d2334b1e76b4bdbdf876082bfc528312e0844af0b8472c39db8f65394033958d53f340f4888fbcbda85a26ae7ad4de750529f5be", 0x56}, {&(0x7f0000001e80)="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", 0x1aa}], 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00007a6fab00"/25], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x6, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0x0, 0x7fffffff, 0x0, 0x8, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000000}) 994.538727ms ago: executing program 0 (id=4339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0xf, 0x0, 0x0) 939.967798ms ago: executing program 1 (id=4341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000300), 0x4) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6312, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x200000000200}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x108) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0xf01, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = inotify_init1(0x0) dup3(r8, 0xffffffffffffffff, 0x0) 820.220619ms ago: executing program 2 (id=4342): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0xc}, 0xb00, 0x3, 0x10000, 0x9, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xce02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) syz_clone3(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="02000000a20800000a000100aaaaaaaaaa320000"], 0x2c}}, 0x8080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xc, 0xffe4}, {0x11, 0x1}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4090) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x402, &(0x7f0000000200)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 684.246741ms ago: executing program 0 (id=4343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 683.333671ms ago: executing program 1 (id=4344): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x64b2, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 479.649144ms ago: executing program 1 (id=4345): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x740, 0x140) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_prio={{0x3a}, {0x18, 0x2, {0xf, "080000000000000000008000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) r4 = syz_io_uring_setup(0xfbb, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10000, 0x5, 0x1a6}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7727c5846dfceb1c4ac4bc934b51a8c576ea827430f48a3cbaf53bf3961d0a841bc918ea849b5a2ff14c3cd41ee97a9410d1d8a0d81585ef281171459e401aba76033b9540daf1983ca5ff761704de304c38b48f147e71f120b1c10508cf8d287c99c9cfd2dab2330c0c10a94e601956e04484327cd2e602ed47c828a68332baefd69a50cf5e59fe5214f0a0759dbc40951cb0a9", @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r5, &(0x7f00000001c0)="b4979f35a50faecccd29a3094ac1f8741763aa1d62", 0x15, 0x41, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=@gettfilter={0x5c, 0x2e, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10021, 0xf}, {0xffff, 0xb}, {0xc, 0xe}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) r10 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r10, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) 374.850495ms ago: executing program 3 (id=4346): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x527, &(0x7f0000019580)="$eJzs3W1rZFcdAPD/vZPZZndTM1WRtWBbbGW36M5sGttGkXYF0RdSUOv7NSaTEDLJhMykbkLRLH4AQUSFfgDfCH4AQfoRRCjoe1FRRLf6UnvlztyxeZhJhjzN7uT3g5M55z6c/zmXzJ37cLg3gEvruYi4GxGliHgxIqaL6WmRYreb8uXef/j2Qp6SyLI3/5FEUkzr1ZWXJyLierHaZER862sR300Ox21t76zONxr1zaJca69t1FrbO7dX1uaX68v19dnZmVfmXp17ee5OVjhVPysR8dpX/vLTH/3iq6/95nPf++O9v936ft6sL32i2+6IWDhVgAG6dZc726In30ab5xFsRPL+lEujbgUAAMPIj/E/GhGf7hz/T0epczQHAAAAjJPs9an4TxKRAQAAAGMrjYipSNJqMRZgKtK0Wu2O4f14XEsbzVb7s0vNrfXFfF5EJcrp0kqjfqcYK1yJcpKXZ4oxtr3ySwfKsxHxVET8ZPpqp1xdaDYWR33xAwAAAC6J68/uP///93TayQMAAABjpjKwAAAAAIwLp/wAAAAw/pz/AwAAwFj7xhtv5Cnrvcd78a3trdXmW7cX663V6trWQnWhublRXW42lzvP7Fs7rr5Gs7nx+Vjful9r11vtWmt7595ac2u9fW9l3yuwAQAAgAv01LPv/iGJiN0vXu2kKJ4DCFwWX78y1GJ/PveGABeoNOoGACMzMeoGACNTPnYJewgYd8kx8w8P3uleK4zfnk97AACAs3fzk3vv/7/Tmda7GXj8tQHgcWasDwBcPu7uweVVjtKDE61448ybAozIR7ofTwyaP/DhHUPc/+9eY8iyEzUMAAA4M1OdlKTV4jh9KtK0Wo14svNagHKytNKo3ynOD34/XX4iL8901kyOHTMMAAAAAAAAAAAAAAAAAAAAAAAAAHRlWRJZX1G8Fbz/XAAAAODxEZH+NSnO9G9OvzC1/+rAgbd+vfPmz+7Pt9ubMxFXkn9O55OuRET758X0lzKvBAAAAIBHQPc8vficGXVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg37z98e6GXLjLu378cEZV+8SdisvM5GeWIuPavJCb2rJdEROkM4u8+iIgb/eIn8UGWZZWiFf3iXz3n+JXOpukfP42I62cQHy6zd/P9z91+3780nut89v/+TRTptAbv/9L/7/9KA/Y/Tx4oD/L0e7+qDYz/IOLpif77n178pBt/X4i88PyQffzOt3d2+s7YU2W/+Htj1dprG7XW9s7tlbX55fpyfX12duaVuVfnXp67U1taadSLv33D/PhTv/7gqP5fGxC/sr//h7b/C0P1Pov/vnf/4ce6hXK/+Lee7//7e2NA/LT47ftMkc/n3+zld7v5vZ755e+eOar/iwP6P3lM/28N1f/4wovf/OGf+s45tDUAgIvQ2t5ZnW806ptHZCaHWOaCM68/Gs04w0w8Gs0YVSb7Qff/8XT1nHL1Q5nsNKtPxBk048qh72kpTlphErGb1zXkPyQAADBmPjzoP+oOEgAAAAAAAAAAAAAAAAAAAHCeTvhYssmIOHKZu3tqPhhzdzRdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40v8CAAD//+SZylA=") bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x85f, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@errors_remount}, {@user_xattr}]}, 0x94, 0x477, &(0x7f0000000840)="$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") r0 = io_uring_setup(0x1724, &(0x7f0000000a40)={0x0, 0x379a, 0x100, 0xfffffffe, 0xf2}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x201) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) 300.794036ms ago: executing program 2 (id=4347): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400251}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x1d) 231.681667ms ago: executing program 2 (id=4348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) close(r2) 209.251797ms ago: executing program 3 (id=4349): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 164.574128ms ago: executing program 2 (id=4350): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x29fbc, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0x6}, 0x1c) 147.943058ms ago: executing program 3 (id=4351): r0 = socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000000000000000000000004e7e192312341ce3fea5c79beb1ffce31a301984c6bae7d7a70fb6c997e10db4f5ced45aa3afb5c7b7b6f67817a057ff701c351209b18da3", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010801"], 0x14}}, 0x0) 139.555728ms ago: executing program 1 (id=4352): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88441) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x31, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 131.886628ms ago: executing program 0 (id=4353): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x2, 0x4}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 74.822029ms ago: executing program 2 (id=4354): lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 74.101869ms ago: executing program 1 (id=4355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 63.116829ms ago: executing program 2 (id=4356): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 35.72265ms ago: executing program 0 (id=4357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 0s ago: executing program 1 (id=4358): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): rval 1, probability 0, space 0, times 0 [ 195.944617][T13005] CPU: 0 UID: 0 PID: 13005 Comm: syz.0.3341 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 195.944647][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 195.944662][T13005] Call Trace: [ 195.944737][T13005] [ 195.944746][T13005] __dump_stack+0x1d/0x30 [ 195.944772][T13005] dump_stack_lvl+0xe8/0x140 [ 195.944837][T13005] dump_stack+0x15/0x1b [ 195.944886][T13005] should_fail_ex+0x265/0x280 [ 195.944987][T13005] should_fail+0xb/0x20 [ 195.945017][T13005] should_fail_usercopy+0x1a/0x20 [ 195.945035][T13005] _copy_from_iter+0xcf/0xdd0 [ 195.945052][T13005] ? __build_skb_around+0x1a0/0x200 [ 195.945088][T13005] ? __alloc_skb+0x223/0x320 [ 195.945126][T13005] netlink_sendmsg+0x471/0x6b0 [ 195.945159][T13005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.945215][T13005] __sock_sendmsg+0x142/0x180 [ 195.945247][T13005] ____sys_sendmsg+0x31e/0x4e0 [ 195.945273][T13005] ___sys_sendmsg+0x17b/0x1d0 [ 195.945316][T13005] __x64_sys_sendmsg+0xd4/0x160 [ 195.945372][T13005] x64_sys_call+0x2999/0x2fb0 [ 195.945392][T13005] do_syscall_64+0xd0/0x1a0 [ 195.945415][T13005] ? clear_bhb_loop+0x25/0x80 [ 195.945442][T13005] ? clear_bhb_loop+0x25/0x80 [ 195.945478][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.945567][T13005] RIP: 0033:0x7f27e170e969 [ 195.945583][T13005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.945605][T13005] RSP: 002b:00007f27dfd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.945669][T13005] RAX: ffffffffffffffda RBX: 00007f27e1935fa0 RCX: 00007f27e170e969 [ 195.945681][T13005] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 195.945692][T13005] RBP: 00007f27dfd77090 R08: 0000000000000000 R09: 0000000000000000 [ 195.945706][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.945722][T13005] R13: 0000000000000000 R14: 00007f27e1935fa0 R15: 00007ffc530d8d48 [ 195.945747][T13005] [ 195.947301][ T29] audit: type=1400 audit(1746432213.597:6582): avc: denied { ioctl } for pid=13003 comm="syz.1.3343" path="socket:[36267]" dev="sockfs" ino=36267 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.261425][T13030] loop0: detected capacity change from 0 to 512 [ 196.290484][T13030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.311072][T13030] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.345569][T13030] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.3352: corrupted inode contents [ 196.370814][T13030] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.3352: mark_inode_dirty error [ 196.391401][T13030] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.3352: corrupted inode contents [ 196.424364][T13030] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.3352: mark_inode_dirty error [ 196.469330][T11813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.501590][ T29] audit: type=1400 audit(1746432214.147:6583): avc: denied { setopt } for pid=13028 comm="syz.2.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.694364][T13061] Falling back ldisc for ttyS3. [ 196.702534][T13081] loop6: detected capacity change from 0 to 512 [ 196.747218][T13081] EXT4-fs (loop6): 1 orphan inode deleted [ 196.756768][T13086] FAULT_INJECTION: forcing a failure. [ 196.756768][T13086] name failslab, interval 1, probability 0, space 0, times 0 [ 196.764744][T13081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.773841][T13086] CPU: 0 UID: 0 PID: 13086 Comm: syz.0.3373 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 196.773872][T13086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 196.773916][T13086] Call Trace: [ 196.773925][T13086] [ 196.773936][T13086] __dump_stack+0x1d/0x30 [ 196.774039][T13086] dump_stack_lvl+0xe8/0x140 [ 196.774088][T13086] dump_stack+0x15/0x1b [ 196.774110][T13086] should_fail_ex+0x265/0x280 [ 196.774221][T13086] should_failslab+0x8c/0xb0 [ 196.774329][T13086] __kmalloc_noprof+0xa5/0x3e0 [ 196.774352][T13086] ? sctp_make_abort_user+0x17b/0x3a0 [ 196.774390][T13086] sctp_make_abort_user+0x17b/0x3a0 [ 196.774424][T13086] ? sctp_epaddr_lookup_transport+0x9e/0x130 [ 196.774507][T13086] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 196.774614][T13086] sctp_sendmsg+0x75f/0x18d0 [ 196.774662][T13086] ? __pfx_sctp_sendmsg+0x10/0x10 [ 196.774856][T13086] inet_sendmsg+0xc2/0xd0 [ 196.774894][T13086] __sock_sendmsg+0x102/0x180 [ 196.774928][T13086] ____sys_sendmsg+0x345/0x4e0 [ 196.774956][T13086] ___sys_sendmsg+0x17b/0x1d0 [ 196.775024][T13086] __sys_sendmmsg+0x178/0x300 [ 196.775062][T13086] __x64_sys_sendmmsg+0x57/0x70 [ 196.775104][T13086] x64_sys_call+0x2f2f/0x2fb0 [ 196.775132][T13086] do_syscall_64+0xd0/0x1a0 [ 196.775159][T13086] ? clear_bhb_loop+0x25/0x80 [ 196.775260][T13086] ? clear_bhb_loop+0x25/0x80 [ 196.775288][T13086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.775314][T13086] RIP: 0033:0x7f27e170e969 [ 196.775335][T13086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.775357][T13086] RSP: 002b:00007f27dfd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 196.775388][T13086] RAX: ffffffffffffffda RBX: 00007f27e1935fa0 RCX: 00007f27e170e969 [ 196.775441][T13086] RDX: 0000000000000001 RSI: 0000200000000bc0 RDI: 0000000000000004 [ 196.775458][T13086] RBP: 00007f27dfd77090 R08: 0000000000000000 R09: 0000000000000000 [ 196.775540][T13086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.775555][T13086] R13: 0000000000000000 R14: 00007f27e1935fa0 R15: 00007ffc530d8d48 [ 196.775691][T13086] [ 196.778592][ T111] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 196.873100][T13081] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.985719][T13103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3379'. [ 197.004489][T13098] loop2: detected capacity change from 0 to 256 [ 197.057515][T13103] 9pnet_fd: Insufficient options for proto=fd [ 197.177499][T13113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.182910][T13112] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 197.264066][T13115] Falling back ldisc for ttyS3. [ 197.283032][T13113] loop3: detected capacity change from 0 to 512 [ 197.293034][T13113] EXT4-fs: Ignoring removed oldalloc option [ 197.300529][T13113] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 197.318925][T13113] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3383: invalid indirect mapped block 4294967295 (level 0) [ 197.336037][T13113] EXT4-fs (loop3): Remounting filesystem read-only [ 197.342934][T13113] EXT4-fs (loop3): 1 orphan inode deleted [ 197.349099][T13113] EXT4-fs (loop3): 1 truncate cleaned up [ 197.357104][T13113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.388596][T12141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.635514][T13141] Falling back ldisc for ttyS3. [ 197.858997][T13157] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3397'. [ 197.938024][T13162] loop3: detected capacity change from 0 to 512 [ 197.978210][T13162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.012224][T13162] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.058205][T13162] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.3399: corrupted inode contents [ 198.101269][T13162] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.3399: mark_inode_dirty error [ 198.152832][T13162] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.3399: corrupted inode contents [ 198.191078][T13162] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.3399: mark_inode_dirty error [ 198.236855][T12141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.311594][T13180] xt_hashlimit: max too large, truncated to 1048576 [ 198.449860][T13193] loop2: detected capacity change from 0 to 164 [ 198.459953][T13196] FAULT_INJECTION: forcing a failure. [ 198.459953][T13196] name failslab, interval 1, probability 0, space 0, times 0 [ 198.473178][T13196] CPU: 1 UID: 0 PID: 13196 Comm: syz.3.3411 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 198.473254][T13196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 198.473267][T13196] Call Trace: [ 198.473272][T13196] [ 198.473279][T13196] __dump_stack+0x1d/0x30 [ 198.473305][T13196] dump_stack_lvl+0xe8/0x140 [ 198.473362][T13196] dump_stack+0x15/0x1b [ 198.473382][T13196] should_fail_ex+0x265/0x280 [ 198.473445][T13196] should_failslab+0x8c/0xb0 [ 198.473475][T13196] kmem_cache_alloc_node_noprof+0x57/0x320 [ 198.473511][T13196] ? __alloc_skb+0x101/0x320 [ 198.473579][T13196] __alloc_skb+0x101/0x320 [ 198.473613][T13196] ? audit_log_start+0x365/0x6c0 [ 198.473699][T13196] audit_log_start+0x380/0x6c0 [ 198.473731][T13196] audit_seccomp+0x48/0x100 [ 198.473755][T13196] ? __seccomp_filter+0x68c/0x10d0 [ 198.473858][T13196] __seccomp_filter+0x69d/0x10d0 [ 198.473884][T13196] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 198.473915][T13196] ? vfs_write+0x75e/0x8d0 [ 198.473953][T13196] __secure_computing+0x82/0x150 [ 198.474038][T13196] syscall_trace_enter+0xcf/0x1e0 [ 198.474061][T13196] do_syscall_64+0xaa/0x1a0 [ 198.474084][T13196] ? clear_bhb_loop+0x25/0x80 [ 198.474109][T13196] ? clear_bhb_loop+0x25/0x80 [ 198.474205][T13196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.474270][T13196] RIP: 0033:0x7fd20bf8e969 [ 198.474288][T13196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.474310][T13196] RSP: 002b:00007fd20a5f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 198.474334][T13196] RAX: ffffffffffffffda RBX: 00007fd20c1b5fa0 RCX: 00007fd20bf8e969 [ 198.474351][T13196] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 000000000000ee00 [ 198.474366][T13196] RBP: 00007fd20a5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 198.474446][T13196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.474461][T13196] R13: 0000000000000000 R14: 00007fd20c1b5fa0 R15: 00007fff801db4d8 [ 198.474486][T13196] [ 198.730227][T13193] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 198.770140][T13200] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3413'. [ 198.802498][T13204] loop2: detected capacity change from 0 to 512 [ 198.843837][T13204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.858567][T13204] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.872998][T13204] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3414: corrupted inode contents [ 198.888069][T13204] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.3414: mark_inode_dirty error [ 198.901052][T13204] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3414: corrupted inode contents [ 198.914786][T13204] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.3414: mark_inode_dirty error [ 198.952986][T12648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.135317][T13247] FAULT_INJECTION: forcing a failure. [ 199.135317][T13247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.151825][T13247] CPU: 0 UID: 0 PID: 13247 Comm: syz.3.3429 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 199.151857][T13247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 199.151870][T13247] Call Trace: [ 199.151876][T13247] [ 199.151884][T13247] __dump_stack+0x1d/0x30 [ 199.151904][T13247] dump_stack_lvl+0xe8/0x140 [ 199.151931][T13247] dump_stack+0x15/0x1b [ 199.151947][T13247] should_fail_ex+0x265/0x280 [ 199.151993][T13247] should_fail+0xb/0x20 [ 199.152028][T13247] should_fail_usercopy+0x1a/0x20 [ 199.152051][T13247] _copy_from_iter+0xcf/0xdd0 [ 199.152120][T13247] ? __build_skb_around+0x1a0/0x200 [ 199.152159][T13247] ? __alloc_skb+0x223/0x320 [ 199.152205][T13247] netlink_sendmsg+0x471/0x6b0 [ 199.152322][T13247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.152423][T13247] __sock_sendmsg+0x142/0x180 [ 199.152532][T13247] ____sys_sendmsg+0x31e/0x4e0 [ 199.152555][T13247] ___sys_sendmsg+0x17b/0x1d0 [ 199.152632][T13247] __x64_sys_sendmsg+0xd4/0x160 [ 199.152662][T13247] x64_sys_call+0x2999/0x2fb0 [ 199.152688][T13247] do_syscall_64+0xd0/0x1a0 [ 199.152716][T13247] ? clear_bhb_loop+0x25/0x80 [ 199.152738][T13247] ? clear_bhb_loop+0x25/0x80 [ 199.152763][T13247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.152790][T13247] RIP: 0033:0x7fd20bf8e969 [ 199.152808][T13247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.152848][T13247] RSP: 002b:00007fd20a5f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.152866][T13247] RAX: ffffffffffffffda RBX: 00007fd20c1b5fa0 RCX: 00007fd20bf8e969 [ 199.152881][T13247] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 199.152941][T13247] RBP: 00007fd20a5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.152974][T13247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.152985][T13247] R13: 0000000000000000 R14: 00007fd20c1b5fa0 R15: 00007fff801db4d8 [ 199.153004][T13247] [ 199.379133][T13249] loop0: detected capacity change from 0 to 512 [ 199.416311][T13249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.455609][T13249] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.504841][T13249] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.3430: corrupted inode contents [ 199.526293][T13249] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.3430: mark_inode_dirty error [ 199.548100][T13249] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.3430: corrupted inode contents [ 199.553126][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3434'. [ 199.585123][T13249] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.3430: mark_inode_dirty error [ 199.595297][T13263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=13263 comm=syz.1.3434 [ 199.616343][T13258] Falling back ldisc for ttyS3. [ 199.639244][T11813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.655546][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3434'. [ 199.704443][T13274] loop0: detected capacity change from 0 to 128 [ 199.732642][T13274] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 199.766590][T13274] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.815860][T13284] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3440'. [ 199.843276][T13274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3437'. [ 199.888580][T13284] pim6reg1: entered promiscuous mode [ 199.895961][T13284] pim6reg1: entered allmulticast mode [ 200.006008][T13285] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.027821][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 200.027835][ T29] audit: type=1326 audit(1746432217.677:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13295 comm="syz.3.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 200.070718][ T29] audit: type=1326 audit(1746432217.707:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13295 comm="syz.3.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 200.101946][T13302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3447'. [ 200.112598][T13302] 9pnet_fd: Insufficient options for proto=fd [ 200.226749][T13310] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.286254][T13316] netlink: 'syz.3.3452': attribute type 1 has an invalid length. [ 200.304216][T13308] Falling back ldisc for ttyS3. [ 200.362516][T13319] FAULT_INJECTION: forcing a failure. [ 200.362516][T13319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.378811][T13319] CPU: 1 UID: 0 PID: 13319 Comm: syz.0.3453 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 200.378839][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 200.378881][T13319] Call Trace: [ 200.378888][T13319] [ 200.378896][T13319] __dump_stack+0x1d/0x30 [ 200.378921][T13319] dump_stack_lvl+0xe8/0x140 [ 200.378968][T13319] dump_stack+0x15/0x1b [ 200.378985][T13319] should_fail_ex+0x265/0x280 [ 200.379024][T13319] should_fail+0xb/0x20 [ 200.379053][T13319] should_fail_usercopy+0x1a/0x20 [ 200.379099][T13319] _copy_to_user+0x20/0xa0 [ 200.379120][T13319] snd_seq_ioctl+0x223/0x2e0 [ 200.379175][T13319] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 200.379199][T13319] __se_sys_ioctl+0xcb/0x140 [ 200.379253][T13319] __x64_sys_ioctl+0x43/0x50 [ 200.379276][T13319] x64_sys_call+0x19a8/0x2fb0 [ 200.379296][T13319] do_syscall_64+0xd0/0x1a0 [ 200.379385][T13319] ? clear_bhb_loop+0x25/0x80 [ 200.379490][T13319] ? clear_bhb_loop+0x25/0x80 [ 200.379513][T13319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.379539][T13319] RIP: 0033:0x7f27e170e969 [ 200.379558][T13319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.379577][T13319] RSP: 002b:00007f27dfd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.379596][T13319] RAX: ffffffffffffffda RBX: 00007f27e1935fa0 RCX: 00007f27e170e969 [ 200.379673][T13319] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000003 [ 200.379684][T13319] RBP: 00007f27dfd77090 R08: 0000000000000000 R09: 0000000000000000 [ 200.379771][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.379786][T13319] R13: 0000000000000000 R14: 00007f27e1935fa0 R15: 00007ffc530d8d48 [ 200.379810][T13319] [ 200.703142][T13324] loop0: detected capacity change from 0 to 256 [ 201.196595][T13362] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3467'. [ 201.236788][ T29] audit: type=1400 audit(1746432218.887:6798): avc: denied { mount } for pid=13364 comm="syz.3.3468" name="/" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 201.270273][T13365] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3468'. [ 201.282273][T13365] netlink: 'syz.3.3468': attribute type 5 has an invalid length. [ 201.291876][T13365] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3468'. [ 201.304475][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3466'. [ 201.316127][ T29] audit: type=1400 audit(1746432218.917:6799): avc: denied { search } for pid=13364 comm="syz.3.3468" name="/" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.379725][T13389] loop0: detected capacity change from 0 to 256 [ 201.393979][T13391] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3471'. [ 201.409833][ T29] audit: type=1326 audit(1746432218.997:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd20bf85927 code=0x7ffc0000 [ 201.435341][ T29] audit: type=1326 audit(1746432218.997:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd20bf2ab39 code=0x7ffc0000 [ 201.462537][ T29] audit: type=1326 audit(1746432218.997:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd20bf85927 code=0x7ffc0000 [ 201.491947][ T29] audit: type=1326 audit(1746432218.997:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd20bf2ab39 code=0x7ffc0000 [ 201.515789][T13395] 9pnet_fd: Insufficient options for proto=fd [ 201.521304][ T29] audit: type=1326 audit(1746432218.997:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 201.556328][ T29] audit: type=1326 audit(1746432218.997:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.3.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 201.760614][T13426] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 201.779765][T13400] IPVS: stopping master sync thread 13426 ... [ 202.399273][T13449] FAULT_INJECTION: forcing a failure. [ 202.399273][T13449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.414053][T13449] CPU: 1 UID: 0 PID: 13449 Comm: syz.3.3478 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 202.414099][T13449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 202.414114][T13449] Call Trace: [ 202.414122][T13449] [ 202.414132][T13449] __dump_stack+0x1d/0x30 [ 202.414203][T13449] dump_stack_lvl+0xe8/0x140 [ 202.414303][T13449] dump_stack+0x15/0x1b [ 202.414323][T13449] should_fail_ex+0x265/0x280 [ 202.414354][T13449] should_fail+0xb/0x20 [ 202.414384][T13449] should_fail_usercopy+0x1a/0x20 [ 202.414476][T13449] _copy_to_user+0x20/0xa0 [ 202.414503][T13449] simple_read_from_buffer+0xb5/0x130 [ 202.414533][T13449] proc_fail_nth_read+0x100/0x140 [ 202.414639][T13449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.414669][T13449] vfs_read+0x19d/0x6f0 [ 202.414752][T13449] ? __rcu_read_unlock+0x4f/0x70 [ 202.414778][T13449] ? __fget_files+0x184/0x1c0 [ 202.414813][T13449] ksys_read+0xda/0x1a0 [ 202.414901][T13449] __x64_sys_read+0x40/0x50 [ 202.414931][T13449] x64_sys_call+0x2d77/0x2fb0 [ 202.414954][T13449] do_syscall_64+0xd0/0x1a0 [ 202.415026][T13449] ? clear_bhb_loop+0x25/0x80 [ 202.415053][T13449] ? clear_bhb_loop+0x25/0x80 [ 202.415077][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.415162][T13449] RIP: 0033:0x7fd20bf8d37c [ 202.415181][T13449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.415202][T13449] RSP: 002b:00007fd20a5f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.415219][T13449] RAX: ffffffffffffffda RBX: 00007fd20c1b5fa0 RCX: 00007fd20bf8d37c [ 202.415339][T13449] RDX: 000000000000000f RSI: 00007fd20a5f70a0 RDI: 0000000000000005 [ 202.415350][T13449] RBP: 00007fd20a5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 202.415364][T13449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.415379][T13449] R13: 0000000000000000 R14: 00007fd20c1b5fa0 R15: 00007fff801db4d8 [ 202.415404][T13449] [ 202.748986][T13461] loop0: detected capacity change from 0 to 256 [ 202.850079][T13469] loop3: detected capacity change from 0 to 256 [ 202.926800][T13471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=13471 comm=syz.2.3487 [ 202.975987][T13471] loop2: detected capacity change from 0 to 512 [ 203.078684][T13477] loop0: detected capacity change from 0 to 1024 [ 203.154438][T13477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.186311][T13477] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.3490: Allocating blocks 385-513 which overlap fs metadata [ 203.234908][T13477] EXT4-fs (loop0): pa ffff8881006c2700: logic 16, phys. 129, len 24 [ 203.244340][T13477] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 203.338933][T11813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.360116][T13505] loop3: detected capacity change from 0 to 2048 [ 203.377752][T13507] loop2: detected capacity change from 0 to 256 [ 203.436920][T13505] loop3: unable to read partition table [ 203.446834][T13505] loop3: partition table beyond EOD, truncated [ 203.453284][T13505] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 203.475276][T13515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.584080][T13526] tipc: Started in network mode [ 203.589181][T13526] tipc: Node identity 8a90552b6f4b, cluster identity 4711 [ 203.597214][T13526] tipc: Enabled bearer , priority 0 [ 203.610136][T13526] tipc: Disabling bearer [ 203.802141][T13534] 9pnet_fd: Insufficient options for proto=fd [ 204.144185][T13571] loop2: detected capacity change from 0 to 1024 [ 204.171450][T13571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.204417][T12648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.229172][T13572] Falling back ldisc for ttyS3. [ 204.240200][T13577] netlink: 'syz.2.3525': attribute type 2 has an invalid length. [ 204.250171][T13577] netlink: 'syz.2.3525': attribute type 1 has an invalid length. [ 204.265099][T13577] loop2: detected capacity change from 0 to 512 [ 204.279818][T13577] EXT4-fs (loop2): 1 orphan inode deleted [ 204.286837][T13577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.302750][T13412] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:51: Failed to release dquot type 1 [ 204.320726][T13577] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.446205][T12648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.471184][T13589] Invalid ELF header magic: != ELF [ 204.575055][T13599] loop3: detected capacity change from 0 to 8192 [ 204.614329][T13599] loop3: p1 < > p2 p4 [ 204.618724][T13599] loop3: partition table partially beyond EOD, truncated [ 204.623219][T13607] __nla_validate_parse: 9 callbacks suppressed [ 204.623242][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3538'. [ 204.627471][T13599] loop3: p1 start 408832 is beyond EOD, truncated [ 204.649992][T13599] loop3: p2 size 8388352 extends beyond EOD, truncated [ 204.726754][T13624] loop2: detected capacity change from 0 to 512 [ 205.093233][T13636] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3549'. [ 205.140840][T13636] pim6reg1: entered promiscuous mode [ 205.152543][T13636] pim6reg1: entered allmulticast mode [ 205.267112][T13638] loop2: detected capacity change from 0 to 512 [ 205.297217][T13638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.314022][T13638] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.332247][T13638] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3550: corrupted inode contents [ 205.348160][T13638] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.3550: mark_inode_dirty error [ 205.362752][T13638] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3550: corrupted inode contents [ 205.378064][T13638] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.3550: mark_inode_dirty error [ 205.407648][T12648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.590850][T13652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=13652 comm=syz.1.3555 [ 205.745936][T13660] FAULT_INJECTION: forcing a failure. [ 205.745936][T13660] name failslab, interval 1, probability 0, space 0, times 0 [ 205.762028][T13660] CPU: 1 UID: 0 PID: 13660 Comm: syz.3.3558 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 205.762060][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 205.762075][T13660] Call Trace: [ 205.762119][T13660] [ 205.762129][T13660] __dump_stack+0x1d/0x30 [ 205.762165][T13660] dump_stack_lvl+0xe8/0x140 [ 205.762189][T13660] dump_stack+0x15/0x1b [ 205.762210][T13660] should_fail_ex+0x265/0x280 [ 205.762322][T13660] should_failslab+0x8c/0xb0 [ 205.762358][T13660] kmem_cache_alloc_noprof+0x50/0x310 [ 205.762397][T13660] ? skb_clone+0x151/0x1f0 [ 205.762422][T13660] skb_clone+0x151/0x1f0 [ 205.762472][T13660] __netlink_deliver_tap+0x2c9/0x500 [ 205.762514][T13660] netlink_unicast+0x64c/0x670 [ 205.762558][T13660] netlink_sendmsg+0x58b/0x6b0 [ 205.762634][T13660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.762717][T13660] __sock_sendmsg+0x142/0x180 [ 205.762746][T13660] ____sys_sendmsg+0x31e/0x4e0 [ 205.762768][T13660] ___sys_sendmsg+0x17b/0x1d0 [ 205.762804][T13660] __x64_sys_sendmsg+0xd4/0x160 [ 205.762831][T13660] x64_sys_call+0x2999/0x2fb0 [ 205.762855][T13660] do_syscall_64+0xd0/0x1a0 [ 205.762880][T13660] ? clear_bhb_loop+0x25/0x80 [ 205.762931][T13660] ? clear_bhb_loop+0x25/0x80 [ 205.762986][T13660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.763011][T13660] RIP: 0033:0x7fd20bf8e969 [ 205.763030][T13660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.763152][T13660] RSP: 002b:00007fd20a5f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.763171][T13660] RAX: ffffffffffffffda RBX: 00007fd20c1b5fa0 RCX: 00007fd20bf8e969 [ 205.763183][T13660] RDX: 0000000000001040 RSI: 00002000000012c0 RDI: 0000000000000003 [ 205.763230][T13660] RBP: 00007fd20a5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 205.763244][T13660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.763258][T13660] R13: 0000000000000000 R14: 00007fd20c1b5fa0 R15: 00007fff801db4d8 [ 205.763338][T13660] [ 205.764959][T13660] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3558'. [ 205.911224][T13663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=13663 comm=syz.0.3559 [ 206.019636][T13662] vhci_hcd: invalid port number 216 [ 206.025226][T13662] vhci_hcd: default hub control req: 000e v0009 i00d8 l0 [ 206.040602][T13662] loop0: detected capacity change from 0 to 2048 [ 206.049040][T13662] ext4: Unknown parameter 'hash' [ 206.142172][T13669] loop3: detected capacity change from 0 to 512 [ 206.165223][T13669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.188033][T13669] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.209519][T13669] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.3561: corrupted inode contents [ 206.239694][T13669] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.3561: mark_inode_dirty error [ 206.277754][T13669] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.3561: corrupted inode contents [ 206.302028][T13677] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3564'. [ 206.317218][T13669] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.3561: mark_inode_dirty error [ 206.365426][T13677] pim6reg1: entered promiscuous mode [ 206.372896][T13677] pim6reg1: entered allmulticast mode [ 206.384261][T12141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.027076][T13702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=13702 comm=syz.3.3572 [ 207.069443][T13703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=13703 comm=syz.1.3573 [ 207.086735][T13702] loop3: detected capacity change from 0 to 512 [ 207.413514][T13705] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3574'. [ 207.580861][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 207.580919][ T29] audit: type=1326 audit(1746432225.227:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13714 comm="syz.0.3577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27e170e969 code=0x0 [ 207.964352][T13721] Falling back ldisc for ttyS3. [ 208.037517][T13720] x_tables: unsorted underflow at hook 1 [ 208.462255][T13735] loop0: detected capacity change from 0 to 256 [ 208.669332][ T29] audit: type=1326 audit(1746432226.317:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e170e969 code=0x7ffc0000 [ 208.700242][T13739] Falling back ldisc for ttyS3. [ 208.719769][ T29] audit: type=1326 audit(1746432226.317:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e170e969 code=0x7ffc0000 [ 208.748005][ T29] audit: type=1326 audit(1746432226.317:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e170e969 code=0x7ffc0000 [ 208.776428][ T29] audit: type=1326 audit(1746432226.317:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e170e969 code=0x7ffc0000 [ 208.805000][ T29] audit: type=1326 audit(1746432226.317:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e170e969 code=0x7ffc0000 [ 208.835844][ T29] audit: type=1326 audit(1746432226.397:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e170e969 code=0x7ffc0000 [ 208.862313][ T29] audit: type=1326 audit(1746432226.397:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e170e969 code=0x7ffc0000 [ 208.888016][ T29] audit: type=1326 audit(1746432226.457:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e170e969 code=0x7ffc0000 [ 208.912803][ T29] audit: type=1326 audit(1746432226.457:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e170e969 code=0x7ffc0000 [ 209.074234][T13753] Falling back ldisc for ttyS3. [ 209.132874][T13767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3594'. [ 209.145254][T13767] 9pnet_fd: Insufficient options for proto=fd [ 209.267737][T13771] loop3: detected capacity change from 0 to 2048 [ 209.318264][T13771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.696482][T13777] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3596'. [ 209.864606][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3598'. [ 209.990803][T13784] loop2: detected capacity change from 0 to 512 [ 210.007986][T13784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.022622][T13784] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.057566][T12648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.107670][T12141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.123184][T13795] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3602'. [ 210.135140][T13797] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3603'. [ 210.194344][T13803] Invalid ELF header magic: != ELF [ 210.260314][T13808] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3607'. [ 210.303381][T13818] loop2: detected capacity change from 0 to 256 [ 210.306502][T13808] pim6reg1: entered promiscuous mode [ 210.318328][T13808] pim6reg1: entered allmulticast mode [ 210.492203][T13841] FAULT_INJECTION: forcing a failure. [ 210.492203][T13841] name failslab, interval 1, probability 0, space 0, times 0 [ 210.508065][T13841] CPU: 1 UID: 0 PID: 13841 Comm: syz.2.3623 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 210.508127][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 210.508163][T13841] Call Trace: [ 210.508171][T13841] [ 210.508181][T13841] __dump_stack+0x1d/0x30 [ 210.508207][T13841] dump_stack_lvl+0xe8/0x140 [ 210.508231][T13841] dump_stack+0x15/0x1b [ 210.508296][T13841] should_fail_ex+0x265/0x280 [ 210.508336][T13841] should_failslab+0x8c/0xb0 [ 210.508372][T13841] kmem_cache_alloc_node_noprof+0x57/0x320 [ 210.508487][T13841] ? __alloc_skb+0x101/0x320 [ 210.508528][T13841] __alloc_skb+0x101/0x320 [ 210.508567][T13841] netlink_alloc_large_skb+0xba/0xf0 [ 210.508604][T13841] netlink_sendmsg+0x3cf/0x6b0 [ 210.508717][T13841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.508756][T13841] __sock_sendmsg+0x142/0x180 [ 210.508856][T13841] ____sys_sendmsg+0x31e/0x4e0 [ 210.508926][T13841] ___sys_sendmsg+0x17b/0x1d0 [ 210.508968][T13841] __x64_sys_sendmsg+0xd4/0x160 [ 210.508999][T13841] x64_sys_call+0x2999/0x2fb0 [ 210.509025][T13841] do_syscall_64+0xd0/0x1a0 [ 210.509132][T13841] ? clear_bhb_loop+0x25/0x80 [ 210.509157][T13841] ? clear_bhb_loop+0x25/0x80 [ 210.509238][T13841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.509264][T13841] RIP: 0033:0x7fbf5c98e969 [ 210.509282][T13841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.509301][T13841] RSP: 002b:00007fbf5aff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.509319][T13841] RAX: ffffffffffffffda RBX: 00007fbf5cbb5fa0 RCX: 00007fbf5c98e969 [ 210.509376][T13841] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000003 [ 210.509392][T13841] RBP: 00007fbf5aff7090 R08: 0000000000000000 R09: 0000000000000000 [ 210.509408][T13841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.509423][T13841] R13: 0000000000000000 R14: 00007fbf5cbb5fa0 R15: 00007ffd76a916e8 [ 210.509457][T13841] [ 210.848500][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3627'. [ 210.866467][T13857] loop2: detected capacity change from 0 to 256 [ 210.893084][T13854] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.966256][T13854] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.049682][T13854] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.117083][T13854] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.180905][T13854] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.209721][T13854] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.225954][T13854] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.241460][T13854] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.281936][T13880] loop2: detected capacity change from 0 to 512 [ 211.300274][T13880] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 211.323051][T13880] EXT4-fs (loop2): 1 truncate cleaned up [ 211.335546][T13880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.351637][T13883] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3638'. [ 211.407246][T12648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.444278][T13877] Falling back ldisc for ttyS3. [ 211.444868][T13888] FAULT_INJECTION: forcing a failure. [ 211.444868][T13888] name failslab, interval 1, probability 0, space 0, times 0 [ 211.462939][T13888] CPU: 0 UID: 0 PID: 13888 Comm: syz.1.3639 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 211.462972][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 211.462997][T13888] Call Trace: [ 211.463005][T13888] [ 211.463016][T13888] __dump_stack+0x1d/0x30 [ 211.463042][T13888] dump_stack_lvl+0xe8/0x140 [ 211.463065][T13888] dump_stack+0x15/0x1b [ 211.463090][T13888] should_fail_ex+0x265/0x280 [ 211.463129][T13888] should_failslab+0x8c/0xb0 [ 211.463164][T13888] kmem_cache_alloc_noprof+0x50/0x310 [ 211.463205][T13888] ? mas_alloc_nodes+0x265/0x520 [ 211.463234][T13888] mas_alloc_nodes+0x265/0x520 [ 211.463270][T13888] mas_preallocate+0x456/0x680 [ 211.463303][T13888] __split_vma+0x239/0x610 [ 211.463344][T13888] vms_gather_munmap_vmas+0x172/0x7a0 [ 211.463378][T13888] ? mas_find+0x515/0x610 [ 211.463409][T13888] ? context_to_sid+0x2da/0x310 [ 211.463441][T13888] mmap_region+0x44f/0x1470 [ 211.463478][T13888] ? mls_compute_sid+0x139/0x560 [ 211.463497][T13888] ? mls_context_isvalid+0x85/0x1f0 [ 211.463518][T13888] ? ebitmap_destroy+0x7d/0xa0 [ 211.463559][T13888] do_mmap+0x9de/0xc20 [ 211.463591][T13888] vm_mmap_pgoff+0x17a/0x2e0 [ 211.463621][T13888] ksys_mmap_pgoff+0x2d0/0x310 [ 211.463652][T13888] x64_sys_call+0x1602/0x2fb0 [ 211.463686][T13888] do_syscall_64+0xd0/0x1a0 [ 211.463713][T13888] ? clear_bhb_loop+0x25/0x80 [ 211.463737][T13888] ? clear_bhb_loop+0x25/0x80 [ 211.463757][T13888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.463783][T13888] RIP: 0033:0x7fe9fc0fe969 [ 211.463802][T13888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.463819][T13888] RSP: 002b:00007fe9fa767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 211.463836][T13888] RAX: ffffffffffffffda RBX: 00007fe9fc325fa0 RCX: 00007fe9fc0fe969 [ 211.463854][T13888] RDX: 0000000003000002 RSI: 0000000000c00000 RDI: 0000200000400000 [ 211.463868][T13888] RBP: 00007fe9fa767090 R08: ffffffffffffffff R09: 0000000000000000 [ 211.463883][T13888] R10: 000000000005d031 R11: 0000000000000246 R12: 0000000000000001 [ 211.463896][T13888] R13: 0000000000000000 R14: 00007fe9fc325fa0 R15: 00007ffda5e7f4e8 [ 211.463919][T13888] [ 211.742595][T13891] loop2: detected capacity change from 0 to 512 [ 211.762082][T13891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.777896][T13891] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.821352][T12648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.909464][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 211.920429][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'. [ 212.315557][T13907] chnl_net:caif_netlink_parms(): no params data found [ 212.479048][T13954] netlink: 'syz.1.3659': attribute type 2 has an invalid length. [ 212.487054][T13954] netlink: 'syz.1.3659': attribute type 1 has an invalid length. [ 212.677661][T13959] x_tables: duplicate underflow at hook 3 [ 212.772845][T13948] can0: slcan on ttyS3. [ 212.799395][T13907] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.806898][T13907] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.815779][T13907] bridge_slave_0: entered allmulticast mode [ 212.823807][T13907] bridge_slave_0: entered promiscuous mode [ 212.831737][T13907] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.840819][T13907] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.849198][T13907] bridge_slave_1: entered allmulticast mode [ 212.859136][T13907] bridge_slave_1: entered promiscuous mode [ 212.869716][T13965] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3663'. [ 212.908872][T13907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.923309][T13907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.963935][T13907] team0: Port device team_slave_0 added [ 212.972185][T13907] team0: Port device team_slave_1 added [ 213.058873][T13968] hsr_slave_0: left promiscuous mode [ 213.067649][T13968] hsr_slave_1: left promiscuous mode [ 213.079062][T13907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.086273][T13907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.116037][T13907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.141912][T13907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.150203][T13907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.180332][T13907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.193992][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 213.194008][ T29] audit: type=1326 audit(1746432230.837:6996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 213.227875][ T29] audit: type=1326 audit(1746432230.837:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 213.256094][ T29] audit: type=1326 audit(1746432230.837:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 213.280601][ T29] audit: type=1326 audit(1746432230.837:6999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 213.309453][ T29] audit: type=1326 audit(1746432230.837:7000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 213.337228][ T29] audit: type=1326 audit(1746432230.837:7001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 213.377229][ T29] audit: type=1326 audit(1746432230.847:7002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 213.403211][ T29] audit: type=1326 audit(1746432230.847:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 213.405484][T13940] can0 (unregistered): slcan off ttyS3. [ 213.428474][ T29] audit: type=1326 audit(1746432230.847:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 213.459903][ T29] audit: type=1326 audit(1746432230.847:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 213.513511][T13907] hsr_slave_0: entered promiscuous mode [ 213.521553][T13907] hsr_slave_1: entered promiscuous mode [ 213.528880][T13907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.537672][T13907] Cannot create hsr debugfs directory [ 213.644305][T13907] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 213.653536][T13907] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 213.663763][T13907] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 213.674294][T13907] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 213.798611][T13907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.828893][T13907] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.842000][T13425] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.849545][T13425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.863168][T13425] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.870512][T13425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.911639][T13907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.922579][T13907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.143845][T13907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.411164][T14020] loop0: detected capacity change from 0 to 512 [ 214.483138][T14020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 214.497953][T13907] veth0_vlan: entered promiscuous mode [ 214.523554][T14020] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.549091][T13907] veth1_vlan: entered promiscuous mode [ 214.572476][T13907] veth0_macvtap: entered promiscuous mode [ 214.582671][T13907] veth1_macvtap: entered promiscuous mode [ 214.595108][T13907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.609372][T13907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.621573][T13907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.633534][T13907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.645649][T13907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.657788][T13907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.668399][T13907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.681303][T13907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.698970][T13907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.708908][T13907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.721638][T13907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.735309][T13907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.746683][T13907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.757826][T13907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.770736][T13907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.783809][T13907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.795711][T13907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.812759][T13907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.844360][T13907] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.856041][T13907] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.863779][T14030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=14030 comm=syz.1.3679 [ 214.867214][T13907] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.867321][T13907] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.908110][T14020] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.3677: corrupted inode contents [ 214.936767][T14020] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #19: comm syz.0.3677: mark_inode_dirty error [ 214.960463][T14020] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.3677: corrupted inode contents [ 214.988133][T14020] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.3677: mark_inode_dirty error [ 215.009926][T14020] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.3677: mark inode dirty (error -117) [ 215.032206][T14020] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 215.172566][T14052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=14052 comm=syz.2.3683 [ 215.187509][T14056] loop7: detected capacity change from 0 to 256 [ 215.213480][T14052] loop2: detected capacity change from 0 to 512 [ 215.242185][T11813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 215.404105][T14057] Falling back ldisc for ttyS3. [ 216.134232][T14114] netlink: 'syz.1.3713': attribute type 2 has an invalid length. [ 216.144887][T14114] netlink: 'syz.1.3713': attribute type 1 has an invalid length. [ 216.155069][T14116] FAULT_INJECTION: forcing a failure. [ 216.155069][T14116] name failslab, interval 1, probability 0, space 0, times 0 [ 216.169851][T14116] CPU: 0 UID: 0 PID: 14116 Comm: syz.0.3714 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 216.169879][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 216.169902][T14116] Call Trace: [ 216.169911][T14116] [ 216.169922][T14116] __dump_stack+0x1d/0x30 [ 216.169949][T14116] dump_stack_lvl+0xe8/0x140 [ 216.170007][T14116] dump_stack+0x15/0x1b [ 216.170026][T14116] should_fail_ex+0x265/0x280 [ 216.170058][T14116] should_failslab+0x8c/0xb0 [ 216.170089][T14116] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 216.170156][T14116] ? sidtab_sid2str_get+0xa0/0x130 [ 216.170492][T14116] kmemdup_noprof+0x2b/0x70 [ 216.170557][T14116] sidtab_sid2str_get+0xa0/0x130 [ 216.170595][T14116] security_sid_to_context_core+0x1eb/0x2e0 [ 216.170706][T14116] security_sid_to_context+0x27/0x40 [ 216.170862][T14116] selinux_lsmprop_to_secctx+0x67/0xf0 [ 216.170898][T14116] security_lsmprop_to_secctx+0x43/0x80 [ 216.170967][T14116] audit_log_task_context+0x77/0x190 [ 216.171035][T14116] audit_log_task+0xf4/0x250 [ 216.171064][T14116] audit_seccomp+0x61/0x100 [ 216.171091][T14116] ? __seccomp_filter+0x68c/0x10d0 [ 216.171114][T14116] __seccomp_filter+0x69d/0x10d0 [ 216.171175][T14116] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.171202][T14116] ? vfs_write+0x75e/0x8d0 [ 216.171235][T14116] __secure_computing+0x82/0x150 [ 216.171281][T14116] syscall_trace_enter+0xcf/0x1e0 [ 216.171306][T14116] do_syscall_64+0xaa/0x1a0 [ 216.171346][T14116] ? clear_bhb_loop+0x25/0x80 [ 216.171372][T14116] ? clear_bhb_loop+0x25/0x80 [ 216.171445][T14116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.171468][T14116] RIP: 0033:0x7f27e170e969 [ 216.171486][T14116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.171504][T14116] RSP: 002b:00007f27dfd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000006c [ 216.171528][T14116] RAX: ffffffffffffffda RBX: 00007f27e1935fa0 RCX: 00007f27e170e969 [ 216.171698][T14116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.171714][T14116] RBP: 00007f27dfd77090 R08: 0000000000000000 R09: 0000000000000000 [ 216.171727][T14116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.171741][T14116] R13: 0000000000000000 R14: 00007f27e1935fa0 R15: 00007ffc530d8d48 [ 216.171773][T14116] [ 216.512974][T14124] FAULT_INJECTION: forcing a failure. [ 216.512974][T14124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.529259][T14124] CPU: 0 UID: 0 PID: 14124 Comm: syz.3.3718 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 216.529295][T14124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 216.529307][T14124] Call Trace: [ 216.529314][T14124] [ 216.529381][T14124] __dump_stack+0x1d/0x30 [ 216.529427][T14124] dump_stack_lvl+0xe8/0x140 [ 216.529490][T14124] dump_stack+0x15/0x1b [ 216.529511][T14124] should_fail_ex+0x265/0x280 [ 216.529553][T14124] should_fail+0xb/0x20 [ 216.529587][T14124] should_fail_usercopy+0x1a/0x20 [ 216.529611][T14124] _copy_to_user+0x20/0xa0 [ 216.529637][T14124] sk_getsockopt+0x14f8/0x1810 [ 216.529761][T14124] ? selinux_socket_getsockopt+0x175/0x1b0 [ 216.529795][T14124] ? should_fail_ex+0xdb/0x280 [ 216.529827][T14124] do_sock_getsockopt+0x14d/0x240 [ 216.529944][T14124] __x64_sys_getsockopt+0x11e/0x1a0 [ 216.530000][T14124] x64_sys_call+0x12aa/0x2fb0 [ 216.530021][T14124] do_syscall_64+0xd0/0x1a0 [ 216.530049][T14124] ? clear_bhb_loop+0x25/0x80 [ 216.530085][T14124] ? clear_bhb_loop+0x25/0x80 [ 216.530139][T14124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.530162][T14124] RIP: 0033:0x7fd20bf8e969 [ 216.530178][T14124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.530195][T14124] RSP: 002b:00007fd20a5f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 216.530226][T14124] RAX: ffffffffffffffda RBX: 00007fd20c1b5fa0 RCX: 00007fd20bf8e969 [ 216.530242][T14124] RDX: 000000000000004c RSI: 0000000000000001 RDI: 0000000000000003 [ 216.530257][T14124] RBP: 00007fd20a5f7090 R08: 0000200000000540 R09: 0000000000000000 [ 216.530273][T14124] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 216.530288][T14124] R13: 0000000000000000 R14: 00007fd20c1b5fa0 R15: 00007fff801db4d8 [ 216.530313][T14124] [ 216.788994][T14122] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 216.829082][T14131] __nla_validate_parse: 4 callbacks suppressed [ 216.829103][T14131] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3722'. [ 216.849989][T14131] 9pnet_fd: Insufficient options for proto=fd [ 216.977028][T14139] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 217.003099][T14141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3721'. [ 217.019874][T14141] 9pnet_fd: Insufficient options for proto=fd [ 217.108832][T14141] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 217.165749][T14148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3726'. [ 217.244438][T14149] Falling back ldisc for ttyS3. [ 217.321261][T14153] Invalid ELF header magic: != ELF [ 217.394383][T14157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3729'. [ 217.588708][T14163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=14163 comm=syz.7.3731 [ 217.628041][T14163] loop7: detected capacity change from 0 to 512 [ 217.631886][T14165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3732'. [ 217.802624][T14167] FAULT_INJECTION: forcing a failure. [ 217.802624][T14167] name failslab, interval 1, probability 0, space 0, times 0 [ 217.817712][T14167] CPU: 1 UID: 0 PID: 14167 Comm: syz.1.3733 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 217.817747][T14167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 217.817764][T14167] Call Trace: [ 217.817771][T14167] [ 217.817780][T14167] __dump_stack+0x1d/0x30 [ 217.817864][T14167] dump_stack_lvl+0xe8/0x140 [ 217.817889][T14167] dump_stack+0x15/0x1b [ 217.817910][T14167] should_fail_ex+0x265/0x280 [ 217.818005][T14167] ? tipc_nametbl_lookup_group+0x451/0x630 [ 217.818033][T14167] should_failslab+0x8c/0xb0 [ 217.818126][T14167] __kmalloc_cache_noprof+0x4c/0x320 [ 217.818155][T14167] tipc_nametbl_lookup_group+0x451/0x630 [ 217.818183][T14167] __tipc_sendmsg+0x409/0x1b00 [ 217.818287][T14167] ? __rcu_read_unlock+0x4f/0x70 [ 217.818324][T14167] __tipc_sendstream+0xa23/0xb30 [ 217.818413][T14167] ? __cond_resched+0x4e/0x90 [ 217.818452][T14167] ? __cond_resched+0x4e/0x90 [ 217.818499][T14167] ? _raw_spin_unlock_bh+0x36/0x40 [ 217.818534][T14167] tipc_send_packet+0x65/0x80 [ 217.818565][T14167] ? __pfx_tipc_send_packet+0x10/0x10 [ 217.818664][T14167] __sock_sendmsg+0x142/0x180 [ 217.818698][T14167] ____sys_sendmsg+0x31e/0x4e0 [ 217.818727][T14167] ___sys_sendmsg+0x17b/0x1d0 [ 217.818772][T14167] __x64_sys_sendmsg+0xd4/0x160 [ 217.818803][T14167] x64_sys_call+0x2999/0x2fb0 [ 217.818907][T14167] do_syscall_64+0xd0/0x1a0 [ 217.818934][T14167] ? clear_bhb_loop+0x25/0x80 [ 217.818961][T14167] ? clear_bhb_loop+0x25/0x80 [ 217.819072][T14167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.819121][T14167] RIP: 0033:0x7fe9fc0fe969 [ 217.819139][T14167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.819156][T14167] RSP: 002b:00007fe9fa767038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.819177][T14167] RAX: ffffffffffffffda RBX: 00007fe9fc325fa0 RCX: 00007fe9fc0fe969 [ 217.819192][T14167] RDX: 0000000004008030 RSI: 0000200000000400 RDI: 0000000000000003 [ 217.819212][T14167] RBP: 00007fe9fa767090 R08: 0000000000000000 R09: 0000000000000000 [ 217.819228][T14167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.819242][T14167] R13: 0000000000000000 R14: 00007fe9fc325fa0 R15: 00007ffda5e7f4e8 [ 217.819267][T14167] [ 218.153178][T14171] netlink: 'syz.1.3735': attribute type 4 has an invalid length. [ 218.507146][T14190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3743'. [ 218.622673][T14191] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3740'. [ 218.641448][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 218.641465][ T29] audit: type=1400 audit(1746432236.287:7200): avc: denied { create } for pid=14183 comm="syz.0.3740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 218.680242][ T29] audit: type=1400 audit(1746432236.327:7201): avc: denied { ioctl } for pid=14183 comm="syz.0.3740" path="socket:[40205]" dev="sockfs" ino=40205 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 218.716486][T14193] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3744'. [ 218.736028][T14193] 9pnet_fd: Insufficient options for proto=fd [ 218.763308][ T29] audit: type=1400 audit(1746432236.407:7202): avc: denied { ioctl } for pid=14197 comm="syz.2.3746" path="socket:[40218]" dev="sockfs" ino=40218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.765938][T14193] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 218.820083][ T29] audit: type=1400 audit(1746432236.447:7203): avc: denied { write } for pid=14197 comm="syz.2.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.843460][ T29] audit: type=1326 audit(1746432236.467:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.3.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 218.871081][ T29] audit: type=1326 audit(1746432236.467:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.3.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 218.900384][ T29] audit: type=1326 audit(1746432236.467:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.3.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 218.926965][ T29] audit: type=1326 audit(1746432236.467:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.3.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 218.953804][ T29] audit: type=1326 audit(1746432236.467:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.3.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 218.983761][ T29] audit: type=1326 audit(1746432236.467:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.3.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20bf8e969 code=0x7ffc0000 [ 219.037848][T14204] netem: change failed [ 219.137470][T14212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3750'. [ 219.157125][T14215] loop0: detected capacity change from 0 to 256 [ 219.165824][T14211] SELinux: ebitmap: map size 19264 does not match my size 64 (high bit was 64) [ 219.173088][T14215] FAT-fs (loop0): Directory bread(block 64) failed [ 219.189151][T14211] SELinux: failed to load policy [ 219.201540][T14215] FAT-fs (loop0): Directory bread(block 65) failed [ 219.210232][T14211] loop3: detected capacity change from 0 to 1024 [ 219.223692][T14211] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 219.226056][T14215] FAT-fs (loop0): Directory bread(block 66) failed [ 219.239813][T14211] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 219.255323][T14211] EXT4-fs (loop3): orphan cleanup on readonly fs [ 219.264142][T14215] FAT-fs (loop0): Directory bread(block 67) failed [ 219.272508][T14217] syzkaller0: entered promiscuous mode [ 219.272704][T14215] FAT-fs (loop0): Directory bread(block 68) failed [ 219.279036][T14217] syzkaller0: entered allmulticast mode [ 219.286475][T14215] FAT-fs (loop0): Directory bread(block 69) failed [ 219.298396][T14215] FAT-fs (loop0): Directory bread(block 70) failed [ 219.305305][T14215] FAT-fs (loop0): Directory bread(block 71) failed [ 219.307801][T14211] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 219.314063][T14215] FAT-fs (loop0): Directory bread(block 72) failed [ 219.331858][T14215] FAT-fs (loop0): Directory bread(block 73) failed [ 219.335903][T14211] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.3751: mark_inode_dirty error [ 219.356887][T14211] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3751: Invalid block bitmap block 3 in block_group 0 [ 219.381415][T14211] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3751: Invalid block bitmap block 3 in block_group 0 [ 219.397179][T14211] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3751: Invalid block bitmap block 3 in block_group 0 [ 219.414349][T14211] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 219.424731][T14211] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.3751: mark_inode_dirty error [ 219.439826][T14211] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm syz.3.3751: lblock 6 mapped to illegal pblock 1 (length 1) [ 219.449689][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3752'. [ 219.467823][T14211] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.3751: lblock 0 mapped to illegal pblock 48 (length 1) [ 219.506076][T14211] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3751: Failed to acquire dquot type 0 [ 219.519194][T14211] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 49: comm syz.3.3751: lblock 1 mapped to illegal pblock 49 (length 1) [ 219.544017][T14211] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3751: Failed to acquire dquot type 0 [ 219.578511][T14211] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 219.593016][T14211] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #15: comm syz.3.3751: mark_inode_dirty error [ 219.608701][T14211] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 219.622513][T14211] EXT4-fs (loop3): 1 orphan inode deleted [ 219.630097][T14211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.677847][T12141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.782284][T14238] loop0: detected capacity change from 0 to 256 [ 219.827682][T14243] netlink: 'syz.3.3761': attribute type 4 has an invalid length. [ 219.994406][T14247] Falling back ldisc for ttyS3. [ 220.221535][T14270] loop0: detected capacity change from 0 to 512 [ 220.228902][T14270] EXT4-fs: Ignoring removed oldalloc option [ 220.238699][T14270] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e02c, mo2=0002] [ 220.296065][T14270] System zones: 1-12 [ 220.300585][T14270] EXT4-fs (loop0): orphan cleanup on readonly fs [ 220.307876][T14270] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3771: invalid indirect mapped block 8 (level 2) [ 220.318613][T14276] netlink: 'syz.2.3774': attribute type 4 has an invalid length. [ 220.331443][T14270] EXT4-fs (loop0): Remounting filesystem read-only [ 220.340749][T14270] EXT4-fs (loop0): 1 truncate cleaned up [ 220.348056][T14270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 220.422392][T14268] pim6reg1: entered promiscuous mode [ 220.429925][T14268] pim6reg1: entered allmulticast mode [ 220.473113][T11813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.537675][T14280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.548893][T14280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.595203][T14291] loop3: detected capacity change from 0 to 512 [ 220.604963][T14291] EXT4-fs: Ignoring removed nobh option [ 220.622078][T14291] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.3781: corrupted inode contents [ 220.655354][T14286] pim6reg1: entered promiscuous mode [ 220.660180][T14291] EXT4-fs (loop3): Remounting filesystem read-only [ 220.662957][T14286] pim6reg1: entered allmulticast mode [ 220.693503][T14291] EXT4-fs (loop3): 1 truncate cleaned up [ 220.700238][T14291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.715279][T14291] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.716342][T13372] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 220.745746][T13372] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 220.772296][T12141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.788404][T13372] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 220.876300][T14309] FAULT_INJECTION: forcing a failure. [ 220.876300][T14309] name failslab, interval 1, probability 0, space 0, times 0 [ 220.892805][T14309] CPU: 0 UID: 0 PID: 14309 Comm: syz.0.3782 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 220.892841][T14309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 220.892858][T14309] Call Trace: [ 220.892871][T14309] [ 220.892880][T14309] __dump_stack+0x1d/0x30 [ 220.892906][T14309] dump_stack_lvl+0xe8/0x140 [ 220.892931][T14309] dump_stack+0x15/0x1b [ 220.892970][T14309] should_fail_ex+0x265/0x280 [ 220.893066][T14309] should_failslab+0x8c/0xb0 [ 220.893149][T14309] kmem_cache_alloc_node_noprof+0x57/0x320 [ 220.893195][T14309] ? __alloc_skb+0x101/0x320 [ 220.893286][T14309] __alloc_skb+0x101/0x320 [ 220.893322][T14309] netlink_alloc_large_skb+0xba/0xf0 [ 220.893352][T14309] netlink_sendmsg+0x3cf/0x6b0 [ 220.893463][T14309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.893505][T14309] __sock_sendmsg+0x142/0x180 [ 220.893539][T14309] ____sys_sendmsg+0x31e/0x4e0 [ 220.893655][T14309] ___sys_sendmsg+0x17b/0x1d0 [ 220.893718][T14309] __x64_sys_sendmsg+0xd4/0x160 [ 220.893824][T14309] x64_sys_call+0x2999/0x2fb0 [ 220.893857][T14309] do_syscall_64+0xd0/0x1a0 [ 220.893883][T14309] ? clear_bhb_loop+0x25/0x80 [ 220.893918][T14309] ? clear_bhb_loop+0x25/0x80 [ 220.893946][T14309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.893973][T14309] RIP: 0033:0x7f27e170e969 [ 220.893991][T14309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.894008][T14309] RSP: 002b:00007f27dfd56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.894088][T14309] RAX: ffffffffffffffda RBX: 00007f27e1936080 RCX: 00007f27e170e969 [ 220.894101][T14309] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 220.894116][T14309] RBP: 00007f27dfd56090 R08: 0000000000000000 R09: 0000000000000000 [ 220.894129][T14309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.894144][T14309] R13: 0000000000000001 R14: 00007f27e1936080 R15: 00007ffc530d8d48 [ 220.894217][T14309] [ 220.939846][T14311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=14311 comm=syz.1.3786 [ 221.234315][T14305] Falling back ldisc for ttyS3. [ 221.369855][T14324] pim6reg1: entered promiscuous mode [ 221.377125][T14324] pim6reg1: entered allmulticast mode [ 221.422791][T14323] Falling back ldisc for ttyS3. [ 221.692201][T14353] FAULT_INJECTION: forcing a failure. [ 221.692201][T14353] name failslab, interval 1, probability 0, space 0, times 0 [ 221.717829][T14353] CPU: 1 UID: 0 PID: 14353 Comm: syz.7.3800 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 221.717865][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 221.717878][T14353] Call Trace: [ 221.717885][T14353] [ 221.717942][T14353] __dump_stack+0x1d/0x30 [ 221.717983][T14353] dump_stack_lvl+0xe8/0x140 [ 221.718003][T14353] dump_stack+0x15/0x1b [ 221.718046][T14353] should_fail_ex+0x265/0x280 [ 221.718081][T14353] should_failslab+0x8c/0xb0 [ 221.718116][T14353] __kvmalloc_node_noprof+0x126/0x4d0 [ 221.718182][T14353] ? alloc_netdev_mqs+0x8b7/0xab0 [ 221.718215][T14353] alloc_netdev_mqs+0x8b7/0xab0 [ 221.718235][T14353] rtnl_create_link+0x239/0x710 [ 221.718313][T14353] rtnl_newlink_create+0x151/0x630 [ 221.718339][T14353] ? security_capable+0x83/0x90 [ 221.718433][T14353] ? netlink_ns_capable+0x86/0xa0 [ 221.718464][T14353] rtnl_newlink+0xf29/0x12d0 [ 221.718494][T14353] ? bsearch+0x95/0xc0 [ 221.718539][T14353] ? __pfx_cmp_ex_search+0x10/0x10 [ 221.718603][T14353] ? __get_user_nocheck_8+0x6/0x20 [ 221.718635][T14353] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 221.718669][T14353] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 221.718783][T14353] ? __rcu_read_unlock+0x4f/0x70 [ 221.718807][T14353] ? avc_has_perm_noaudit+0x1b1/0x200 [ 221.718894][T14353] ? selinux_capable+0x1f9/0x270 [ 221.718923][T14353] ? security_capable+0x83/0x90 [ 221.718953][T14353] ? ns_capable+0x7d/0xb0 [ 221.718972][T14353] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.719007][T14353] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 221.719056][T14353] netlink_rcv_skb+0x120/0x220 [ 221.719099][T14353] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.719129][T14353] rtnetlink_rcv+0x1c/0x30 [ 221.719172][T14353] netlink_unicast+0x59e/0x670 [ 221.719274][T14353] netlink_sendmsg+0x58b/0x6b0 [ 221.719316][T14353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.719438][T14353] __sock_sendmsg+0x142/0x180 [ 221.719467][T14353] ____sys_sendmsg+0x31e/0x4e0 [ 221.719488][T14353] ___sys_sendmsg+0x17b/0x1d0 [ 221.719527][T14353] __x64_sys_sendmsg+0xd4/0x160 [ 221.719568][T14353] x64_sys_call+0x2999/0x2fb0 [ 221.719588][T14353] do_syscall_64+0xd0/0x1a0 [ 221.719613][T14353] ? clear_bhb_loop+0x25/0x80 [ 221.719640][T14353] ? clear_bhb_loop+0x25/0x80 [ 221.719742][T14353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.719762][T14353] RIP: 0033:0x7f92683de969 [ 221.719776][T14353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.719793][T14353] RSP: 002b:00007f9266a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.719814][T14353] RAX: ffffffffffffffda RBX: 00007f9268605fa0 RCX: 00007f92683de969 [ 221.719904][T14353] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 221.719915][T14353] RBP: 00007f9266a47090 R08: 0000000000000000 R09: 0000000000000000 [ 221.719926][T14353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.719938][T14353] R13: 0000000000000000 R14: 00007f9268605fa0 R15: 00007ffc7c8a8f18 [ 221.719957][T14353] [ 222.234582][T14356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=14356 comm=syz.3.3799 [ 222.253504][T14356] loop3: detected capacity change from 0 to 512 [ 222.648841][T14370] netlink: 'syz.1.3806': attribute type 2 has an invalid length. [ 222.657056][T14370] netlink: 'syz.1.3806': attribute type 1 has an invalid length. [ 222.694145][T14372] pim6reg1: entered promiscuous mode [ 222.700042][T14372] pim6reg1: entered allmulticast mode [ 222.724317][T14374] __nla_validate_parse: 6 callbacks suppressed [ 222.724510][T14374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3808'. [ 222.856339][T14337] syz.0.3794: attempt to access beyond end of device [ 222.856339][T14337] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 222.978541][T14388] loop2: detected capacity change from 0 to 164 [ 222.990686][T14387] syz.2.3814: attempt to access beyond end of device [ 222.990686][T14387] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 223.010475][T14387] syz.2.3814: attempt to access beyond end of device [ 223.010475][T14387] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 223.157431][T14400] netlink: 'syz.2.3819': attribute type 2 has an invalid length. [ 223.165461][T14400] netlink: 'syz.2.3819': attribute type 1 has an invalid length. [ 223.189455][T14400] loop2: detected capacity change from 0 to 512 [ 223.207988][T14400] EXT4-fs (loop2): 1 orphan inode deleted [ 223.220619][T14400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.235450][T13427] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:63: Failed to release dquot type 1 [ 223.286804][T14400] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.324385][T14405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3821'. [ 223.345200][T14407] loop3: detected capacity change from 0 to 2048 [ 223.455191][T14412] netlink: 'syz.0.3823': attribute type 10 has an invalid length. [ 223.466779][T14410] FAULT_INJECTION: forcing a failure. [ 223.466779][T14410] name failslab, interval 1, probability 0, space 0, times 0 [ 223.482212][T14410] CPU: 1 UID: 0 PID: 14410 Comm: syz.1.3822 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 223.482246][T14410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 223.482262][T14410] Call Trace: [ 223.482271][T14410] [ 223.482342][T14410] __dump_stack+0x1d/0x30 [ 223.482369][T14410] dump_stack_lvl+0xe8/0x140 [ 223.482393][T14410] dump_stack+0x15/0x1b [ 223.482479][T14410] should_fail_ex+0x265/0x280 [ 223.482511][T14410] should_failslab+0x8c/0xb0 [ 223.482546][T14410] kmem_cache_alloc_node_noprof+0x57/0x320 [ 223.482595][T14410] ? __alloc_skb+0x101/0x320 [ 223.482698][T14410] __alloc_skb+0x101/0x320 [ 223.482811][T14410] ? audit_log_start+0x365/0x6c0 [ 223.482847][T14410] audit_log_start+0x380/0x6c0 [ 223.482951][T14410] audit_seccomp+0x48/0x100 [ 223.482983][T14410] ? __seccomp_filter+0x68c/0x10d0 [ 223.483009][T14410] __seccomp_filter+0x69d/0x10d0 [ 223.483039][T14410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 223.483147][T14410] ? vfs_write+0x75e/0x8d0 [ 223.483178][T14410] ? __rcu_read_unlock+0x4f/0x70 [ 223.483205][T14410] ? __fget_files+0x184/0x1c0 [ 223.483235][T14410] __secure_computing+0x82/0x150 [ 223.483320][T14410] syscall_trace_enter+0xcf/0x1e0 [ 223.483350][T14410] do_syscall_64+0xaa/0x1a0 [ 223.483374][T14410] ? clear_bhb_loop+0x25/0x80 [ 223.483480][T14410] ? clear_bhb_loop+0x25/0x80 [ 223.483566][T14410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.483642][T14410] RIP: 0033:0x7fe9fc0fe969 [ 223.483658][T14410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.483679][T14410] RSP: 002b:00007fe9fa767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 223.483699][T14410] RAX: ffffffffffffffda RBX: 00007fe9fc325fa0 RCX: 00007fe9fc0fe969 [ 223.483712][T14410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 223.483724][T14410] RBP: 00007fe9fa767090 R08: 0000000000000000 R09: 0000000000000000 [ 223.483738][T14410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.483807][T14410] R13: 0000000000000000 R14: 00007fe9fc325fa0 R15: 00007ffda5e7f4e8 [ 223.483827][T14410] [ 223.754296][T14410] audit_log_lost: 154 callbacks suppressed [ 223.754314][T14410] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 223.770029][T14410] audit: out of memory in audit_log_start [ 223.772066][ T29] audit: type=1400 audit(1746432241.417:7351): avc: denied { create } for pid=14411 comm="syz.0.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.812796][T12648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.825954][ T29] audit: type=1326 audit(1746432241.447:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14409 comm="syz.1.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe9fc0fd37c code=0x7ffc0000 [ 223.851673][ T29] audit: type=1326 audit(1746432241.447:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14409 comm="syz.1.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe9fc0fd41f code=0x7ffc0000 [ 223.880169][ T29] audit: type=1326 audit(1746432241.447:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14409 comm="syz.1.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe9fc0fd5ca code=0x7ffc0000 [ 223.907580][ T29] audit: type=1326 audit(1746432241.447:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14409 comm="syz.1.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc0fe969 code=0x7ffc0000 [ 223.937776][ T29] audit: type=1326 audit(1746432241.447:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14409 comm="syz.1.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc0fe969 code=0x7ffc0000 [ 223.938625][T14412] team0: Port device netdevsim0 added [ 223.974185][ T29] audit: type=1400 audit(1746432241.627:7357): avc: denied { setopt } for pid=14411 comm="syz.0.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.006780][T14419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3825'. [ 224.018655][T14419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3825'. [ 224.061688][ T29] audit: type=1400 audit(1746432241.707:7358): avc: denied { ioctl } for pid=14418 comm="syz.2.3825" path="socket:[41176]" dev="sockfs" ino=41176 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.089878][T14425] pim6reg1: entered promiscuous mode [ 224.103941][T14425] pim6reg1: entered allmulticast mode [ 224.106754][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3823'. [ 224.122393][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3823'. [ 224.171129][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3823'. [ 224.187968][T14412] syz.0.3823: attempt to access beyond end of device [ 224.187968][T14412] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 224.278855][T14431] pim6reg1: entered promiscuous mode [ 224.290168][T14433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3832'. [ 224.290184][T14431] pim6reg1: entered allmulticast mode [ 224.515709][T14447] netlink: 'syz.1.3837': attribute type 2 has an invalid length. [ 224.526496][T14447] netlink: 'syz.1.3837': attribute type 1 has an invalid length. [ 224.560533][T14446] pim6reg1: entered promiscuous mode [ 224.571563][T14446] pim6reg1: entered allmulticast mode [ 224.581057][T14451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3839'. [ 224.634135][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3841'. [ 224.675500][T14459] loop2: detected capacity change from 0 to 256 [ 224.947648][T14482] netlink: 'syz.2.3856': attribute type 2 has an invalid length. [ 224.958265][T14482] netlink: 'syz.2.3856': attribute type 1 has an invalid length. [ 224.972713][T14482] loop2: detected capacity change from 0 to 512 [ 225.009270][T14482] EXT4-fs (loop2): 1 orphan inode deleted [ 225.018928][T14482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.036954][T14482] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.047715][T13412] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:51: Failed to release dquot type 1 [ 225.213045][T12648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.262783][T14502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=14502 comm=syz.3.3861 [ 225.299694][T14502] loop3: detected capacity change from 0 to 512 [ 225.350074][T14506] FAULT_INJECTION: forcing a failure. [ 225.350074][T14506] name failslab, interval 1, probability 0, space 0, times 0 [ 225.365907][T14506] CPU: 0 UID: 0 PID: 14506 Comm: syz.2.3863 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 225.366001][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 225.366061][T14506] Call Trace: [ 225.366070][T14506] [ 225.366098][T14506] __dump_stack+0x1d/0x30 [ 225.366123][T14506] dump_stack_lvl+0xe8/0x140 [ 225.366159][T14506] dump_stack+0x15/0x1b [ 225.366181][T14506] should_fail_ex+0x265/0x280 [ 225.366220][T14506] should_failslab+0x8c/0xb0 [ 225.366375][T14506] kmem_cache_alloc_noprof+0x50/0x310 [ 225.366464][T14506] ? security_inode_alloc+0x37/0x100 [ 225.366493][T14506] security_inode_alloc+0x37/0x100 [ 225.366559][T14506] inode_init_always_gfp+0x4b7/0x500 [ 225.366586][T14506] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 225.366673][T14506] alloc_inode+0x58/0x170 [ 225.366704][T14506] new_inode+0x1d/0xe0 [ 225.366738][T14506] shmem_get_inode+0x244/0x750 [ 225.366768][T14506] __shmem_file_setup+0x122/0x1f0 [ 225.366822][T14506] shmem_file_setup+0x3b/0x50 [ 225.366853][T14506] __se_sys_memfd_create+0x2c3/0x590 [ 225.367011][T14506] __x64_sys_memfd_create+0x31/0x40 [ 225.367055][T14506] x64_sys_call+0x122f/0x2fb0 [ 225.367080][T14506] do_syscall_64+0xd0/0x1a0 [ 225.367300][T14506] ? clear_bhb_loop+0x25/0x80 [ 225.367324][T14506] ? clear_bhb_loop+0x25/0x80 [ 225.367420][T14506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.367443][T14506] RIP: 0033:0x7fbf5c98e969 [ 225.367462][T14506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.367486][T14506] RSP: 002b:00007fbf5aff6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 225.367526][T14506] RAX: ffffffffffffffda RBX: 000000000000058a RCX: 00007fbf5c98e969 [ 225.367539][T14506] RDX: 00007fbf5aff6ef0 RSI: 0000000000000000 RDI: 00007fbf5ca11444 [ 225.367551][T14506] RBP: 0000200000000cc0 R08: 00007fbf5aff6bb7 R09: 00007fbf5aff6e40 [ 225.367633][T14506] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 225.367644][T14506] R13: 00007fbf5aff6ef0 R14: 00007fbf5aff6eb0 R15: 0000200000000200 [ 225.367667][T14506] [ 225.746656][T14512] 0ªX¹¦D: renamed from gretap0 (while UP) [ 225.760187][T14512] 0ªX¹¦D: entered allmulticast mode [ 225.766551][T14512] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 225.796690][T14515] 9pnet_fd: Insufficient options for proto=fd [ 225.890114][T14525] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 226.654620][T14557] 9pnet_fd: Insufficient options for proto=fd [ 226.668158][T14559] netlink: 'syz.1.3884': attribute type 2 has an invalid length. [ 226.677209][T14559] netlink: 'syz.1.3884': attribute type 1 has an invalid length. [ 226.779804][T14562] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 226.844099][T14565] netlink: 'syz.2.3886': attribute type 2 has an invalid length. [ 226.870104][T14565] loop2: detected capacity change from 0 to 512 [ 226.920000][T14565] EXT4-fs (loop2): 1 orphan inode deleted [ 226.926390][T14565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.942333][T13407] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:48: Failed to release dquot type 1 [ 226.965316][T14565] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.114175][T12648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.599618][T14612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=14612 comm=syz.2.3903 [ 227.659737][T14619] loop2: detected capacity change from 0 to 512 [ 227.851000][T14632] __nla_validate_parse: 12 callbacks suppressed [ 227.851020][T14632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3912'. [ 227.887971][T14632] 9pnet_fd: Insufficient options for proto=fd [ 227.989244][T14636] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 228.267074][T14647] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3917'. [ 228.351750][T14652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3919'. [ 228.653648][T14675] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3930'. [ 228.722686][T14680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3932'. [ 228.744847][T14681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=14681 comm=syz.7.3929 [ 228.786928][T14681] loop7: detected capacity change from 0 to 512 [ 228.814684][T14666] syzkaller0: entered promiscuous mode [ 228.821910][T14666] syzkaller0: entered allmulticast mode [ 228.867713][T14688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3934'. [ 229.191565][T14712] loop3: detected capacity change from 0 to 512 [ 229.215321][T14714] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3945'. [ 229.227085][T14712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.252717][T14702] Falling back ldisc for ttyS3. [ 229.260948][T14712] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.275821][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 229.275848][ T29] audit: type=1400 audit(1746432246.927:7503): avc: denied { setattr } for pid=14711 comm="syz.3.3944" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.291236][T14721] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3946'. [ 229.309492][ T29] audit: type=1400 audit(1746432246.957:7504): avc: denied { create } for pid=14709 comm="syz.2.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.345574][ T29] audit: type=1400 audit(1746432246.987:7505): avc: denied { setopt } for pid=14709 comm="syz.2.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.366683][ T29] audit: type=1400 audit(1746432246.987:7506): avc: denied { connect } for pid=14709 comm="syz.2.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.412785][T12141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.460481][T14730] pim6reg1: entered promiscuous mode [ 229.472428][T14730] pim6reg1: entered allmulticast mode [ 229.495563][T14728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3948'. [ 229.592615][T14734] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3950'. [ 230.128328][T14758] pim6reg1: entered promiscuous mode [ 230.139659][T14758] pim6reg1: entered allmulticast mode [ 230.261109][ T29] audit: type=1326 audit(1746432247.907:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.2.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5c98e969 code=0x7ffc0000 [ 230.286084][ T29] audit: type=1326 audit(1746432247.907:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.2.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf5c98e969 code=0x7ffc0000 [ 230.317629][T14759] Falling back ldisc for ttyS3. [ 230.323059][ T29] audit: type=1326 audit(1746432247.907:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.2.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5c98e969 code=0x7ffc0000 [ 230.348271][ T29] audit: type=1326 audit(1746432247.907:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.2.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf5c98e969 code=0x7ffc0000 [ 230.372231][ T29] audit: type=1326 audit(1746432247.907:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.2.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5c98e969 code=0x7ffc0000 [ 230.396900][ T29] audit: type=1326 audit(1746432247.907:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.2.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf5c98e969 code=0x7ffc0000 [ 230.453766][T14775] validate_nla: 2 callbacks suppressed [ 230.453786][T14775] netlink: 'syz.1.3967': attribute type 10 has an invalid length. [ 230.471081][T14775] team0: Port device netdevsim0 added [ 230.861706][T14804] loop3: detected capacity change from 0 to 512 [ 230.874588][T14804] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 230.885438][T14804] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.3980: inode #1: comm syz.3.3980: iget: illegal inode # [ 230.918413][T14804] EXT4-fs (loop3): no journal found [ 230.924128][T14804] EXT4-fs (loop3): can't get journal size [ 230.932032][T14804] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 230.943359][T14804] EXT4-fs (loop3): failed to initialize system zone (-22) [ 230.950935][T14804] EXT4-fs (loop3): mount failed [ 231.721412][T14834] syz.2.3992: attempt to access beyond end of device [ 231.721412][T14834] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 231.973290][T14848] loop7: detected capacity change from 0 to 256 [ 232.005465][T14852] 9pnet_fd: Insufficient options for proto=fd [ 232.108045][T14857] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 232.444094][T14871] Falling back ldisc for ttyS3. [ 232.498621][T14877] netlink: 'syz.3.4010': attribute type 2 has an invalid length. [ 232.507482][T14877] netlink: 'syz.3.4010': attribute type 1 has an invalid length. [ 232.563671][T14878] loop3: detected capacity change from 0 to 512 [ 232.599405][T14878] EXT4-fs (loop3): 1 orphan inode deleted [ 232.616183][T14878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.629451][T13412] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:51: Failed to release dquot type 1 [ 232.662221][T14878] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.771510][T12141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.924930][T14888] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 232.981214][T14892] loop2: detected capacity change from 0 to 256 [ 233.093262][T14898] __nla_validate_parse: 10 callbacks suppressed [ 233.093296][T14898] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4019'. [ 233.139165][T14899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4018'. [ 233.149548][T14902] netlink: 'syz.2.4021': attribute type 2 has an invalid length. [ 233.158778][T14902] netlink: 'syz.2.4021': attribute type 1 has an invalid length. [ 233.186982][T14902] loop2: detected capacity change from 0 to 512 [ 233.220736][T14902] EXT4-fs (loop2): 1 orphan inode deleted [ 233.233291][T14902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.250564][T13412] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:51: Failed to release dquot type 1 [ 233.277522][T14902] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.289393][T14911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=14911 comm=syz.1.4020 [ 233.388581][T14920] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4027'. [ 233.402462][T12648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.431002][T14920] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4027'. [ 233.440505][T14918] pim6reg1: entered promiscuous mode [ 233.447386][T14918] pim6reg1: entered allmulticast mode [ 233.481296][T14924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4028'. [ 233.528989][T14927] FAULT_INJECTION: forcing a failure. [ 233.528989][T14927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.546996][T14927] CPU: 0 UID: 0 PID: 14927 Comm: syz.7.4029 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 233.547030][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 233.547047][T14927] Call Trace: [ 233.547056][T14927] [ 233.547065][T14927] __dump_stack+0x1d/0x30 [ 233.547087][T14927] dump_stack_lvl+0xe8/0x140 [ 233.547106][T14927] dump_stack+0x15/0x1b [ 233.547186][T14927] should_fail_ex+0x265/0x280 [ 233.547299][T14927] should_fail+0xb/0x20 [ 233.547336][T14927] should_fail_usercopy+0x1a/0x20 [ 233.547359][T14927] _copy_from_iter+0xcf/0xdd0 [ 233.547420][T14927] ? __build_skb_around+0x1a0/0x200 [ 233.547512][T14927] ? __alloc_skb+0x223/0x320 [ 233.547629][T14927] netlink_sendmsg+0x471/0x6b0 [ 233.547789][T14927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.547908][T14927] __sock_sendmsg+0x142/0x180 [ 233.547935][T14927] ____sys_sendmsg+0x31e/0x4e0 [ 233.547964][T14927] ___sys_sendmsg+0x17b/0x1d0 [ 233.548009][T14927] __x64_sys_sendmsg+0xd4/0x160 [ 233.548043][T14927] x64_sys_call+0x2999/0x2fb0 [ 233.548141][T14927] do_syscall_64+0xd0/0x1a0 [ 233.548168][T14927] ? clear_bhb_loop+0x25/0x80 [ 233.548198][T14927] ? clear_bhb_loop+0x25/0x80 [ 233.548221][T14927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.548361][T14927] RIP: 0033:0x7f92683de969 [ 233.548416][T14927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.548433][T14927] RSP: 002b:00007f9266a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.548456][T14927] RAX: ffffffffffffffda RBX: 00007f9268605fa0 RCX: 00007f92683de969 [ 233.548744][T14927] RDX: 0000000044040010 RSI: 0000200000000080 RDI: 0000000000000004 [ 233.548768][T14927] RBP: 00007f9266a47090 R08: 0000000000000000 R09: 0000000000000000 [ 233.548785][T14927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.548865][T14927] R13: 0000000000000000 R14: 00007f9268605fa0 R15: 00007ffc7c8a8f18 [ 233.548888][T14927] [ 233.901036][T14941] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4036'. [ 233.915206][T14941] 9pnet_fd: Insufficient options for proto=fd [ 233.941518][T14946] netlink: 'syz.3.4038': attribute type 2 has an invalid length. [ 233.950282][T14946] netlink: 'syz.3.4038': attribute type 1 has an invalid length. [ 233.965828][T14946] loop3: detected capacity change from 0 to 512 [ 234.002158][T14946] EXT4-fs (loop3): 1 orphan inode deleted [ 234.012053][T14946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.028912][T14948] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 234.056139][T13412] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:51: Failed to release dquot type 1 [ 234.083068][T14953] loop2: detected capacity change from 0 to 512 [ 234.090223][T14946] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.109453][T14953] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 234.123518][T14953] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.4039: inode #1: comm syz.2.4039: iget: illegal inode # [ 234.143086][T14953] EXT4-fs (loop2): no journal found [ 234.149679][T14953] EXT4-fs (loop2): can't get journal size [ 234.160268][T14953] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 234.173737][T14953] EXT4-fs (loop2): failed to initialize system zone (-22) [ 234.183924][T14953] EXT4-fs (loop2): mount failed [ 234.195439][T12141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.703173][T14965] futex_wake_op: syz.1.4044 tries to shift op by -1; fix this program [ 234.823467][T14974] pim6reg1: entered promiscuous mode [ 234.836238][T14974] pim6reg1: entered allmulticast mode [ 234.989982][T14969] syz.1.4045: attempt to access beyond end of device [ 234.989982][T14969] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 235.284037][T14991] Falling back ldisc for ttyS3. [ 235.402406][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 235.402423][ T29] audit: type=1326 audit(1746432253.047:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.7.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 235.438891][ T29] audit: type=1326 audit(1746432253.047:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.7.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 235.462848][ T29] audit: type=1326 audit(1746432253.047:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.7.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 235.505643][ T29] audit: type=1326 audit(1746432253.047:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.7.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 235.529464][ T29] audit: type=1326 audit(1746432253.047:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.7.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 235.553385][ T29] audit: type=1326 audit(1746432253.047:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.7.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 235.576927][ T29] audit: type=1326 audit(1746432253.047:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.7.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 235.601134][ T29] audit: type=1326 audit(1746432253.047:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.7.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 235.625450][ T29] audit: type=1326 audit(1746432253.047:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.7.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 235.649470][ T29] audit: type=1326 audit(1746432253.047:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15009 comm="syz.7.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 235.706586][T15020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4063'. [ 235.861359][T15026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4066'. [ 235.969347][T15041] netlink: 'syz.0.4072': attribute type 2 has an invalid length. [ 235.977258][T15041] netlink: 'syz.0.4072': attribute type 1 has an invalid length. [ 235.988807][T15041] loop0: detected capacity change from 0 to 512 [ 236.103960][T15049] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4074'. [ 236.175681][T15041] EXT4-fs (loop0): 1 orphan inode deleted [ 236.188138][T15041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.203757][T13412] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:51: Failed to release dquot type 1 [ 236.234168][T15060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4079'. [ 236.251587][T15041] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.305907][T15066] pim6reg1: entered promiscuous mode [ 236.313270][T15066] pim6reg1: entered allmulticast mode [ 236.454424][T11813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.477920][T15078] loop7: detected capacity change from 0 to 2048 [ 236.500808][T15078] loop7: detected capacity change from 0 to 1024 [ 236.508701][T15078] EXT4-fs: Ignoring removed orlov option [ 236.517318][T15078] EXT4-fs: Ignoring removed bh option [ 236.543150][T15078] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.549822][T15082] syz.2.4083: attempt to access beyond end of device [ 236.549822][T15082] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 236.589787][T13907] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.914149][T15107] Falling back ldisc for ttyS3. [ 237.101325][T15132] pim6reg1: entered promiscuous mode [ 237.109355][T15132] pim6reg1: entered allmulticast mode [ 237.118145][T15125] syz.3.4104: attempt to access beyond end of device [ 237.118145][T15125] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 237.275643][T15140] pim6reg1: entered promiscuous mode [ 237.290311][T15140] pim6reg1: entered allmulticast mode [ 237.404367][T15142] Falling back ldisc for ttyS3. [ 237.491173][T15164] netlink: 'syz.1.4121': attribute type 1 has an invalid length. [ 237.687288][T15179] syz.7.4126: attempt to access beyond end of device [ 237.687288][T15179] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 237.741409][T15188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=15188 comm=syz.2.4129 [ 237.780978][T15188] loop2: detected capacity change from 0 to 512 [ 237.938133][T15187] Falling back ldisc for ttyS3. [ 238.122124][T15208] __nla_validate_parse: 4 callbacks suppressed [ 238.122146][T15208] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4138'. [ 238.285360][T15226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4145'. [ 238.298003][T15226] 9pnet_fd: Insufficient options for proto=fd [ 238.346698][T15217] Falling back ldisc for ttyS3. [ 238.424833][T15229] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 238.537242][T15240] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4153'. [ 238.629030][T15244] pim6reg1: entered promiscuous mode [ 238.647558][T15244] pim6reg1: entered allmulticast mode [ 238.820897][T15256] pim6reg1: entered promiscuous mode [ 238.828654][T15256] pim6reg1: entered allmulticast mode [ 238.917884][T15258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=15258 comm=syz.7.4158 [ 238.955328][T15258] loop7: detected capacity change from 0 to 512 [ 239.194086][T15271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=15271 comm=syz.2.4164 [ 239.232368][T15271] loop2: detected capacity change from 0 to 512 [ 239.434153][T15285] Falling back ldisc for ttyS3. [ 239.644318][T15309] pim6reg1: entered promiscuous mode [ 239.650610][T15309] pim6reg1: entered allmulticast mode [ 239.709965][T15313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4182'. [ 239.904604][T15302] syz.3.4178: attempt to access beyond end of device [ 239.904604][T15302] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 240.218435][T15344] pim6reg1: entered promiscuous mode [ 240.227745][T15344] pim6reg1: entered allmulticast mode [ 240.345709][T15347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4194'. [ 240.443937][T15362] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4204'. [ 240.453784][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 240.453797][ T29] audit: type=1326 audit(1746432258.097:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.7.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 240.484581][ T29] audit: type=1326 audit(1746432258.097:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.7.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 240.508129][ T29] audit: type=1326 audit(1746432258.097:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.7.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 240.542028][ T29] audit: type=1326 audit(1746432258.107:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.7.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 240.566771][ T29] audit: type=1326 audit(1746432258.107:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.7.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 240.591976][ T29] audit: type=1326 audit(1746432258.107:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.7.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 240.617160][ T29] audit: type=1326 audit(1746432258.107:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.7.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 240.641691][ T29] audit: type=1326 audit(1746432258.107:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.7.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 240.641725][ T29] audit: type=1326 audit(1746432258.107:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.7.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 240.641757][ T29] audit: type=1326 audit(1746432258.107:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.7.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92683de969 code=0x7ffc0000 [ 240.761292][T15377] pim6reg1: entered promiscuous mode [ 240.766963][T15377] pim6reg1: entered allmulticast mode [ 240.948486][T15388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4213'. [ 241.181600][T15403] netlink: 'syz.7.4221': attribute type 1 has an invalid length. [ 241.189742][T15403] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4221'. [ 241.232495][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.244585][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.322368][T15393] netlink: 'syz.0.4216': attribute type 27 has an invalid length. [ 241.336618][T15399] syz.1.4219: attempt to access beyond end of device [ 241.336618][T15399] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 241.382665][T15393] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.391120][T15393] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.442827][T15393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.461339][T15393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.498725][T15393] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.509644][T15393] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.519074][T15393] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.529018][T15393] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.581782][T15414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.590723][T15414] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.603416][T15414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.752000][T15444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4237'. [ 241.934578][T15466] pim6reg1: entered promiscuous mode [ 241.942212][T15466] pim6reg1: entered allmulticast mode [ 242.033346][T15474] netlink: 'syz.1.4250': attribute type 1 has an invalid length. [ 242.041883][T15474] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4250'. [ 242.064072][T15468] Falling back ldisc for ttyS3. [ 242.146651][T15486] batadv1: entered allmulticast mode [ 242.153083][T15486] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 242.296376][T15498] netlink: 'syz.1.4260': attribute type 4 has an invalid length. [ 242.325116][T15502] netlink: 'syz.1.4262': attribute type 1 has an invalid length. [ 242.369907][T15510] pim6reg1: entered promiscuous mode [ 242.377806][T15510] pim6reg1: entered allmulticast mode [ 242.661410][T15532] netlink: 'syz.2.4273': attribute type 4 has an invalid length. [ 242.776763][T15544] netlink: 'syz.3.4277': attribute type 1 has an invalid length. [ 242.795481][T15543] 9pnet_fd: Insufficient options for proto=fd [ 242.888964][T15551] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 243.022176][T15554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=15554 comm=syz.7.4281 [ 243.060049][T15554] loop7: detected capacity change from 0 to 512 [ 243.405248][T15564] Falling back ldisc for ttyS3. [ 243.483315][T15572] __nla_validate_parse: 7 callbacks suppressed [ 243.483334][T15572] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4288'. [ 243.502765][T15572] 9pnet_fd: Insufficient options for proto=fd [ 243.591683][T15577] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 243.665713][T15579] loop2: detected capacity change from 0 to 256 [ 243.714193][T15583] pim6reg1: entered promiscuous mode [ 243.719549][T15583] pim6reg1: entered allmulticast mode [ 243.754316][T15586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4291'. [ 243.768652][T15581] 9pnet_fd: Insufficient options for proto=fd [ 243.899442][T15586] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 244.030195][T15604] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4301'. [ 244.261470][T15622] netlink: 'syz.2.4308': attribute type 1 has an invalid length. [ 244.271510][T15622] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4308'. [ 244.354411][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4308'. [ 244.363588][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4308'. [ 244.734853][T15635] Falling back ldisc for ttyS3. [ 244.862207][T15641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=15641 comm=syz.0.4311 [ 245.159860][T15642] loop0: detected capacity change from 0 to 512 [ 245.559266][T15667] netlink: 'syz.1.4323': attribute type 2 has an invalid length. [ 245.562449][T15669] netlink: 'syz.3.4324': attribute type 4 has an invalid length. [ 245.629751][T15673] pim6reg1: entered promiscuous mode [ 245.638833][T15673] pim6reg1: entered allmulticast mode [ 245.657730][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 245.657747][ T29] audit: type=1400 audit(1746432263.307:8001): avc: denied { ioctl } for pid=15676 comm="syz.7.4329" path="socket:[44827]" dev="sockfs" ino=44827 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.667111][T15678] loop7: detected capacity change from 0 to 128 [ 245.839582][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'. [ 245.915376][T15683] Falling back ldisc for ttyS3. [ 245.962653][ T29] audit: type=1326 audit(1746432263.607:8002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc0fe969 code=0x7ffc0000 [ 245.990842][ T29] audit: type=1326 audit(1746432263.607:8003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc0fe969 code=0x7ffc0000 [ 246.017322][ T29] audit: type=1326 audit(1746432263.607:8004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9fc0fe969 code=0x7ffc0000 [ 246.042158][ T29] audit: type=1326 audit(1746432263.607:8005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc0fe969 code=0x7ffc0000 [ 246.152452][ T29] audit: type=1326 audit(1746432263.617:8006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9fc0fe969 code=0x7ffc0000 [ 246.178676][ T29] audit: type=1326 audit(1746432263.617:8007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc0fe969 code=0x7ffc0000 [ 246.204764][ T29] audit: type=1326 audit(1746432263.617:8008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe9fc0fe969 code=0x7ffc0000 [ 246.230098][ T29] audit: type=1326 audit(1746432263.617:8009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fc0fe969 code=0x7ffc0000 [ 246.238120][T15718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=15718 comm=syz.2.4342 [ 246.257117][ T29] audit: type=1326 audit(1746432263.617:8010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fe9fc0fe969 code=0x7ffc0000 [ 246.307948][T15702] validate_nla: 2 callbacks suppressed [ 246.307964][T15702] netlink: '+}[@': attribute type 4 has an invalid length. [ 246.403381][T15722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4345'. [ 246.449919][T15722] 9pnet_fd: Insufficient options for proto=fd [ 246.467586][T15726] loop3: detected capacity change from 0 to 512 [ 246.508938][T15726] EXT4-fs (loop3): 1 orphan inode deleted [ 246.516996][T15726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.530558][T13372] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:26: Failed to release dquot type 1 [ 246.544490][T15726] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.612949][T15722] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 246.656588][T12141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.748759][T15743] netlink: 'syz.3.4351': attribute type 3 has an invalid length. [ 246.757689][T15745] netlink: 'syz.3.4351': attribute type 3 has an invalid length. [ 246.802268][T15745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4351'. [ 246.886363][T15759] ================================================================== [ 246.894859][T15759] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 246.902858][T15759] [ 246.905285][T15759] write to 0xffffea0004171f98 of 8 bytes by task 12648 on cpu 1: [ 246.913343][T15759] __filemap_remove_folio+0x1a5/0x2a0 [ 246.919003][T15759] filemap_remove_folio+0x6d/0x1d0 [ 246.925012][T15759] truncate_inode_folio+0x42/0x50 [ 246.930297][T15759] shmem_undo_range+0x244/0xa80 [ 246.935227][T15759] shmem_evict_inode+0x134/0x520 [ 246.940195][T15759] evict+0x2e0/0x550 [ 246.944284][T15759] iput+0x447/0x5b0 [ 246.948132][T15759] do_unlinkat+0x2c4/0x4c0 [ 246.952659][T15759] __x64_sys_unlink+0x2e/0x40 [ 246.957538][T15759] x64_sys_call+0x22a6/0x2fb0 [ 246.962859][T15759] do_syscall_64+0xd0/0x1a0 [ 246.968136][T15759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.975200][T15759] [ 246.978869][T15759] read to 0xffffea0004171f98 of 8 bytes by task 15759 on cpu 0: [ 246.987573][T15759] folio_mapping+0xa1/0x120 [ 246.992257][T15759] lru_add+0x80/0x430 [ 246.996501][T15759] folio_batch_move_lru+0x174/0x230 [ 247.001906][T15759] folio_add_lru+0x14a/0x1f0 [ 247.006942][T15759] folio_add_lru_vma+0x49/0x70 [ 247.011895][T15759] do_wp_page+0x12f6/0x23e0 [ 247.016770][T15759] handle_mm_fault+0x6dc/0x2ae0 [ 247.021811][T15759] do_user_addr_fault+0x636/0x1090 [ 247.028377][T15759] exc_page_fault+0x54/0xc0 [ 247.032924][T15759] asm_exc_page_fault+0x26/0x30 [ 247.037878][T15759] [ 247.040659][T15759] value changed: 0xffff8881062ab928 -> 0x0000000000000000 [ 247.049366][T15759] [ 247.051882][T15759] Reported by Kernel Concurrency Sanitizer on: [ 247.058231][T15759] CPU: 0 UID: 0 PID: 15759 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 247.069742][T15759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 247.080264][T15759] ==================================================================