last executing test programs: 4m45.42801917s ago: executing program 32 (id=271): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) (fail_nth: 3) 3m44.398303799s ago: executing program 0 (id=1157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0xffffffffffffff64, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000f80)={&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000180)="24aeb629fe7b9365d7b070ecc4dd1152738d0e31230b870ed50f6d166478d2b3e4963ba03800c460d40436d5d6dd73c8b2cf41e6937baa57c249d2bed4d36b15b641c2766034b01209e60dfa5ade22e0d4d897f050", 0x55}, {&(0x7f0000000380)="064b5a44bc841d0eb3cde7939f732de2357f57de1b028d9c939cf361d6e17fd0a67ea6b6456bb6c3c6739facbfbff1201931291b341b298590f55f00f3874ce872dbc3ce8cda35ace31b9b334bb5a9165ed6c44eecae86a24d83e1d288d3dd466809e24f0dc88851cd83141ee9ba314b9f0398eaa68f6eae7e8ae7f63b846b74e2178d35f52c2ab884891ea40c2ce9b48fb4f5ce8f8ebfada1e4b15a367904af34b5d705f4130309ed83916c416f91224b852695a76bc8a8b95874d54bbd0f583fd39f957277b27ceb0348eeb5b30e9a5ddb33a6ad8d3a4a", 0xd8}, {0x0}, {&(0x7f0000000240)="7457b2316e204aba6b591334c56be87dc6b5ec55cf130145", 0x18}, {&(0x7f0000000480)="cdf3015ae846337720622f5ef786deee3b963ec31593af3e36f09ccbb64dcf5afc09d82f57e74df1f5fceb84dd15441e", 0x30}, {&(0x7f0000000c40)="645ae8fd31b3c84f6b49d710c86a75c8975baf0e80ffbba753a5dbc06bf3f6e09db2655db3539859eab379da476e7e93e21e317ca8321db540d815d0bceda8ffa2a594e00ba059d24bb7b2c1d926627d66dedb436faf50044f831c606e5d0338249fd87c2448393537368bebbc8d47fade3144643fc23015565cd1569db23cff792bc7f5c7d21ac333cd46175f6660c6789cf5a52d46f2e54284b6e42cecbaf6f60b911c318cea90bc55e98a2f179c720396b563a6105c4969c601ac22b7519b662dbcd443c5be89d7", 0xc9}, {&(0x7f00000011c0)="391a801fafa501e3c39f22b7a7a1b8bfe2654d4adf75ebd4cf0abc569034d806af94ba3df408814a7205aa90488a763eef742e33f4647211d281ea5bec7865622c9008c598f0351ea915cf6483b7ff802726403a16840a36b0ce829d7adc78b907d3fdd830aa7a77ad42a521abb7378df83029afdf8221c9674fc18b64bf62fdc6f771137385bd", 0x87}, {&(0x7f0000000d80)="d040d166e5524b32f593d012fe3e0fb2f167cebba4d607e75855b081195b3c3f25b9bc58fefcd81d2ab76bfae62df8bd10b4452be9704c58b8fe678b3a49cd3f1fd08f0614196f60d677294bdad42c2fe41e40", 0x53}], 0x8, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYRESHEX], 0xf8}, 0x44000) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$eJzs2z9I22kYB/A31lBohw7XqVPbocPRpaVjM7QlSVsqhKiL3KCgiJgpghC5gKAHmkExgzi6iJDFP5Mxg5Oi4Czi4CE4uNyhi+BiDvG97e7wUI8rfD7w48n75vu+T54h4y/wXWsJvzebzUQIofnwrxPNfzjdWUtnvjzPfch3xMvCfPWXH64+Jv48HW99GdeHcb0w/6gxefY5WTtoP3/VvVlpid+PxufxYr3zDsbjni2ltp6MjRezU6XUwH62fDyxt9u2fJrO179Vqitfk596Y2471tZYh0IpjITB0BMKoRD6QvGO+s/Vjt5cPsvW1vrfX2Qa0xtvYy53yzlv2n/4xUxXtfzx9erT2Xel9Z38yYPrXOFv/l0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy/LKW2noyNF7NTpdTAfrZ8PLG327Z8ms7Xv1WqK1+Tn3pjbjvW1liHQimMhMHQEwohEfpC8Y76z9WO3lw+y9bW+t9fZBrTG29jLnfLOW/af/jFTFe1/PH16tPZd6X1nfzJg+tc4eE9/QAAAAAAAAAAAAAAAAAAAAAIIaQzX57nPuQ7QkiEn0Jr+PG3n1uu9pvxffdEzL2M9TDuL8w/akyefU7WDtrPX3VvVn6N+6PxebxY7/zPh+Ff+yMAAP//17OV3g==") 3m44.261027701s ago: executing program 0 (id=1160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000500), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) ustat(0x1f, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c0005"], 0x34}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001200)) statx(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x6000, 0x4, &(0x7f00000012c0)) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) 3m44.161944393s ago: executing program 0 (id=1161): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c55, &(0x7f0000000140)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d31653d302c7574dc123d312c726f0569722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c757466383d302c73686f72746e616d653d77696e6e742c71756965742c00"/179], 0xf5, 0x2e5, &(0x7f0000000540)="$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") symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000050900345d00000000000000003afc0830441abe3001551295a30acfec004abb0000000029336f8d45b63c65efc6208c56560514dcfe84062e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) getpeername$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'syztnl2\x00', r5, 0x700, 0x40, 0x1, 0xfff, {{0x9, 0x4, 0x2, 0x1, 0x24, 0x67, 0x0, 0x2, 0x2f, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4}, @generic={0x82, 0x9, "199e39c7994855"}, @end]}}}}}) write$vga_arbiter(r3, &(0x7f0000000280)=@other={'unlock', ' ', 'none'}, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) 3m44.085494744s ago: executing program 0 (id=1163): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x54, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00'}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setxattr$incfs_id(&(0x7f0000000240)='.\x00', &(0x7f00000002c0), &(0x7f0000000300)={'0000000000000000000000000000000', 0x30}, 0x20, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef100000200012800b00636e657665000004db0280bda833c4310fe75704be843b00000010000000e56e231d73e860044c56000091f3de781ba3cdc1415da3da555645c4225922d39ed648cc23d8fd52371d962bcaadc164ae69c8893a6d15e9700afd5c9e2b1220a3a3567519dec989a66f639802000000eb568076633dbe88933974563f2bd1753e725662f3c9"], 0x40}}, 0x44) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}}], 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x10000}, 0x100002, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m42.679334034s ago: executing program 0 (id=1170): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) wait4(0x0, 0x0, 0x40000000, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) epoll_create1(0x80000) 3m42.348936888s ago: executing program 0 (id=1173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x4000010) 3m42.348668768s ago: executing program 33 (id=1173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x4000010) 3m12.544152033s ago: executing program 6 (id=1537): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x200) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0xcf, 0x6, 0xd}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x30, 0x48, 0x200, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x3f, 0x0, r2}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080800}, 0x2000c004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r3, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x5200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000180)='6', 0x1}], 0x1) 3m12.406595045s ago: executing program 6 (id=1539): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x200) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0xcf, 0x6, 0xd}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x30, 0x48, 0x200, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x3f, 0x0, r2}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080800}, 0x2000c004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r3, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x5200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getpeername(r5, &(0x7f0000000480)=@nfc, &(0x7f0000000300)=0x80) 3m12.205337348s ago: executing program 6 (id=1541): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r0, 0x9, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) lseek(r0, 0x8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB="64128658a64bc84927dd33237a7067d7fa47997a8739dd7c660918a3dcbed660a541de791c0c90cc40488472cdaef6aac87408456eb2a2db6d64e3f4b6fa0fa37cae65910886c32d3f2e462f21d06f85ea0cf4e81d3b2bf903af3d7f85bdc90d5a9d714b544b230b04663d06cca3e002995f34564d6567098d0a68d1451248a55ab752fdf7b30335a2eee1561efc6c89590a40baa5061a751cc25305"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x28b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x6, 0x44, 0x1, 0x0, 0x0, 0x1, 0x60014, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x400000000008, 0x9}, 0x1000, 0x200, 0x9, 0x4, 0xc, 0x0, 0x200, 0x0, 0x40, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x0) 3m11.965908061s ago: executing program 6 (id=1545): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x54, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00'}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setxattr$incfs_id(&(0x7f0000000240)='.\x00', &(0x7f00000002c0), &(0x7f0000000300)={'0000000000000000000000000000000', 0x30}, 0x20, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef100000200012800b00636e657665000004db0280bda833c4310fe75704be843b00000010000000e56e231d73e860044c56000091f3de781ba3cdc1415da3da555645c4225922d39ed648cc23d8fd52371d962bcaadc164ae69c8893a6d15e9700afd5c9e2b1220a3a3567519dec989a66f639802000000eb568076633dbe88933974563f2bd1753e725662f3c9"], 0x40}}, 0x44) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b76", 0x28}], 0x1}}], 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x10000}, 0x100002, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m11.32397666s ago: executing program 6 (id=1553): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000440)={@random="c92752ede134", @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x9, 0x14, 0x68, 0x0, 0x4, 0x2c, 0x0, @multicast2, @multicast1}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x2e, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) unshare(0x22020400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) pivot_root(&(0x7f0000000080)='./file0\x00', 0x0) 3m10.68427716s ago: executing program 6 (id=1567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000000140)='.\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x3}, [], {0x4, 0x5}, [], {}, {0x20, 0x1}}, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m10.214455696s ago: executing program 34 (id=1567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000000140)='.\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x3}, [], {0x4, 0x5}, [], {}, {0x20, 0x1}}, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 57.900513508s ago: executing program 2 (id=4489): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4) 57.877116778s ago: executing program 2 (id=4491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c00000500048036000000ac1c7b3e51c47cd26f76a4afda8e6f07c2ed5ad7e7411eac49e6cf9ccd9825d593fbd2645b0752b56ac0c3027ed08f52bf"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000004abc0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffff84, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x4000200, &(0x7f0000000300)="b160383214dbaf58e5ae58393e4be2d4cfba2aacb19818590cc54ee9f10b237803322d19518a13804b951fabcd69cda75909954637e0abf5f1391a4b531427e8a414557b28d53614f5ebdf14bcc752fbad9d95796a133b6acf49e69f30a578c46f4e9d504791f4895ff8c327da815320fd1686f913718c235369d834c4f1f921fb4d8a072491e5c8a59d9ef1a7ea3fe5db9501cfcecedb421d6fefbb4b80880c390d0e66d2d097fe16d02b479a29b92011491ffe533a899b4fc55725dc010c2573121a096e7a4979ad9192f1ca6f6932ad2b8d40b2dad6246b0ef76efe1fd6481251582f0e1fe3368a65050e4a21a9b4372e", 0xf2, &(0x7f0000000400), &(0x7f0000000500), &(0x7f0000000600)="d92bd42284c3a1daeb1d321e5f34b531692d37a44f97df952858d25be3df101b5efe6083e07af76fd844b21539583c4d1ad95fae494b60c70dc9cff02cb8bc227a41cbe688c14e3389283fe6a5d7b67a0fd0efccb2a62be02afbfe956a310d5a945bb0ae3ff33adb9fdc9db9571d7fedd8089a7bff6b14f90ca4ac37c27973062c0d045d66287b63151c200b3a6c2e2a67d41ff1ade8d86b6405a0ab6029b3977580") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000800)='rxrpc_disconnect_call\x00', r3}, 0x18) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x80003, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="c000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) 57.585930752s ago: executing program 2 (id=4495): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0xfffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x1000100000000}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x606c) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x300) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x20, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1010e, &(0x7f0000000540)={[{@errors_remount}, {@lazytime}, {@oldalloc}, {@block_validity}, {@block_validity}, {@auto_da_alloc}]}, 0x1, 0x478, &(0x7f0000001080)="$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") 56.727718804s ago: executing program 2 (id=4502): r0 = socket(0x2a, 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x3000000, &(0x7f0000000000), 0x1, 0x530, &(0x7f00000003c0)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x3000) fallocate(r3, 0x0, 0x0, 0x1000f4) getsockopt$sock_buf(r2, 0x1, 0x24, &(0x7f0000002340)=""/4107, &(0x7f0000000340)=0x100b) fallocate(r1, 0x1c, 0x0, 0x1000f4) r4 = syz_io_uring_setup(0x4740, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x1, 0x1ad}, &(0x7f0000000200), &(0x7f0000000280)) io_uring_enter(r4, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x2000002, &(0x7f0000000640)=ANY=[], 0x5, 0x329, &(0x7f00000000c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, &(0x7f0000000900)='./bus\x00') bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$poke(0x21, r9, 0x0, 0x4000) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 56.33846208s ago: executing program 2 (id=4513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) modify_ldt$write(0x1, &(0x7f0000000300)={0x9, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x2}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) 55.762866028s ago: executing program 2 (id=4522): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 55.743990958s ago: executing program 35 (id=4522): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 51.781591435s ago: executing program 8 (id=4598): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 51.720953866s ago: executing program 8 (id=4599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 51.719601836s ago: executing program 8 (id=4601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @private2, 0x4}, 0x1c) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xffa3, 0x0, &(0x7f0000000640)="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", 0x0, 0x24, 0x60000000, 0x4c, 0x0, &(0x7f0000000380)="c97afb146a2fe7338fd9f71b7d9216d5f17a13bf0151d7162106000000000000001dffc506e999c6ab7afd97c42142bfc21408d90601bd75f6a0316b011d471a53529bcf5286725e1151ce83", &(0x7f0000000000), 0x1}, 0x50) 51.361647591s ago: executing program 8 (id=4607): sync_file_range(0xffffffffffffffff, 0x6, 0x7f, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nobh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYRES16=r4], 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xfffe}}], {0x14, 0x10}}, 0x3c}}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c01207fdd25ef0000000000000040000000ff020000000000000000000000000001000400"], 0x0) 49.181049301s ago: executing program 8 (id=4667): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003803000000000000000000000000000000000300000000010000000200000001000080006100"/83], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r5}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf"}) ioctl$TIOCGPGRP(r7, 0x5437, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x40000000) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x6020, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003e00000228bc7032fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) 48.885770636s ago: executing program 8 (id=4677): syz_open_dev$usbfs(&(0x7f0000000300), 0x70, 0x143b83) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="8d100000000000000000000041e779b45fae14f33df423e7fd887c9615f2b76206d0b11e5e78eb963772581e4bd0445e0ce61acf8bb62a56b04373d44e0f23e0b901ca78715d8bb669cc38fe2834d1b5", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0x6, &(0x7f0000001580)="6b1535c1de083784d0f915be2fd61835d0bf47ea7dd584c26b70445c4e2545ed99a4769497c9bc583ba02e9620f620b016cf2bcf800b66be68660c53da516da6a49a78422b55972cb70ae8b3c621cc80fbff146e37af9a9975b832214e83b5266f3ddc00e50feaa42a982ec36f3f67251a0a99c8ffc96ecccf06a9871ec376dcf99ee61a3cbf7e5866f7161f04dc003759c16e173df97332875a8053483807739583d30e416b1edd79c86ba0ceb42c464e398d935a9efa17906f88bb2c3cf4360aa42f4bd7f0fce68e8ec9d03f2d929b3e61722ff7abcedc5d35f104ec"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x0, 0x800, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r6) write$cgroup_type(r5, &(0x7f0000000280), 0xfffffeed) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 48.876874986s ago: executing program 36 (id=4677): syz_open_dev$usbfs(&(0x7f0000000300), 0x70, 0x143b83) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="8d100000000000000000000041e779b45fae14f33df423e7fd887c9615f2b76206d0b11e5e78eb963772581e4bd0445e0ce61acf8bb62a56b04373d44e0f23e0b901ca78715d8bb669cc38fe2834d1b5", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0x6, &(0x7f0000001580)="6b1535c1de083784d0f915be2fd61835d0bf47ea7dd584c26b70445c4e2545ed99a4769497c9bc583ba02e9620f620b016cf2bcf800b66be68660c53da516da6a49a78422b55972cb70ae8b3c621cc80fbff146e37af9a9975b832214e83b5266f3ddc00e50feaa42a982ec36f3f67251a0a99c8ffc96ecccf06a9871ec376dcf99ee61a3cbf7e5866f7161f04dc003759c16e173df97332875a8053483807739583d30e416b1edd79c86ba0ceb42c464e398d935a9efa17906f88bb2c3cf4360aa42f4bd7f0fce68e8ec9d03f2d929b3e61722ff7abcedc5d35f104ec"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x0, 0x800, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r6) write$cgroup_type(r5, &(0x7f0000000280), 0xfffffeed) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 36.025291768s ago: executing program 7 (id=4910): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@noauto_da_alloc}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff0000000000000000000100000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001"], 0x1bc}}, 0x4804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone3(&(0x7f0000000540)={0x28000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d793000000000000000000000c16dfec98de65a73535715e56ccd11434d3eef823f2eb8a846a7f4e879d7fc1470ecc2d117500e7030aae8809fc0b4c5b2969f0b8706b91c8923312e009176b01002dd52684930fd5d468cedd55bcc5e498f807e7ac0ee72824f6708c8ce0c7b2415b3b43928cf3eb81396566ee34c477f8a26316069bff5aba6e11069e76fe5784435b4ab938afc835577d68244d3267553cc5fcd44cc699fa078a2db28072eb18f3e79c44276fb4d60edb31784567804d5a60bf1cbc214b6ca842247b3b638d36c80d09e84c86d38"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x449e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xffe}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x44d, &(0x7f0000001280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x6, 0x100000001, 0x0, 0x400}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfd, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000001000)='cq_free\x00', r4, 0x0, 0xa}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x110, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0x20000000, 0x2d2f45bd, 0xaad1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000001240)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="980000005400000126bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="983cdfdc8136000000001da714e2e72070def65053159860ed2afb29a7f90000f3d5000100", @ANYRES32=0x0, @ANYBLOB="00020000e000000200000000000000000000000005ba000020000100", @ANYRES32=0x0, @ANYBLOB="00000200640101020000000000000000000000000000000020000100", @ANYRES32=0x0, @ANYBLOB="00020300ac1414aa0000000000000000000000008edd000020000100", @ANYRES32=0x0, @ANYBLOB="000002000000000000000000000000000000000008000000"], 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 35.771519082s ago: executing program 7 (id=4914): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x4800) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 35.702130823s ago: executing program 7 (id=4915): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x6020400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x0, 0x4, 0x81, 0xc}, {0x7e0, 0x9, 0x8, 0x8}, {0xf, 0x3, 0x3, 0x1000}]}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f00000005c0)={0x10, 0x0, 0x25dfdbfc, 0xbf8ee66a4654273}, 0xc) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 35.680643263s ago: executing program 7 (id=4916): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0xf, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005a00)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x84}}], 0x18}}], 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x200, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 35.549771985s ago: executing program 7 (id=4917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000010000000000000003000000181100000b98aa269723ada9da9dde4f1e76df8778b54b46d01fb35a9dbecca1b6af792d0a2e47157fcd728a98cb9aefbe614238b551fb0e83e8896ba62f92c7ebb4e04c35d2bbc77b76c44f9ffd7c4e67c4d95a4da0e123321534228f0b3c7c47fbae73f685d3cb7757b34f7e5799a4961f8cbc72c558fdffffff3bd4f5e2664e47fb2fd2a0d98a38236f83152aee37d849e790f3939fcd3a917c61f092addfd7f77d29b2f425b4ffdc603f976d36625270b51a9057c45270eb043cb53cfe69d7fee20d386d04c1f44cd36114ab40363d59e35d", @ANYBLOB="9cdff3615ca82936dcfae064a4cc656af2b834d28bab317793d333d7957702c4", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fbffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xb, 0x4, &(0x7f0000000340)=""/4, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x6, 0xfff7ffff, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, r0, r0, r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000980)='kmem_cache_free\x00', r2, 0x0, 0x199}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000fedaec0300000000090000000000000000", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000300)='rpm_return_int\x00', r5, 0x0, 0x1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x20, &(0x7f0000000840)=ANY=[@ANYBLOB="18000101000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000008500000094000000431620000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000c200c0ff010000005938f0fffcffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xe2, &(0x7f0000000c40)=""/226, 0xe2728c71be29f7e9, 0x11, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x2, &(0x7f0000000600)=[r0, r0, r0, r0, 0x1, r0, r0, r0, r0], &(0x7f0000000640)=[{0x0, 0x5}, {0x1, 0x1, 0x3, 0x6}], 0x10, 0x200, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff50d7, 0x6, @perf_bp={&(0x7f0000000440), 0xf}, 0x14105, 0x1ff, 0xfffffbff, 0x3, 0x3, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f00006dc000/0x2000)=nil, 0x2000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) munlockall() sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf25075f74756e000000000000c5bc72"], 0x2c}}, 0x40) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x0, 0x10}, 0x8) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r9 = socket(0x2b, 0x80801, 0x1) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) 35.045275432s ago: executing program 7 (id=4926): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x4000000000000}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xda86dac7fad6502f}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0xffffffffffffffff, 0x2, 0x3, 0x5, {0x1, 0x0, 0x58b, 0x800, 0x1, 0x3}, {0x9, 0x2, 0x0, 0x9, 0x6, 0x3}, 0x3, 0x8, 0x9}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 35.042163532s ago: executing program 37 (id=4926): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x4000000000000}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xda86dac7fad6502f}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0xffffffffffffffff, 0x2, 0x3, 0x5, {0x1, 0x0, 0x58b, 0x800, 0x1, 0x3}, {0x9, 0x2, 0x0, 0x9, 0x6, 0x3}, 0x3, 0x8, 0x9}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 4.844506261s ago: executing program 3 (id=5368): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) close(r1) socket$pptp(0x18, 0x1, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003"], 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x0, @private=0xa010102, 0x4e23, 0x2, 'nq\x00', 0x8, 0xf681, 0x6a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 0xe8f2, 0xd57, 0x8}}, 0x44) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r6, 0x3516, 0x0, 0x4, 0x0, 0x0) 3.947822884s ago: executing program 3 (id=5379): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0xfffffffb, 0x7a124, 0x43b, {0x0, 0x10000}, 0x4e, 0xf}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="0020000000000000000000000000001ccc331aa427d0c71e144b36596d390000000034acef868c3fdc0539348ae0da503c3d8b74b25881e59a44d901845fd4a55740cf331ae0a52cb3ce0c29549d0b9ca5ff0f000000000000c5337cf3634290de587630cd", @ANYBLOB="7dba42714efa3d966c3e2eee12405ba9dc13b5e7770e1a159e67e486d3822d7ef98d2229751f7fe009f388b4a3fce235344445d73b2da4c085a71ae27274e1df9ded3c044066d428c5934eb7d87af6efa33399e881a29205d51a806614f5654a40dcb04eb8b829b01796a5ceee", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x408, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000fcff00ff9500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7112, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 3.842599835s ago: executing program 3 (id=5381): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, 0x0, &(0x7f0000000800)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r9, 0x0, 0x20000000}, 0x18) clock_gettime(0x0, &(0x7f0000000280)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r11 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r11, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r12 = dup2(r11, r11) sendmmsg$unix(r12, &(0x7f0000008380), 0x400000000000174, 0x4008890) 3.551166159s ago: executing program 9 (id=5385): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r3, r4, 0x0, 0xfffc80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = getpgid(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0) sched_rr_get_interval(r7, &(0x7f0000000000)) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') syz_usb_connect(0x6, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 3.330933373s ago: executing program 3 (id=5387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000050000000000000000000000000000000036423fe7f1ca8ea13e6e45d5a667f083", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) accept4$unix(r3, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80000) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000340)=@req3={0x8, 0x3, 0xe, 0x6, 0x5, 0x9, 0x3}, 0x1c) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 3.269700713s ago: executing program 3 (id=5388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) 3.181979275s ago: executing program 3 (id=5390): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) close(r1) socket$pptp(0x18, 0x1, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003"], 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x0, @private=0xa010102, 0x4e23, 0x2, 'nq\x00', 0x8, 0xf681, 0x6a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 0xe8f2, 0xd57, 0x8}}, 0x44) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r6, 0x3516, 0x0, 0x4, 0x0, 0x0) 3.181369795s ago: executing program 38 (id=5390): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) close(r1) socket$pptp(0x18, 0x1, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003"], 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x0, @private=0xa010102, 0x4e23, 0x2, 'nq\x00', 0x8, 0xf681, 0x6a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 0xe8f2, 0xd57, 0x8}}, 0x44) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r6, 0x3516, 0x0, 0x4, 0x0, 0x0) 2.879515019s ago: executing program 9 (id=5396): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x6be53a9e97bb733e, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 2.79024437s ago: executing program 5 (id=5398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r2], 0x1000f) 2.77056459s ago: executing program 5 (id=5399): pipe2$9p(&(0x7f0000000240), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 2.248714168s ago: executing program 5 (id=5404): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1a, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x375) io_setup(0x6, &(0x7f0000000300)=0x0) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r7, 0x7) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x80000000}]) io_getevents(r6, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) 2.173853419s ago: executing program 9 (id=5405): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x6be53a9e97bb733e, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 2.157501289s ago: executing program 4 (id=5406): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) socket(0x28, 0x5, 0x0) 1.850173384s ago: executing program 1 (id=5407): r0 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x18) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) 1.827205614s ago: executing program 1 (id=5408): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x248a4) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 1.785635114s ago: executing program 9 (id=5409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r2], 0x1000f) 1.682158626s ago: executing program 5 (id=5410): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.675478446s ago: executing program 9 (id=5411): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1a, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x375) io_setup(0x6, &(0x7f0000000300)=0x0) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r7, 0x7) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x80000000}]) io_getevents(r6, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) 1.624616427s ago: executing program 1 (id=5412): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0xfc, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001e40), r3) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="05e72bbd7000fddbdf2583000000"], 0x14}, 0x1, 0x0, 0x0, 0x40440c0}, 0x44010) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="c302d269adb76f5c1eb7a33da66f1cf7a39197ecef7217b4ed4ab5a72791210c998bdd4021752410df1307f71882dd592e550f9dd18bc04c24581e087efe7ad7f2e59ce2f223e44f23e161cf907018b26d22dfb2f63cb41a698eafe5c68d7beabf2469b2f51461c8e86107be960f02400f411dcd06c75b58969bca361b8c1393e83af7345c22b5e61464d5091e982fb88b71e1c947d49506bd75e52c05c59cd08819f0eeb41e60fd024c76ca", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0xd) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r9}, 0x18) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfc, 0x2}]}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000003000000a5000000eecef9b22470004cf8817b30dcf1e40915e6efa164427efb7bfc8d68d8b65d56a6ab29d3d099646109ed908730bf7a3c6815b5d27b"]) chroot(&(0x7f0000000040)='./file0\x00') 1.207236783s ago: executing program 5 (id=5413): pipe2$9p(&(0x7f0000000240), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 1.089250265s ago: executing program 9 (id=5414): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095", @ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000500)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0xfffffe37) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e", 0xf3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000b40)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec", 0xe7}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f137", 0xa7}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000006000200000088e0e022b04dbd50d36f3c028c27ba1d00000000000000000005000033abe805fe6cdcd4386304aee926d10982f6054c0e49c4a6be676d07a9d61ab465cc070000004726d0d2e39543237c93424a344146f9c3be104f7366c812776c6c4eeb4d588b56567e03", 0xa1}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542", 0x2e}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba", 0x4d}], 0x3}}], 0x2, 0xc0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.076623235s ago: executing program 4 (id=5415): capset(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000c00)={0x1f, 0x1, 0x2}, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'tunl0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x5, 0x7, {{0x9, 0x4, 0x2, 0x39, 0x24, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x9b}, @end, @timestamp={0x44, 0x8, 0xee, 0x0, 0x1, [0x5]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000e1d000/0xe000)=nil, 0xe000) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x7ff, 0x7fffffff, 0x9, 0xc000000000}) 1.030377835s ago: executing program 5 (id=5416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x6be53a9e97bb733e, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 986.331326ms ago: executing program 4 (id=5417): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xfcff, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x3375}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendto$inet(r4, &(0x7f0000000080)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) 962.099056ms ago: executing program 4 (id=5418): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 898.022027ms ago: executing program 4 (id=5419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) 887.029068ms ago: executing program 4 (id=5420): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1a, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x375) io_setup(0x6, &(0x7f0000000300)=0x0) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r6, 0x7) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x80000000}]) io_getevents(r5, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) 813.104908ms ago: executing program 1 (id=5421): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063118b000000000040000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8410b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x1721, 0x0, 0x3, 0x1, 0x9, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="008000000000000000bebc82e8fdaa7458f2026d13202b2df241eed16b20cbcfbc5af1f1dedb29316932035553f9f5b6f501f53906c9902540040803e9f8d3f7203665dde3a3fb1413ea1ac7c60ca29c1faca47ef37cf44d4131ff9e717066f95d7bcd4b3dd53c2bf64a2ef4d98f2219869c75dcc4fa509ee217a4", @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) r6 = dup(r1) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r7 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) creat(&(0x7f0000000380)='./file0\x00', 0x100000) 609.459491ms ago: executing program 1 (id=5422): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@noauto_da_alloc}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff0000000000000000000100000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001"], 0x1bc}}, 0x4804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone3(&(0x7f0000000540)={0x28000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d793000000000000000000000c16dfec98de65a73535715e56ccd11434d3eef823f2eb8a846a7f4e879d7fc1470ecc2d117500e7030aae8809fc0b4c5b2969f0b8706b91c8923312e009176b01002dd52684930fd5d468cedd55bcc5e498f807e7ac0ee72824f6708c8ce0c7b2415b3b43928cf3eb81396566ee34c477f8a26316069bff5aba6e11069e76fe5784435b4ab938afc835577d68244d3267553cc5fcd44cc699fa078a2db28072eb18f3e79c44276fb4d60edb31784567804d5a60bf1cbc214b6ca842247b3b638d36c80d09e84c86d38"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x449e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xffe}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x44d, &(0x7f0000001280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x6, 0x100000001, 0x0, 0x400}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfd, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) 0s ago: executing program 1 (id=5423): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e000000040000000400000002000200000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="0309000002"], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1a, '\x00', r3, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="a600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000001500000000"], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={0x0}) kernel console output (not intermixed with test programs): thout journal. Quota mode: writeback. [ 298.420507][T14855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.538940][T17981] 9pnet_fd: Insufficient options for proto=fd [ 298.598274][T17991] netlink: 'syz.9.4852': attribute type 13 has an invalid length. [ 298.609925][T17991] gretap0: refused to change device tx_queue_len [ 298.617126][T17991] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 298.662078][T17994] team_slave_0: entered promiscuous mode [ 298.667798][T17994] team_slave_1: entered promiscuous mode [ 298.674511][T17994] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 298.682670][T17994] team0: Device macvtap1 is already an upper device of the team interface [ 298.691843][T17994] team_slave_0: left promiscuous mode [ 298.697283][T17994] team_slave_1: left promiscuous mode [ 298.753348][T17998] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 298.927465][T18016] FAULT_INJECTION: forcing a failure. [ 298.927465][T18016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.940624][T18016] CPU: 1 UID: 0 PID: 18016 Comm: syz.1.4862 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 298.940666][T18016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.940683][T18016] Call Trace: [ 298.940691][T18016] [ 298.940777][T18016] __dump_stack+0x1d/0x30 [ 298.940802][T18016] dump_stack_lvl+0xe8/0x140 [ 298.940821][T18016] dump_stack+0x15/0x1b [ 298.940844][T18016] should_fail_ex+0x265/0x280 [ 298.940867][T18016] should_fail+0xb/0x20 [ 298.940887][T18016] should_fail_usercopy+0x1a/0x20 [ 298.940913][T18016] strncpy_from_user+0x25/0x230 [ 298.940946][T18016] ? kmem_cache_alloc_noprof+0x186/0x310 [ 298.940980][T18016] ? getname_flags+0x80/0x3b0 [ 298.941090][T18016] getname_flags+0xae/0x3b0 [ 298.941156][T18016] __se_sys_newstat+0x4b/0x280 [ 298.941206][T18016] ? __secure_computing+0x82/0x150 [ 298.941237][T18016] __x64_sys_newstat+0x31/0x40 [ 298.941293][T18016] x64_sys_call+0x781/0x2fb0 [ 298.941321][T18016] do_syscall_64+0xd2/0x200 [ 298.941358][T18016] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 298.941391][T18016] ? clear_bhb_loop+0x40/0x90 [ 298.941494][T18016] ? clear_bhb_loop+0x40/0x90 [ 298.941522][T18016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.941581][T18016] RIP: 0033:0x7f7596b3e929 [ 298.941602][T18016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.941625][T18016] RSP: 002b:00007f75951a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 298.941704][T18016] RAX: ffffffffffffffda RBX: 00007f7596d65fa0 RCX: 00007f7596b3e929 [ 298.941720][T18016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.941736][T18016] RBP: 00007f75951a7090 R08: 0000000000000000 R09: 0000000000000000 [ 298.941797][T18016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.941812][T18016] R13: 0000000000000000 R14: 00007f7596d65fa0 R15: 00007ffdfb376fb8 [ 298.941844][T18016] [ 299.161089][T18023] __nla_validate_parse: 8 callbacks suppressed [ 299.161109][T18023] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4865'. [ 299.200693][T18025] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4866'. [ 299.319939][T18031] loop5: detected capacity change from 0 to 2048 [ 299.337948][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4870'. [ 299.349844][T18035] FAULT_INJECTION: forcing a failure. [ 299.349844][T18035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.362984][T18035] CPU: 0 UID: 0 PID: 18035 Comm: syz.1.4869 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 299.363018][T18035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.363033][T18035] Call Trace: [ 299.363041][T18035] [ 299.363051][T18035] __dump_stack+0x1d/0x30 [ 299.363131][T18035] dump_stack_lvl+0xe8/0x140 [ 299.363156][T18035] dump_stack+0x15/0x1b [ 299.363178][T18035] should_fail_ex+0x265/0x280 [ 299.363203][T18035] should_fail+0xb/0x20 [ 299.363300][T18035] should_fail_usercopy+0x1a/0x20 [ 299.363323][T18035] _copy_from_user+0x1c/0xb0 [ 299.363354][T18035] __x64_sys_sendfile64+0x88/0x150 [ 299.363408][T18035] x64_sys_call+0xb39/0x2fb0 [ 299.363435][T18035] do_syscall_64+0xd2/0x200 [ 299.363508][T18035] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 299.363535][T18035] ? clear_bhb_loop+0x40/0x90 [ 299.363587][T18035] ? clear_bhb_loop+0x40/0x90 [ 299.363609][T18035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.363657][T18035] RIP: 0033:0x7f7596b3e929 [ 299.363677][T18035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.363700][T18035] RSP: 002b:00007f75951a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 299.363724][T18035] RAX: ffffffffffffffda RBX: 00007f7596d65fa0 RCX: 00007f7596b3e929 [ 299.363778][T18035] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 299.363795][T18035] RBP: 00007f75951a7090 R08: 0000000000000000 R09: 0000000000000000 [ 299.363819][T18035] R10: 00000002000007ff R11: 0000000000000246 R12: 0000000000000001 [ 299.363836][T18035] R13: 0000000000000000 R14: 00007f7596d65fa0 R15: 00007ffdfb376fb8 [ 299.363857][T18035] [ 299.570813][T18031] Alternate GPT is invalid, using primary GPT. [ 299.577425][T18031] loop5: p1 p2 p3 [ 299.611084][T18043] pim6reg1: entered promiscuous mode [ 299.616531][T18043] pim6reg1: entered allmulticast mode [ 299.661189][T18046] 9pnet_fd: Insufficient options for proto=fd [ 299.697522][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 299.697541][ T29] audit: type=1400 audit(2000000207.711:18284): avc: denied { connect } for pid=18047 comm="syz.9.4875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.748324][ T29] audit: type=1400 audit(2000000207.761:18285): avc: denied { ioctl } for pid=18047 comm="syz.9.4875" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 299.781987][T18052] loop3: detected capacity change from 0 to 512 [ 299.808999][T18055] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4877'. [ 299.818077][ T29] audit: type=1400 audit(2000000207.811:18286): avc: denied { ioctl } for pid=18051 comm="syz.5.4876" path="socket:[54951]" dev="sockfs" ino=54951 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 299.850153][T18052] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.902287][T18053] loop5: detected capacity change from 0 to 8192 [ 299.916747][T18052] EXT4-fs (loop3): 1 truncate cleaned up [ 299.923266][T18052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.011775][T18064] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4878'. [ 300.050495][T18067] netlink: 'syz.5.4879': attribute type 13 has an invalid length. [ 300.067026][T18067] gretap0: refused to change device tx_queue_len [ 300.075860][T18067] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 300.113380][T18069] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 300.161154][T18072] loop5: detected capacity change from 0 to 512 [ 300.172121][T18072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.185277][T18072] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.226963][T14855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.238089][T13359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.265120][T18080] 9pnet_fd: Insufficient options for proto=fd [ 300.289927][T18083] loop3: detected capacity change from 0 to 256 [ 300.321162][ T29] audit: type=1326 audit(2000000208.341:18287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18084 comm="syz.9.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 300.359851][ T29] audit: type=1326 audit(2000000208.371:18288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18084 comm="syz.9.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 300.383631][ T29] audit: type=1326 audit(2000000208.371:18289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18084 comm="syz.9.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 300.407493][ T29] audit: type=1326 audit(2000000208.371:18290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18084 comm="syz.9.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 300.431341][ T29] audit: type=1326 audit(2000000208.371:18291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.7.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e8d3e929 code=0x7ffc0000 [ 300.455009][ T29] audit: type=1326 audit(2000000208.371:18292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.7.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0e8d3e929 code=0x7ffc0000 [ 300.478668][ T29] audit: type=1326 audit(2000000208.371:18293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.7.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e8d3e929 code=0x7ffc0000 [ 300.540966][T18102] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 300.563176][T18107] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 300.571681][T18109] FAULT_INJECTION: forcing a failure. [ 300.571681][T18109] name failslab, interval 1, probability 0, space 0, times 0 [ 300.584401][T18109] CPU: 1 UID: 0 PID: 18109 Comm: syz.5.4895 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 300.584435][T18109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.584446][T18109] Call Trace: [ 300.584452][T18109] [ 300.584459][T18109] __dump_stack+0x1d/0x30 [ 300.584478][T18109] dump_stack_lvl+0xe8/0x140 [ 300.584498][T18109] dump_stack+0x15/0x1b [ 300.584573][T18109] should_fail_ex+0x265/0x280 [ 300.584592][T18109] should_failslab+0x8c/0xb0 [ 300.584614][T18109] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 300.584677][T18109] ? security_context_to_sid_core+0x69/0x3b0 [ 300.584702][T18109] kmemdup_nul+0x36/0xc0 [ 300.584725][T18109] security_context_to_sid_core+0x69/0x3b0 [ 300.584828][T18109] ? avc_has_perm_noaudit+0x1b1/0x200 [ 300.584860][T18109] security_context_to_sid+0x2e/0x40 [ 300.584884][T18109] selinux_lsm_setattr+0x2dc/0x660 [ 300.584916][T18109] selinux_setprocattr+0x4f/0x70 [ 300.584992][T18109] security_setprocattr+0x1a7/0x1d0 [ 300.585028][T18109] proc_pid_attr_write+0x1eb/0x220 [ 300.585075][T18109] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 300.585230][T18109] vfs_write+0x269/0x8e0 [ 300.585248][T18109] ? __rcu_read_unlock+0x4f/0x70 [ 300.585269][T18109] ? __fget_files+0x184/0x1c0 [ 300.585389][T18109] ksys_write+0xda/0x1a0 [ 300.585418][T18109] __x64_sys_write+0x40/0x50 [ 300.585446][T18109] x64_sys_call+0x2cdd/0x2fb0 [ 300.585529][T18109] do_syscall_64+0xd2/0x200 [ 300.585556][T18109] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 300.585579][T18109] ? clear_bhb_loop+0x40/0x90 [ 300.585677][T18109] ? clear_bhb_loop+0x40/0x90 [ 300.585696][T18109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.585715][T18109] RIP: 0033:0x7f6ca655e929 [ 300.585783][T18109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.585799][T18109] RSP: 002b:00007f6ca4bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.585816][T18109] RAX: ffffffffffffffda RBX: 00007f6ca6785fa0 RCX: 00007f6ca655e929 [ 300.585838][T18109] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000003 [ 300.585850][T18109] RBP: 00007f6ca4bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 300.585893][T18109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.585904][T18109] R13: 0000000000000000 R14: 00007f6ca6785fa0 R15: 00007ffc969775e8 [ 300.585922][T18109] [ 300.862594][T18114] loop9: detected capacity change from 0 to 128 [ 300.869499][T18116] 9pnet_fd: Insufficient options for proto=fd [ 300.875863][T18113] loop5: detected capacity change from 0 to 512 [ 300.893322][T18113] EXT4-fs (loop5): orphan cleanup on readonly fs [ 300.906393][T18113] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4897: bg 0: block 248: padding at end of block bitmap is not set [ 300.931280][T18113] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4897: Failed to acquire dquot type 1 [ 300.937216][T18122] syz.9.4896: attempt to access beyond end of device [ 300.937216][T18122] loop9: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 300.965387][T18122] syz.9.4896: attempt to access beyond end of device [ 300.965387][T18122] loop9: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 300.979417][T18122] syz.9.4896: attempt to access beyond end of device [ 300.979417][T18122] loop9: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 300.981845][T18113] EXT4-fs (loop5): 1 truncate cleaned up [ 300.993007][T18122] syz.9.4896: attempt to access beyond end of device [ 300.993007][T18122] loop9: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 301.012287][T18122] syz.9.4896: attempt to access beyond end of device [ 301.012287][T18122] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 301.025870][T18122] syz.9.4896: attempt to access beyond end of device [ 301.025870][T18122] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 301.039456][T18122] syz.9.4896: attempt to access beyond end of device [ 301.039456][T18122] loop9: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 301.044270][T18113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.053086][T18122] syz.9.4896: attempt to access beyond end of device [ 301.053086][T18122] loop9: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 301.079176][T18122] syz.9.4896: attempt to access beyond end of device [ 301.079176][T18122] loop9: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 301.098902][T18124] loop7: detected capacity change from 0 to 512 [ 301.119036][T18124] EXT4-fs (loop7): orphan cleanup on readonly fs [ 301.129757][T18124] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.4901: bad orphan inode 13 [ 301.142096][T18124] ext4_test_bit(bit=12, block=18) = 1 [ 301.148013][T18124] is_bad_inode(inode)=0 [ 301.152844][T18124] NEXT_ORPHAN(inode)=2130706432 [ 301.158836][T18124] max_ino=32 [ 301.162959][T18124] i_nlink=1 [ 301.177824][T18124] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.197145][T18124] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.4901: deleted inode referenced: 12 [ 301.209829][T18122] syz.9.4896: attempt to access beyond end of device [ 301.209829][T18122] loop9: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 301.248565][T18124] siw: device registration error -23 [ 301.267644][T14855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.320645][T15837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.357393][T18135] loop9: detected capacity change from 0 to 8192 [ 301.407563][T18147] loop7: detected capacity change from 0 to 512 [ 301.414699][T18147] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 301.426782][T18147] EXT4-fs (loop7): 1 truncate cleaned up [ 301.433130][T18147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.573346][T18154] 9pnet_fd: Insufficient options for proto=fd [ 301.642228][T15837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.666984][T18160] vlan2: entered promiscuous mode [ 301.752638][T18164] loop7: detected capacity change from 0 to 512 [ 301.772823][T18164] EXT4-fs (loop7): 1 orphan inode deleted [ 301.779090][T18164] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.791763][T16477] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:58: Failed to release dquot type 1 [ 301.791934][T18164] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.834639][T15837] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /152/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 301.855867][T15837] EXT4-fs error (device loop7): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 301.874705][T15837] EXT4-fs warning (device loop7): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 301.886519][T15837] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /152/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 301.907619][T15837] EXT4-fs error (device loop7): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 301.926457][T15837] EXT4-fs warning (device loop7): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 301.938213][T15837] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /152/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 301.959745][T15837] EXT4-fs error (device loop7): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 301.978574][T15837] EXT4-fs warning (device loop7): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 301.990567][T15837] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /152/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 302.011725][T15837] EXT4-fs error (device loop7): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 302.030577][T15837] EXT4-fs warning (device loop7): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 302.042122][T15837] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /152/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 302.063378][T15837] EXT4-fs warning (device loop7): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 302.075309][T15837] EXT4-fs warning (device loop7): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 302.087381][T15837] EXT4-fs warning (device loop7): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 302.099729][T15837] EXT4-fs warning (device loop7): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 302.111918][T15837] EXT4-fs warning (device loop7): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 302.124122][T15837] EXT4-fs warning (device loop7): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 302.215620][T18182] loop3: detected capacity change from 0 to 128 [ 302.253019][T18182] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.265806][T18182] ext4 filesystem being mounted at /318/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.305834][T15837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.315567][T18188] loop5: detected capacity change from 0 to 512 [ 302.323891][T18188] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 302.335407][T18188] EXT4-fs (loop5): 1 truncate cleaned up [ 302.341700][T18188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.430583][T18194] netlink: 'syz.3.4923': attribute type 30 has an invalid length. [ 302.536472][T16478] bridge_slave_1: left allmulticast mode [ 302.542202][T16478] bridge_slave_1: left promiscuous mode [ 302.548034][T16478] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.558683][T16478] bridge_slave_0: left allmulticast mode [ 302.564395][T16478] bridge_slave_0: left promiscuous mode [ 302.570342][T16478] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.589437][T18202] loop9: detected capacity change from 0 to 8192 [ 302.642499][T16478] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.651733][T16478] bond_slave_0: left promiscuous mode [ 302.657887][T16478] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.665205][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4928'. [ 302.675643][T16478] bond_slave_1: left promiscuous mode [ 302.681476][T16478] $H (unregistering): Released all slaves [ 302.689474][T18193] hsr0: entered promiscuous mode [ 302.695193][T18202] hsr_slave_0: left promiscuous mode [ 302.709511][T18202] hsr_slave_1: left promiscuous mode [ 302.718570][T14855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.719150][T18202] hsr0 (unregistering): left promiscuous mode [ 302.747470][T18211] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4930'. [ 302.852408][T16478] hsr_slave_0: left promiscuous mode [ 302.866458][T16478] hsr_slave_1: left promiscuous mode [ 302.881211][T18214] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4931'. [ 302.921315][T16478] team0 (unregistering): Port device team_slave_1 removed [ 302.933429][T16478] team0 (unregistering): Port device team_slave_0 removed [ 302.968243][T18217] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 303.030774][T16480] smc: removing ib device syz! [ 303.113260][T13359] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.226958][T18197] chnl_net:caif_netlink_parms(): no params data found [ 303.252618][T18233] netlink: 'syz.3.4938': attribute type 13 has an invalid length. [ 303.263629][T18233] gretap0: refused to change device tx_queue_len [ 303.270985][T18233] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 303.305912][T18197] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.313031][T18197] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.320276][T18197] bridge_slave_0: entered allmulticast mode [ 303.326993][T18197] bridge_slave_0: entered promiscuous mode [ 303.331336][T18239] 9pnet_fd: Insufficient options for proto=fd [ 303.335480][T18197] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.346038][T18197] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.347697][T18240] loop3: detected capacity change from 0 to 512 [ 303.360819][T18197] bridge_slave_1: entered allmulticast mode [ 303.367423][T18197] bridge_slave_1: entered promiscuous mode [ 303.374376][T18240] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 303.396540][T18240] EXT4-fs (loop3): 1 truncate cleaned up [ 303.402695][T18245] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 303.411250][T18240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.411582][T18197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.435296][T18197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.480273][T18197] team0: Port device team_slave_0 added [ 303.499670][T18197] team0: Port device team_slave_1 added [ 303.531401][T18251] FAULT_INJECTION: forcing a failure. [ 303.531401][T18251] name failslab, interval 1, probability 0, space 0, times 0 [ 303.544168][T18251] CPU: 0 UID: 0 PID: 18251 Comm: syz.1.4943 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 303.544205][T18251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.544303][T18251] Call Trace: [ 303.544310][T18251] [ 303.544320][T18251] __dump_stack+0x1d/0x30 [ 303.544347][T18251] dump_stack_lvl+0xe8/0x140 [ 303.544410][T18251] dump_stack+0x15/0x1b [ 303.544432][T18251] should_fail_ex+0x265/0x280 [ 303.544487][T18251] should_failslab+0x8c/0xb0 [ 303.544518][T18251] kmem_cache_alloc_node_noprof+0x57/0x320 [ 303.544555][T18251] ? __alloc_skb+0x101/0x320 [ 303.544589][T18251] __alloc_skb+0x101/0x320 [ 303.544672][T18251] netlink_alloc_large_skb+0xba/0xf0 [ 303.544776][T18251] netlink_sendmsg+0x3cf/0x6b0 [ 303.544815][T18251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.544861][T18251] __sock_sendmsg+0x145/0x180 [ 303.544889][T18251] ____sys_sendmsg+0x31e/0x4e0 [ 303.544932][T18251] ___sys_sendmsg+0x17b/0x1d0 [ 303.544981][T18251] __x64_sys_sendmsg+0xd4/0x160 [ 303.545080][T18251] x64_sys_call+0x2999/0x2fb0 [ 303.545105][T18251] do_syscall_64+0xd2/0x200 [ 303.545137][T18251] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 303.545170][T18251] ? clear_bhb_loop+0x40/0x90 [ 303.545278][T18251] ? clear_bhb_loop+0x40/0x90 [ 303.545307][T18251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.545332][T18251] RIP: 0033:0x7f7596b3e929 [ 303.545351][T18251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.545374][T18251] RSP: 002b:00007f75951a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.545435][T18251] RAX: ffffffffffffffda RBX: 00007f7596d65fa0 RCX: 00007f7596b3e929 [ 303.545450][T18251] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000005 [ 303.545467][T18251] RBP: 00007f75951a7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.545483][T18251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.545498][T18251] R13: 0000000000000000 R14: 00007f7596d65fa0 R15: 00007ffdfb376fb8 [ 303.545519][T18251] [ 303.769228][T18197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.776332][T18197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.802392][T18197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.819981][T18197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.827044][T18197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.853396][T18197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.952677][T18197] hsr_slave_0: entered promiscuous mode [ 303.962077][T18197] hsr_slave_1: entered promiscuous mode [ 304.012006][T13359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.012336][T18265] netlink: 'syz.9.4949': attribute type 13 has an invalid length. [ 304.031237][T18265] gretap0: refused to change device tx_queue_len [ 304.038276][T18265] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 304.083382][T18263] infiniband syz!: set active [ 304.088125][T18263] infiniband syz!: added team_slave_0 [ 304.114748][T18269] loop3: detected capacity change from 0 to 2048 [ 304.135677][T18263] RDS/IB: syz!: added [ 304.140042][T18263] smc: adding ib device syz! with port count 1 [ 304.143176][T18261] FAULT_INJECTION: forcing a failure. [ 304.143176][T18261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.146420][T18263] smc: ib device syz! port 1 has pnetid [ 304.159472][T18261] CPU: 1 UID: 0 PID: 18261 Comm: syz.1.4945 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 304.159517][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.159582][T18261] Call Trace: [ 304.159591][T18261] [ 304.159601][T18261] __dump_stack+0x1d/0x30 [ 304.159651][T18261] dump_stack_lvl+0xe8/0x140 [ 304.159677][T18261] dump_stack+0x15/0x1b [ 304.159700][T18261] should_fail_ex+0x265/0x280 [ 304.159728][T18261] should_fail+0xb/0x20 [ 304.159761][T18261] should_fail_usercopy+0x1a/0x20 [ 304.159823][T18261] _copy_to_user+0x20/0xa0 [ 304.159857][T18261] simple_read_from_buffer+0xb5/0x130 [ 304.160038][T18261] proc_fail_nth_read+0x100/0x140 [ 304.160070][T18261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.160104][T18261] vfs_read+0x19d/0x6f0 [ 304.160129][T18261] ? __rcu_read_unlock+0x4f/0x70 [ 304.160185][T18261] ? __fget_files+0x184/0x1c0 [ 304.160210][T18261] ksys_read+0xda/0x1a0 [ 304.160283][T18261] __x64_sys_read+0x40/0x50 [ 304.160379][T18261] x64_sys_call+0x2d77/0x2fb0 [ 304.160408][T18261] do_syscall_64+0xd2/0x200 [ 304.160446][T18261] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 304.160500][T18261] ? clear_bhb_loop+0x40/0x90 [ 304.160529][T18261] ? clear_bhb_loop+0x40/0x90 [ 304.160557][T18261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.160587][T18261] RIP: 0033:0x7f7596b3d33c [ 304.160608][T18261] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 304.160632][T18261] RSP: 002b:00007f75951a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.160657][T18261] RAX: ffffffffffffffda RBX: 00007f7596d65fa0 RCX: 00007f7596b3d33c [ 304.160675][T18261] RDX: 000000000000000f RSI: 00007f75951a70a0 RDI: 0000000000000008 [ 304.160691][T18261] RBP: 00007f75951a7090 R08: 0000000000000000 R09: 0000000000000000 [ 304.160707][T18261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.160794][T18261] R13: 0000000000000000 R14: 00007f7596d65fa0 R15: 00007ffdfb376fb8 [ 304.160818][T18261] [ 304.202607][T18269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.426757][T18287] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.467603][T18298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4948'. [ 304.608981][T18275] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 304.651497][T18305] loop9: detected capacity change from 0 to 512 [ 304.652749][T18287] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.658300][T18305] EXT4-fs: Ignoring removed orlov option [ 304.697131][T18305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.721055][T18305] EXT4-fs (loop9): orphan cleanup on readonly fs [ 304.728217][T18305] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4955: bg 0: block 248: padding at end of block bitmap is not set [ 304.745801][T18287] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.765977][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 304.766067][ T29] audit: type=1326 audit(2000000212.781:18697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18314 comm="syz.5.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 304.802375][T18305] Quota error (device loop9): write_blk: dquota write failed [ 304.809864][T18305] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 304.819803][ T29] audit: type=1326 audit(2000000212.781:18698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18314 comm="syz.5.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 304.819889][T18305] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4955: Failed to acquire dquot type 1 [ 304.854977][ T29] audit: type=1326 audit(2000000212.781:18699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18314 comm="syz.5.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 304.855665][T18305] EXT4-fs (loop9): 1 truncate cleaned up [ 304.878619][ T29] audit: type=1326 audit(2000000212.781:18700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18314 comm="syz.5.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 304.907966][ T29] audit: type=1326 audit(2000000212.781:18701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18314 comm="syz.5.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 304.931655][ T29] audit: type=1326 audit(2000000212.781:18702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18314 comm="syz.5.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 304.955303][ T29] audit: type=1326 audit(2000000212.781:18703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18314 comm="syz.5.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 304.979844][ T29] audit: type=1326 audit(2000000212.781:18704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18314 comm="syz.5.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 305.009026][T18305] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 305.032234][T18287] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.039036][T18305] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4955'. [ 305.057942][T16477] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 305.079722][T16477] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 305.092312][T16477] EXT4-fs (loop3): This should not happen!! Data will be lost [ 305.092312][T16477] [ 305.102095][T16477] EXT4-fs (loop3): Total free blocks count 0 [ 305.108139][T16477] EXT4-fs (loop3): Free/Dirty block details [ 305.114099][T16477] EXT4-fs (loop3): free_blocks=2415919504 [ 305.119856][T16477] EXT4-fs (loop3): dirty_blocks=11424 [ 305.125303][T16477] EXT4-fs (loop3): Block reservation details [ 305.131517][T16477] EXT4-fs (loop3): i_reserved_data_blocks=714 [ 305.183672][T18287] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.194165][T18336] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 305.202500][T18287] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.220631][T18197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.237402][T18287] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.248830][T16477] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 305.266339][T18287] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.279390][T18197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.296719][T18342] wireguard0: entered promiscuous mode [ 305.302313][T18342] wireguard0: entered allmulticast mode [ 305.329237][T18197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.345069][T18197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.431197][T18197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.461138][T18197] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.493878][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4961'. [ 305.494550][T16478] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.510060][T16478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.524553][T18371] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4962'. [ 305.536587][T17485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.546611][T18373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4961'. [ 305.558787][T16474] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.563654][T18380] loop3: detected capacity change from 0 to 512 [ 305.565989][T16474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.587909][T18380] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 305.616896][T18197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.627429][T18197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.641563][T18380] EXT4-fs (loop3): 1 truncate cleaned up [ 305.647761][T18380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.669974][T18371] FAULT_INJECTION: forcing a failure. [ 305.669974][T18371] name failslab, interval 1, probability 0, space 0, times 0 [ 305.682701][T18371] CPU: 1 UID: 0 PID: 18371 Comm: syz.5.4962 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 305.682761][T18371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.682784][T18371] Call Trace: [ 305.682791][T18371] [ 305.682799][T18371] __dump_stack+0x1d/0x30 [ 305.682822][T18371] dump_stack_lvl+0xe8/0x140 [ 305.682847][T18371] dump_stack+0x15/0x1b [ 305.682890][T18371] should_fail_ex+0x265/0x280 [ 305.682911][T18371] should_failslab+0x8c/0xb0 [ 305.682935][T18371] kmem_cache_alloc_node_noprof+0x57/0x320 [ 305.683007][T18371] ? __alloc_skb+0x101/0x320 [ 305.683067][T18371] ? __rtnl_unlock+0x95/0xb0 [ 305.683097][T18371] __alloc_skb+0x101/0x320 [ 305.683165][T18371] netlink_ack+0xfd/0x500 [ 305.683271][T18371] netlink_rcv_skb+0x192/0x220 [ 305.683306][T18371] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.683345][T18371] rtnetlink_rcv+0x1c/0x30 [ 305.683399][T18371] netlink_unicast+0x59e/0x670 [ 305.683435][T18371] netlink_sendmsg+0x58b/0x6b0 [ 305.683474][T18371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.683574][T18371] __sock_sendmsg+0x145/0x180 [ 305.683601][T18371] ____sys_sendmsg+0x31e/0x4e0 [ 305.683694][T18371] ___sys_sendmsg+0x17b/0x1d0 [ 305.683803][T18371] __x64_sys_sendmsg+0xd4/0x160 [ 305.683836][T18371] x64_sys_call+0x2999/0x2fb0 [ 305.683857][T18371] do_syscall_64+0xd2/0x200 [ 305.683913][T18371] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 305.683946][T18371] ? clear_bhb_loop+0x40/0x90 [ 305.683973][T18371] ? clear_bhb_loop+0x40/0x90 [ 305.684002][T18371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.684029][T18371] RIP: 0033:0x7f6ca655e929 [ 305.684065][T18371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.684083][T18371] RSP: 002b:00007f6ca4bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.684101][T18371] RAX: ffffffffffffffda RBX: 00007f6ca6785fa0 RCX: 00007f6ca655e929 [ 305.684117][T18371] RDX: 00000000200008c0 RSI: 0000200000000000 RDI: 0000000000000005 [ 305.684133][T18371] RBP: 00007f6ca4bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 305.684200][T18371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.684216][T18371] R13: 0000000000000000 R14: 00007f6ca6785fa0 R15: 00007ffc969775e8 [ 305.684241][T18371] [ 306.052248][T18197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.063756][T18411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4967'. [ 306.073066][T18411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4967'. [ 306.125975][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4967'. [ 306.135094][T18411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4967'. [ 306.172954][T18411] geneve2: entered promiscuous mode [ 306.178338][T18411] geneve2: entered allmulticast mode [ 306.321310][T18197] veth0_vlan: entered promiscuous mode [ 306.334692][T13359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.340806][T18197] veth1_vlan: entered promiscuous mode [ 306.367087][T18449] loop9: detected capacity change from 0 to 256 [ 306.383266][T18197] veth0_macvtap: entered promiscuous mode [ 306.399637][T18449] bio_check_eod: 47 callbacks suppressed [ 306.399660][T18449] syz.9.4970: attempt to access beyond end of device [ 306.399660][T18449] loop9: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 306.405714][T18197] veth1_macvtap: entered promiscuous mode [ 306.450593][T18197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.477939][T18197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.491223][T18454] loop3: detected capacity change from 0 to 512 [ 306.498987][T18454] EXT4-fs: Ignoring removed orlov option [ 306.505375][T18454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.517345][T18454] EXT4-fs (loop3): orphan cleanup on readonly fs [ 306.524612][T18454] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4972: bg 0: block 248: padding at end of block bitmap is not set [ 306.539970][T18197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.548797][T18197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.557583][T18197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.566435][T18197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.582033][T18454] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4972: Failed to acquire dquot type 1 [ 306.606211][T18454] EXT4-fs (loop3): 1 truncate cleaned up [ 306.619130][T18454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.666590][T18454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4972'. [ 306.683506][T18469] wireguard0: entered promiscuous mode [ 306.687537][T18472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.689018][T18469] wireguard0: entered allmulticast mode [ 306.783218][T18488] netlink: 'syz.9.4978': attribute type 13 has an invalid length. [ 306.801287][T18488] gretap0: refused to change device tx_queue_len [ 306.830937][T18488] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 306.849674][T18494] bridge0: entered promiscuous mode [ 306.855529][T18494] vlan2: entered promiscuous mode [ 306.887008][T18498] bridge0: entered promiscuous mode [ 306.902595][T18498] vlan2: entered promiscuous mode [ 307.054086][T18525] loop5: detected capacity change from 0 to 128 [ 307.147343][T18525] syz.5.4984: attempt to access beyond end of device [ 307.147343][T18525] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 307.162528][T18525] syz.5.4984: attempt to access beyond end of device [ 307.162528][T18525] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 307.176941][T18525] syz.5.4984: attempt to access beyond end of device [ 307.176941][T18525] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 307.191958][T18525] syz.5.4984: attempt to access beyond end of device [ 307.191958][T18525] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 307.205695][T18544] loop9: detected capacity change from 0 to 512 [ 307.205938][T18525] syz.5.4984: attempt to access beyond end of device [ 307.205938][T18525] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 307.225936][T18525] syz.5.4984: attempt to access beyond end of device [ 307.225936][T18525] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 307.239692][T18525] syz.5.4984: attempt to access beyond end of device [ 307.239692][T18525] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 307.253500][T18525] syz.5.4984: attempt to access beyond end of device [ 307.253500][T18525] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 307.267189][T18525] syz.5.4984: attempt to access beyond end of device [ 307.267189][T18525] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 307.283279][T18544] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4986: Failed to acquire dquot type 1 [ 307.303254][T18544] EXT4-fs (loop9): 1 truncate cleaned up [ 307.309577][T18544] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.323080][T18544] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.339770][T18544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18544 comm=syz.9.4986 [ 308.795996][T18667] hsr0: entered promiscuous mode [ 308.817889][T18667] hsr_slave_0: left promiscuous mode [ 308.830621][T18667] hsr_slave_1: left promiscuous mode [ 308.858773][T18667] hsr0 (unregistering): left promiscuous mode [ 308.873028][T18671] loop9: detected capacity change from 0 to 512 [ 308.906853][T18671] EXT4-fs: Ignoring removed orlov option [ 308.936481][T18671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.015634][T18671] EXT4-fs (loop9): orphan cleanup on readonly fs [ 309.030484][T18680] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 309.046189][T18671] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4997: bg 0: block 248: padding at end of block bitmap is not set [ 309.065797][T18671] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4997: Failed to acquire dquot type 1 [ 309.083180][T18671] EXT4-fs (loop9): 1 truncate cleaned up [ 309.159973][T18693] syz!: rxe_newlink: already configured on team_slave_0 [ 309.475428][T18717] loop5: detected capacity change from 0 to 8192 [ 309.499375][T18725] __nla_validate_parse: 12 callbacks suppressed [ 309.499393][T18725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5010'. [ 309.603110][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5013'. [ 309.657228][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5013'. [ 309.695330][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5014'. [ 309.753631][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5014'. [ 310.576276][T18803] 9pnet_fd: Insufficient options for proto=fd [ 310.617883][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 310.617900][ T29] audit: type=1326 audit(2000000218.631:18868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18810 comm="syz.5.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 310.670151][ T29] audit: type=1326 audit(2000000218.631:18869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18810 comm="syz.5.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 310.685567][T18809] syzkaller0: entered promiscuous mode [ 310.693920][ T29] audit: type=1326 audit(2000000218.631:18870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18810 comm="syz.5.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 310.699320][T18809] syzkaller0: entered allmulticast mode [ 310.728607][ T29] audit: type=1326 audit(2000000218.631:18871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18810 comm="syz.5.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 310.752311][ T29] audit: type=1326 audit(2000000218.631:18872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18810 comm="syz.5.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 310.776371][ T29] audit: type=1326 audit(2000000218.631:18873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18810 comm="syz.5.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 310.800148][ T29] audit: type=1326 audit(2000000218.631:18874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18810 comm="syz.5.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 310.824215][ T29] audit: type=1326 audit(2000000218.631:18875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18810 comm="syz.5.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 310.846537][T18817] loop5: detected capacity change from 0 to 8192 [ 310.847951][ T29] audit: type=1326 audit(2000000218.631:18876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18810 comm="syz.5.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 310.863995][T18820] xt_hashlimit: max too large, truncated to 1048576 [ 310.877740][ T29] audit: type=1326 audit(2000000218.631:18877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18810 comm="syz.5.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca655e929 code=0x7ffc0000 [ 310.884364][T18820] xt_hashlimit: overflow, try lower: 0/0 [ 310.977579][T18822] loop4: detected capacity change from 0 to 8192 [ 311.108518][T18837] loop5: detected capacity change from 0 to 512 [ 311.115511][T18837] EXT4-fs: Ignoring removed orlov option [ 311.121921][T18837] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 311.131026][T18837] EXT4-fs (loop5): orphan cleanup on readonly fs [ 311.138125][T18837] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5033: bg 0: block 248: padding at end of block bitmap is not set [ 311.153059][T18837] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5033: Failed to acquire dquot type 1 [ 311.165319][T18837] EXT4-fs (loop5): 1 truncate cleaned up [ 311.171711][T18837] EXT4-fs mount: 4 callbacks suppressed [ 311.171729][T18837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.191652][T18837] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 311.211122][T18837] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 311.219665][T18837] ext4 filesystem being remounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.232182][T18843] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 311.232211][T18837] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5033: Failed to acquire dquot type 1 [ 311.273484][T18837] syzkaller0: entered promiscuous mode [ 311.278975][T18837] syzkaller0: entered allmulticast mode [ 311.410258][T14855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.429174][T18853] loop5: detected capacity change from 0 to 128 [ 311.490816][T18856] bio_check_eod: 65 callbacks suppressed [ 311.490835][T18856] syz.5.5036: attempt to access beyond end of device [ 311.490835][T18856] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 311.510454][T18856] syz.5.5036: attempt to access beyond end of device [ 311.510454][T18856] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 311.523955][T18856] syz.5.5036: attempt to access beyond end of device [ 311.523955][T18856] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 311.537705][T18856] syz.5.5036: attempt to access beyond end of device [ 311.537705][T18856] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 311.552338][T18856] syz.5.5036: attempt to access beyond end of device [ 311.552338][T18856] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 311.583755][T18856] syz.5.5036: attempt to access beyond end of device [ 311.583755][T18856] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 311.605048][T18856] syz.5.5036: attempt to access beyond end of device [ 311.605048][T18856] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 311.610638][T18858] loop4: detected capacity change from 0 to 512 [ 311.620054][T18856] syz.5.5036: attempt to access beyond end of device [ 311.620054][T18856] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 311.638776][T18856] syz.5.5036: attempt to access beyond end of device [ 311.638776][T18856] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 311.641601][T18858] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 311.652700][T18856] syz.5.5036: attempt to access beyond end of device [ 311.652700][T18856] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 311.677263][T18858] EXT4-fs (loop4): 1 truncate cleaned up [ 311.683550][T18858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.765911][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5038'. [ 311.776173][T18861] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5038'. [ 311.815436][T18867] FAULT_INJECTION: forcing a failure. [ 311.815436][T18867] name failslab, interval 1, probability 0, space 0, times 0 [ 311.828150][T18867] CPU: 1 UID: 60928 PID: 18867 Comm: syz.5.5041 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 311.828188][T18867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.828204][T18867] Call Trace: [ 311.828213][T18867] [ 311.828220][T18867] __dump_stack+0x1d/0x30 [ 311.828296][T18867] dump_stack_lvl+0xe8/0x140 [ 311.828315][T18867] dump_stack+0x15/0x1b [ 311.828358][T18867] should_fail_ex+0x265/0x280 [ 311.828380][T18867] should_failslab+0x8c/0xb0 [ 311.828405][T18867] __kmalloc_cache_node_noprof+0x54/0x320 [ 311.828434][T18867] ? page_pool_create_percpu+0x4d/0x630 [ 311.828547][T18867] page_pool_create_percpu+0x4d/0x630 [ 311.828577][T18867] ? __kfree_skb+0x109/0x150 [ 311.828609][T18867] page_pool_create+0x1a/0x30 [ 311.828658][T18867] __veth_napi_enable_range+0xe4/0x470 [ 311.828765][T18867] veth_napi_enable_range+0xd1/0x190 [ 311.828801][T18867] ? mntput+0x4b/0x80 [ 311.828883][T18867] veth_set_features+0xfe/0x180 [ 311.828914][T18867] __netdev_update_features+0x623/0x1170 [ 311.828949][T18867] ? selinux_capable+0x1f9/0x270 [ 311.828972][T18867] ? should_fail_ex+0xdb/0x280 [ 311.829022][T18867] ethtool_set_one_feature+0x215/0x250 [ 311.829087][T18867] dev_ethtool+0xe6c/0x1650 [ 311.829144][T18867] ? full_name_hash+0x92/0xe0 [ 311.829184][T18867] dev_ioctl+0x2e0/0x960 [ 311.829224][T18867] sock_do_ioctl+0x197/0x220 [ 311.829277][T18867] sock_ioctl+0x41b/0x610 [ 311.829318][T18867] ? __pfx_sock_ioctl+0x10/0x10 [ 311.829342][T18867] __se_sys_ioctl+0xcb/0x140 [ 311.829439][T18867] __x64_sys_ioctl+0x43/0x50 [ 311.829480][T18867] x64_sys_call+0x19a8/0x2fb0 [ 311.829535][T18867] do_syscall_64+0xd2/0x200 [ 311.829574][T18867] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 311.829640][T18867] ? clear_bhb_loop+0x40/0x90 [ 311.829668][T18867] ? clear_bhb_loop+0x40/0x90 [ 311.829697][T18867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.829755][T18867] RIP: 0033:0x7f6ca655e929 [ 311.829775][T18867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.829799][T18867] RSP: 002b:00007f6ca4bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.829820][T18867] RAX: ffffffffffffffda RBX: 00007f6ca6785fa0 RCX: 00007f6ca655e929 [ 311.829836][T18867] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000008 [ 311.829853][T18867] RBP: 00007f6ca4bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 311.829865][T18867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.829878][T18867] R13: 0000000000000000 R14: 00007f6ca6785fa0 R15: 00007ffc969775e8 [ 311.829916][T18867] [ 312.124986][T18867] veth0_to_team: set_features() failed (-12); wanted 0x0000612e4fdd49e9, left 0x0000612e4fdd09e9 [ 312.236432][T18197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.278098][T18890] loop4: detected capacity change from 0 to 256 [ 312.363044][T18896] syz2: rxe_newlink: already configured on ipvlan1 [ 312.374165][T18895] FAULT_INJECTION: forcing a failure. [ 312.374165][T18895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.387392][T18895] CPU: 1 UID: 0 PID: 18895 Comm: syz.4.5051 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 312.387447][T18895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.387463][T18895] Call Trace: [ 312.387472][T18895] [ 312.387482][T18895] __dump_stack+0x1d/0x30 [ 312.387588][T18895] dump_stack_lvl+0xe8/0x140 [ 312.387613][T18895] dump_stack+0x15/0x1b [ 312.387633][T18895] should_fail_ex+0x265/0x280 [ 312.387681][T18895] should_fail+0xb/0x20 [ 312.387703][T18895] should_fail_usercopy+0x1a/0x20 [ 312.387803][T18895] _copy_to_iter+0xcf/0xe30 [ 312.387836][T18895] ? _raw_spin_unlock+0x26/0x50 [ 312.387858][T18895] ? __free_frozen_pages+0x257/0x4f0 [ 312.387896][T18895] ? __folio_put+0x11e/0x150 [ 312.387935][T18895] copy_page_to_iter+0x18f/0x2d0 [ 312.387985][T18895] anon_pipe_read+0x236/0x750 [ 312.388023][T18895] ? __pfx_autoremove_wake_function+0x10/0x10 [ 312.388107][T18895] ? __pfx_anon_pipe_read+0x10/0x10 [ 312.388130][T18895] vfs_read+0x5ca/0x6f0 [ 312.388149][T18895] ? __rcu_read_unlock+0x4f/0x70 [ 312.388172][T18895] ? __pfx_anon_pipe_read+0x10/0x10 [ 312.388275][T18895] ksys_read+0xda/0x1a0 [ 312.388296][T18895] __x64_sys_read+0x40/0x50 [ 312.388316][T18895] x64_sys_call+0x2d77/0x2fb0 [ 312.388336][T18895] do_syscall_64+0xd2/0x200 [ 312.388432][T18895] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 312.388457][T18895] ? clear_bhb_loop+0x40/0x90 [ 312.388481][T18895] ? clear_bhb_loop+0x40/0x90 [ 312.388504][T18895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.388565][T18895] RIP: 0033:0x7fc795e2e929 [ 312.388581][T18895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.388599][T18895] RSP: 002b:00007fc794497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.388675][T18895] RAX: ffffffffffffffda RBX: 00007fc796055fa0 RCX: 00007fc795e2e929 [ 312.388691][T18895] RDX: 000000000000fdef RSI: 0000200000002380 RDI: 0000000000000004 [ 312.388703][T18895] RBP: 00007fc794497090 R08: 0000000000000000 R09: 0000000000000000 [ 312.388792][T18895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.388881][T18895] R13: 0000000000000000 R14: 00007fc796055fa0 R15: 00007fff79f1cda8 [ 312.388899][T18895] [ 312.660252][T18901] 8021q: VLANs not supported on vcan0 [ 312.683120][T18899] loop9: detected capacity change from 0 to 8192 [ 312.701041][T18907] loop4: detected capacity change from 0 to 512 [ 312.708496][T18907] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 312.719926][T18907] EXT4-fs (loop4): 1 truncate cleaned up [ 312.728679][T18907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.796406][T18912] loop9: detected capacity change from 0 to 256 [ 312.839475][T18914] loop9: detected capacity change from 0 to 1024 [ 312.852367][T18914] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.886468][T17485] Trying to write to read-only block-device loop9 [ 312.894593][T17485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.953834][T18919] loop9: detected capacity change from 0 to 8192 [ 312.975247][T18197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.993512][T18922] netlink: 'syz.4.5061': attribute type 13 has an invalid length. [ 313.005181][T18922] gretap0: refused to change device tx_queue_len [ 313.012190][T18922] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 313.047144][T18924] netlink: 'syz.4.5062': attribute type 13 has an invalid length. [ 313.056689][T18924] gretap0: refused to change device tx_queue_len [ 313.063500][T18924] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 313.102710][T18926] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 313.125730][T18930] 9pnet_fd: Insufficient options for proto=fd [ 313.399158][T18945] loop4: detected capacity change from 0 to 2048 [ 313.423740][T18945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.437150][T18945] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.450970][T18955] netlink: 'syz.5.5075': attribute type 13 has an invalid length. [ 313.462482][T18955] gretap0: refused to change device tx_queue_len [ 313.472150][T18955] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 313.489070][T18197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.576949][T18959] loop5: detected capacity change from 0 to 8192 [ 313.614363][T18957] loop4: detected capacity change from 0 to 8192 [ 313.650609][T18964] xt_hashlimit: size too large, truncated to 1048576 [ 313.761003][T18969] 9pnet_fd: Insufficient options for proto=fd [ 313.864176][T18977] loop9: detected capacity change from 0 to 8192 [ 313.985968][T18981] $H: renamed from bond0 (while UP) [ 313.994529][T18981] $H: entered promiscuous mode [ 313.999667][T18981] bond_slave_0: entered promiscuous mode [ 314.005636][T18981] bond_slave_1: entered promiscuous mode [ 314.014529][T18985] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 314.064360][T18989] 8021q: VLANs not supported on vcan0 [ 314.085517][T18991] loop5: detected capacity change from 0 to 2048 [ 314.116214][T18996] 9pnet_fd: Insufficient options for proto=fd [ 314.127515][T18994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.175400][T19000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5092'. [ 314.175816][T18991] loop5: p1 < > p4 [ 314.210956][T18991] loop5: p4 size 8388608 extends beyond EOD, truncated [ 314.410526][T18983] SELinux: ebitmap: truncated map [ 314.415977][T18983] SELinux: failed to load policy [ 314.418830][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x7 [ 314.428532][ T3607] hid-generic 0000:0000:0000.0019: ignoring exceeding usage max [ 314.439922][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.447495][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.454967][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.462448][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.469887][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.477616][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.485058][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.492554][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.499979][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.507497][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.515008][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.522715][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.530312][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.537732][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.545187][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.552720][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.560170][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.567693][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.575245][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.582824][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.590278][ T3607] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 314.598676][ T3607] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 314.670415][T19023] 8021q: VLANs not supported on vcan0 [ 314.700845][T19025] 9pnet_fd: Insufficient options for proto=fd [ 314.783541][T19029] loop4: detected capacity change from 0 to 512 [ 314.799596][T19029] ext4: Unknown parameter 'uid' [ 314.893657][T19034] netlink: 'syz.5.5104': attribute type 13 has an invalid length. [ 314.926441][T19034] gretap0: refused to change device tx_queue_len [ 314.947291][T19034] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 314.983132][T19016] loop3: detected capacity change from 0 to 1024 [ 314.990973][T19016] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 315.003095][T19016] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 315.011806][T19016] EXT4-fs (loop3): orphan cleanup on readonly fs [ 315.018920][T19016] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #3: comm syz.3.5097: iget: bad i_size value: 1407392063428608 [ 315.032233][T19016] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.5097: Bad quota inode: 3, type: 0 [ 315.044392][T19016] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 315.059188][T19016] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 315.067607][T19016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.163651][T13359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.188290][T19051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5110'. [ 315.771137][T19060] 8021q: VLANs not supported on vcan0 [ 315.804379][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 315.804393][ T29] audit: type=1326 audit(2000000223.821:19507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 315.835063][ T29] audit: type=1326 audit(2000000223.821:19508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 315.859015][ T29] audit: type=1326 audit(2000000223.821:19509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 315.882652][ T29] audit: type=1326 audit(2000000223.821:19510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 315.906256][ T29] audit: type=1326 audit(2000000223.821:19511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 315.929925][ T29] audit: type=1326 audit(2000000223.821:19512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 315.953542][ T29] audit: type=1326 audit(2000000223.821:19513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 315.977256][ T29] audit: type=1326 audit(2000000223.821:19514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 316.000900][ T29] audit: type=1326 audit(2000000223.851:19515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 316.037851][ T29] audit: type=1326 audit(2000000223.851:19516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19061 comm="syz.4.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 316.072100][T19066] netlink: 'syz.3.5116': attribute type 39 has an invalid length. [ 316.089439][T19062] loop4: detected capacity change from 0 to 512 [ 316.097064][T19062] EXT4-fs: Ignoring removed nobh option [ 316.099150][T19062] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 316.111624][T19062] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.5114: casefold flag without casefold feature [ 316.124571][T19062] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.5114: couldn't read orphan inode 13 (err -117) [ 316.137508][T19062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.147362][T19072] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 316.198907][T19073] loop9: detected capacity change from 0 to 8192 [ 316.225360][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5117'. [ 316.395764][T19088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5122'. [ 316.590782][T19071] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 316.615018][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5124'. [ 316.638203][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5124'. [ 316.674022][T18197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.692689][T19098] dummy0: entered promiscuous mode [ 316.698296][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5126'. [ 316.710370][T19098] loop4: detected capacity change from 0 to 512 [ 316.717580][T19098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.718592][T19099] dummy0 (unregistering): left promiscuous mode [ 316.742155][T19098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.754739][T19098] ext4 filesystem being mounted at /32/@ supports timestamps until 2038-01-19 (0x7fffffff) [ 316.790492][T18197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.808228][T19105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5127'. [ 316.967411][T19107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5128'. [ 317.103914][T19109] loop9: detected capacity change from 0 to 512 [ 317.179194][T19113] loop9: detected capacity change from 0 to 8192 [ 317.186018][T19113] vfat: Unknown parameter 'H!1`w )ea뀋-sà_uŪ][_Hqm5W)-3?b5e]C"XG \ZHPX0xffffffffffffffff184467440737095516150xffffffffffffffff0xffffffffffffffff' [ 317.365830][T19119] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5133'. [ 317.537980][T19125] loop3: detected capacity change from 0 to 8192 [ 317.703086][T19128] loop3: detected capacity change from 0 to 8192 [ 317.733931][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5137'. [ 317.786667][T19134] loop4: detected capacity change from 0 to 8192 [ 317.798008][T19136] loop3: detected capacity change from 0 to 512 [ 317.810156][T19136] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 317.836739][T19136] EXT4-fs (loop3): 1 truncate cleaned up [ 317.850820][T19136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.865845][T19144] wireguard0: entered promiscuous mode [ 317.871509][T19144] wireguard0: entered allmulticast mode [ 317.908707][T13359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.927804][T19149] loop3: detected capacity change from 0 to 128 [ 317.991799][T19149] bio_check_eod: 100 callbacks suppressed [ 317.991813][T19149] syz.3.5146: attempt to access beyond end of device [ 317.991813][T19149] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 318.011211][T19149] syz.3.5146: attempt to access beyond end of device [ 318.011211][T19149] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 318.029835][T19149] syz.3.5146: attempt to access beyond end of device [ 318.029835][T19149] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 318.043786][T19149] syz.3.5146: attempt to access beyond end of device [ 318.043786][T19149] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 318.043909][T19149] syz.3.5146: attempt to access beyond end of device [ 318.043909][T19149] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 318.043947][T19149] syz.3.5146: attempt to access beyond end of device [ 318.043947][T19149] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 318.089294][T19149] syz.3.5146: attempt to access beyond end of device [ 318.089294][T19149] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 318.103174][T19149] syz.3.5146: attempt to access beyond end of device [ 318.103174][T19149] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 318.116910][T19149] syz.3.5146: attempt to access beyond end of device [ 318.116910][T19149] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 318.130679][T19149] syz.3.5146: attempt to access beyond end of device [ 318.130679][T19149] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 318.138379][T19155] loop4: detected capacity change from 0 to 8192 [ 318.280812][T19168] loop9: detected capacity change from 0 to 8192 [ 318.288701][T19161] loop3: detected capacity change from 0 to 8192 [ 318.307782][T19161] hsr0: entered promiscuous mode [ 318.314575][T19161] hsr_slave_0: left promiscuous mode [ 318.323454][T19161] hsr_slave_1: left promiscuous mode [ 318.331156][T19161] hsr0 (unregistering): left promiscuous mode [ 318.463547][T19178] netlink: 'syz.1.5156': attribute type 14 has an invalid length. [ 318.472604][T19178] FAULT_INJECTION: forcing a failure. [ 318.472604][T19178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.485876][T19178] CPU: 0 UID: 0 PID: 19178 Comm: syz.1.5156 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 318.485904][T19178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.485917][T19178] Call Trace: [ 318.485924][T19178] [ 318.485932][T19178] __dump_stack+0x1d/0x30 [ 318.485957][T19178] dump_stack_lvl+0xe8/0x140 [ 318.485981][T19178] dump_stack+0x15/0x1b [ 318.486012][T19178] should_fail_ex+0x265/0x280 [ 318.486033][T19178] should_fail+0xb/0x20 [ 318.486054][T19178] should_fail_usercopy+0x1a/0x20 [ 318.486081][T19178] _copy_from_user+0x1c/0xb0 [ 318.486123][T19178] kstrtouint_from_user+0x69/0xf0 [ 318.486180][T19178] ? 0xffffffff81000000 [ 318.486193][T19178] ? selinux_file_permission+0x1e4/0x320 [ 318.486222][T19178] proc_fail_nth_write+0x50/0x160 [ 318.486259][T19178] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 318.486285][T19178] vfs_write+0x269/0x8e0 [ 318.486314][T19178] ? vfs_read+0x47f/0x6f0 [ 318.486337][T19178] ? __rcu_read_unlock+0x4f/0x70 [ 318.486363][T19178] ? __fget_files+0x184/0x1c0 [ 318.486385][T19178] ? finish_task_switch+0xad/0x2b0 [ 318.486410][T19178] ksys_write+0xda/0x1a0 [ 318.486432][T19178] __x64_sys_write+0x40/0x50 [ 318.486473][T19178] x64_sys_call+0x2cdd/0x2fb0 [ 318.486550][T19176] loop4: detected capacity change from 0 to 8192 [ 318.486499][T19178] do_syscall_64+0xd2/0x200 [ 318.486590][T19178] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 318.486626][T19178] ? clear_bhb_loop+0x40/0x90 [ 318.486657][T19178] ? clear_bhb_loop+0x40/0x90 [ 318.486688][T19178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.486762][T19178] RIP: 0033:0x7f7596b3d3df [ 318.486782][T19178] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 318.486806][T19178] RSP: 002b:00007f75951a7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 318.486888][T19178] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7596b3d3df [ 318.486906][T19178] RDX: 0000000000000001 RSI: 00007f75951a70a0 RDI: 0000000000000005 [ 318.486922][T19178] RBP: 00007f75951a7090 R08: 0000000000000000 R09: 0000000000000000 [ 318.486962][T19178] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 318.486978][T19178] R13: 0000000000000000 R14: 00007f7596d65fa0 R15: 00007ffdfb376fb8 [ 318.487002][T19178] [ 318.504259][T19182] loop9: detected capacity change from 0 to 512 [ 318.545555][T19184] netlink: 'syz.1.5162': attribute type 13 has an invalid length. [ 318.667444][T19182] loop9: detected capacity change from 0 to 512 [ 318.724417][T19189] netlink: 'syz.4.5163': attribute type 13 has an invalid length. [ 318.753159][T19184] gretap0: refused to change device tx_queue_len [ 318.760820][T19184] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 318.823187][T19189] gretap0: refused to change device tx_queue_len [ 318.830598][T19189] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 318.887987][T19196] loop4: detected capacity change from 0 to 128 [ 318.949043][T19201] xt_hashlimit: max too large, truncated to 1048576 [ 318.955825][T19201] xt_hashlimit: overflow, try lower: 0/0 [ 319.050579][T19212] loop5: detected capacity change from 0 to 512 [ 319.062446][T19212] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 319.074323][T19212] EXT4-fs (loop5): 1 truncate cleaned up [ 319.081912][T19212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.118554][T19216] loop9: detected capacity change from 0 to 1024 [ 319.437984][T14855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.517599][T19238] 8021q: VLANs not supported on vcan0 [ 319.661239][T19252] loop3: detected capacity change from 0 to 128 [ 319.693195][T19248] loop5: detected capacity change from 0 to 128 [ 319.714686][T19248] vfat: Unknown parameter '' [ 319.937241][T19266] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 320.129613][T19280] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 320.177019][T19282] xt_hashlimit: max too large, truncated to 1048576 [ 320.183689][T19282] xt_hashlimit: overflow, try lower: 0/0 [ 320.256738][T19291] loop3: detected capacity change from 0 to 256 [ 320.294917][T19289] loop4: detected capacity change from 0 to 512 [ 320.316914][T19289] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 320.341242][T19293] loop3: detected capacity change from 0 to 2048 [ 320.349530][T19289] EXT4-fs (loop4): 1 orphan inode deleted [ 320.355347][T19289] EXT4-fs (loop4): 1 truncate cleaned up [ 320.362849][T19289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.376634][T19293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.390560][T19293] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 320.405616][T19293] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 320.417989][T19293] EXT4-fs (loop3): This should not happen!! Data will be lost [ 320.417989][T19293] [ 320.427743][T19293] EXT4-fs (loop3): Total free blocks count 0 [ 320.433805][T19293] EXT4-fs (loop3): Free/Dirty block details [ 320.439719][T19293] EXT4-fs (loop3): free_blocks=2415919104 [ 320.445628][T19293] EXT4-fs (loop3): dirty_blocks=16 [ 320.450862][T19293] EXT4-fs (loop3): Block reservation details [ 320.456875][T19293] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 320.463756][T18197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.509489][T16477] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 320.540831][T19315] loop3: detected capacity change from 0 to 512 [ 320.547729][T19315] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 320.565273][T19317] netlink: 'syz.1.5211': attribute type 29 has an invalid length. [ 320.577804][T19315] EXT4-fs (loop3): 1 truncate cleaned up [ 320.584269][T19315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.598678][T19319] xt_hashlimit: max too large, truncated to 1048576 [ 320.605439][T19319] xt_hashlimit: overflow, try lower: 0/0 [ 320.667129][T19313] loop5: detected capacity change from 0 to 8192 [ 320.718708][T19313] hsr0: entered promiscuous mode [ 320.724161][T19313] __nla_validate_parse: 7 callbacks suppressed [ 320.724241][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5210'. [ 320.740284][T19313] hsr_slave_0: left promiscuous mode [ 320.746652][T19313] hsr_slave_1: left promiscuous mode [ 320.776427][T19313] hsr0 (unregistering): left promiscuous mode [ 320.814885][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 320.814900][ T29] audit: type=1326 audit(2000000228.831:19961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.3.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a09bee929 code=0x7ffc0000 [ 320.849381][ T29] audit: type=1326 audit(2000000228.861:19962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.3.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a09bee929 code=0x7ffc0000 [ 320.873036][ T29] audit: type=1326 audit(2000000228.861:19963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.3.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a09bee929 code=0x7ffc0000 [ 320.892802][T19330] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 320.896741][ T29] audit: type=1326 audit(2000000228.861:19964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.3.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a09bee929 code=0x7ffc0000 [ 320.943176][ T29] audit: type=1326 audit(2000000228.941:19965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.3.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a09bee929 code=0x7ffc0000 [ 320.966945][ T29] audit: type=1326 audit(2000000228.941:19966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.3.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a09bee929 code=0x7ffc0000 [ 320.991656][ T29] audit: type=1326 audit(2000000228.941:19967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19314 comm="syz.3.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a09bee929 code=0x7ffc0000 [ 321.015720][ T29] audit: type=1326 audit(2000000228.941:19968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19324 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 321.017246][T19333] loop4: detected capacity change from 0 to 512 [ 321.039303][ T29] audit: type=1326 audit(2000000228.941:19969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19324 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 321.048601][T19333] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 321.082607][T13359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.092583][T19333] EXT4-fs (loop4): 1 truncate cleaned up [ 321.098830][T19333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.174709][T19340] netlink: 'syz.5.5218': attribute type 13 has an invalid length. [ 321.184800][T19340] gretap0: refused to change device tx_queue_len [ 321.191781][T19340] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 321.209256][T18197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.235789][T19344] FAULT_INJECTION: forcing a failure. [ 321.235789][T19344] name failslab, interval 1, probability 0, space 0, times 0 [ 321.248547][T19344] CPU: 0 UID: 0 PID: 19344 Comm: syz.5.5220 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 321.248614][T19344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.248630][T19344] Call Trace: [ 321.248639][T19344] [ 321.248648][T19344] __dump_stack+0x1d/0x30 [ 321.248672][T19344] dump_stack_lvl+0xe8/0x140 [ 321.248690][T19344] dump_stack+0x15/0x1b [ 321.248771][T19344] should_fail_ex+0x265/0x280 [ 321.248796][T19344] should_failslab+0x8c/0xb0 [ 321.248869][T19344] kmem_cache_alloc_noprof+0x50/0x310 [ 321.248901][T19344] ? getname_flags+0x80/0x3b0 [ 321.248932][T19344] getname_flags+0x80/0x3b0 [ 321.248963][T19344] user_path_at+0x28/0x130 [ 321.249004][T19344] __se_sys_mount+0x25b/0x2e0 [ 321.249024][T19344] ? fput+0x8f/0xc0 [ 321.249051][T19344] __x64_sys_mount+0x67/0x80 [ 321.249077][T19344] x64_sys_call+0xd36/0x2fb0 [ 321.249111][T19344] do_syscall_64+0xd2/0x200 [ 321.249165][T19344] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 321.249200][T19344] ? clear_bhb_loop+0x40/0x90 [ 321.249299][T19344] ? clear_bhb_loop+0x40/0x90 [ 321.249327][T19344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.249362][T19344] RIP: 0033:0x7f6ca655e929 [ 321.249382][T19344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.249406][T19344] RSP: 002b:00007f6ca4bc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 321.249486][T19344] RAX: ffffffffffffffda RBX: 00007f6ca6785fa0 RCX: 00007f6ca655e929 [ 321.249499][T19344] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000000 [ 321.249511][T19344] RBP: 00007f6ca4bc7090 R08: 0000200000000180 R09: 0000000000000000 [ 321.249523][T19344] R10: 0000000002010000 R11: 0000000000000246 R12: 0000000000000001 [ 321.249551][T19344] R13: 0000000000000000 R14: 00007f6ca6785fa0 R15: 00007ffc969775e8 [ 321.249573][T19344] [ 321.467990][T19351] 8021q: VLANs not supported on vcan0 [ 321.483630][T19353] loop4: detected capacity change from 0 to 512 [ 321.484120][T19357] netlink: 'syz.1.5224': attribute type 3 has an invalid length. [ 321.490819][T19353] EXT4-fs: Ignoring removed orlov option [ 321.497738][T19357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5224'. [ 321.512423][T19353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.533323][T19353] EXT4-fs (loop4): orphan cleanup on readonly fs [ 321.539778][T19357] netlink: 'syz.1.5224': attribute type 3 has an invalid length. [ 321.539796][T19357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5224'. [ 321.543127][ T29] audit: type=1400 audit(2000000229.551:19970): avc: denied { bind } for pid=19356 comm="syz.1.5224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.560472][T19353] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5219: bg 0: block 248: padding at end of block bitmap is not set [ 321.580501][T19360] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5225'. [ 321.598882][T19362] loop3: detected capacity change from 0 to 512 [ 321.615246][T19362] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 321.625811][T19353] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5219: Failed to acquire dquot type 1 [ 321.739062][T19362] EXT4-fs (loop3): 1 truncate cleaned up [ 321.745281][T19362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.757363][T19353] EXT4-fs (loop4): 1 truncate cleaned up [ 321.765669][T19353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.794759][T19353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5219'. [ 321.833224][T18197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.940841][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5229'. [ 321.965932][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5229'. [ 322.011810][T19382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=19382 comm=syz.9.5232 [ 322.057187][T13359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.087599][T19386] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5234'. [ 322.109948][T19390] 8021q: VLANs not supported on vcan0 [ 322.112033][T19386] vhci_hcd: invalid port number 16 [ 322.120662][T19386] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 322.136970][T19389] loop4: detected capacity change from 0 to 2048 [ 322.191415][T19393] loop9: detected capacity change from 0 to 8192 [ 322.202939][T19389] Alternate GPT is invalid, using primary GPT. [ 322.209316][T19389] loop4: p1 p2 p3 [ 322.273262][T19405] wireguard0: entered promiscuous mode [ 322.278806][T19405] wireguard0: entered allmulticast mode [ 322.293767][T19408] loop3: detected capacity change from 0 to 512 [ 322.302725][T19408] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 322.317577][T19408] EXT4-fs (loop3): 1 truncate cleaned up [ 322.324350][T19408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.395997][T19413] loop9: detected capacity change from 0 to 512 [ 322.407747][T19415] loop4: detected capacity change from 0 to 512 [ 322.431235][T19415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 322.466162][T19415] EXT4-fs (loop4): 1 truncate cleaned up [ 322.504930][T19413] loop9: detected capacity change from 0 to 512 [ 322.526645][T19415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.591622][T19422] xt_TCPMSS: Only works on TCP SYN packets [ 323.022920][T19441] loop5: detected capacity change from 0 to 512 [ 323.034202][T19441] EXT4-fs: Ignoring removed orlov option [ 323.166963][T13359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.180836][T19441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.222362][T19441] EXT4-fs (loop5): orphan cleanup on readonly fs [ 323.245234][T19441] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5253: bg 0: block 248: padding at end of block bitmap is not set [ 323.275075][T18197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.294719][T19441] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5253: Failed to acquire dquot type 1 [ 323.320191][T19441] EXT4-fs (loop5): 1 truncate cleaned up [ 323.335178][T19441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.401694][T19453] loop4: detected capacity change from 0 to 8192 [ 323.446797][T19440] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5253'. [ 323.497207][T19463] program syz.9.5258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.546554][T14855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.638404][T19469] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5261'. [ 324.232075][T19481] FAULT_INJECTION: forcing a failure. [ 324.232075][T19481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.245395][T19481] CPU: 1 UID: 0 PID: 19481 Comm: syz.3.5266 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 324.245516][T19481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.245533][T19481] Call Trace: [ 324.245543][T19481] [ 324.245553][T19481] __dump_stack+0x1d/0x30 [ 324.245591][T19481] dump_stack_lvl+0xe8/0x140 [ 324.245665][T19481] dump_stack+0x15/0x1b [ 324.245710][T19481] should_fail_ex+0x265/0x280 [ 324.245737][T19481] should_fail+0xb/0x20 [ 324.245759][T19481] should_fail_usercopy+0x1a/0x20 [ 324.245861][T19481] _copy_to_iter+0x381/0xe30 [ 324.245891][T19481] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 324.245959][T19481] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 324.246057][T19481] __skb_datagram_iter+0xc6/0x690 [ 324.246145][T19481] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 324.246308][T19481] skb_copy_datagram_iter+0x3d/0x110 [ 324.246387][T19481] netlink_recvmsg+0x1a8/0x550 [ 324.246421][T19481] ? __pfx_netlink_recvmsg+0x10/0x10 [ 324.246487][T19481] sock_recvmsg+0x136/0x170 [ 324.246513][T19481] ____sys_recvmsg+0xf5/0x280 [ 324.246548][T19481] ___sys_recvmsg+0x11f/0x370 [ 324.246605][T19481] do_recvmmsg+0x1ef/0x540 [ 324.246649][T19481] ? get_timespec64+0xc9/0x100 [ 324.246726][T19481] __x64_sys_recvmmsg+0xfb/0x170 [ 324.246767][T19481] x64_sys_call+0x1c6a/0x2fb0 [ 324.246800][T19481] do_syscall_64+0xd2/0x200 [ 324.246882][T19481] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 324.246913][T19481] ? clear_bhb_loop+0x40/0x90 [ 324.246990][T19481] ? clear_bhb_loop+0x40/0x90 [ 324.247012][T19481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.247091][T19481] RIP: 0033:0x7f9a09bee929 [ 324.247110][T19481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.247135][T19481] RSP: 002b:00007f9a08257038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 324.247159][T19481] RAX: ffffffffffffffda RBX: 00007f9a09e15fa0 RCX: 00007f9a09bee929 [ 324.247249][T19481] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 324.247267][T19481] RBP: 00007f9a08257090 R08: 0000200000003700 R09: 0000000000000000 [ 324.247282][T19481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.247298][T19481] R13: 0000000000000000 R14: 00007f9a09e15fa0 R15: 00007ffc4a7ed2b8 [ 324.247321][T19481] [ 324.500681][T19486] FAULT_INJECTION: forcing a failure. [ 324.500681][T19486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.513827][T19486] CPU: 1 UID: 0 PID: 19486 Comm: syz.3.5268 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 324.513852][T19486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.513863][T19486] Call Trace: [ 324.513869][T19486] [ 324.513875][T19486] __dump_stack+0x1d/0x30 [ 324.513958][T19486] dump_stack_lvl+0xe8/0x140 [ 324.513975][T19486] dump_stack+0x15/0x1b [ 324.514059][T19486] should_fail_ex+0x265/0x280 [ 324.514154][T19486] should_fail+0xb/0x20 [ 324.514234][T19486] should_fail_usercopy+0x1a/0x20 [ 324.514254][T19486] _copy_to_user+0x20/0xa0 [ 324.514277][T19486] simple_read_from_buffer+0xb5/0x130 [ 324.514381][T19486] proc_fail_nth_read+0x100/0x140 [ 324.514403][T19486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.514423][T19486] vfs_read+0x19d/0x6f0 [ 324.514502][T19486] ? _raw_spin_unlock+0x26/0x50 [ 324.514520][T19486] ? finish_task_switch+0xad/0x2b0 [ 324.514559][T19486] ? xfd_validate_state+0x45/0xf0 [ 324.514576][T19486] ksys_read+0xda/0x1a0 [ 324.514595][T19486] __x64_sys_read+0x40/0x50 [ 324.514655][T19486] x64_sys_call+0x2d77/0x2fb0 [ 324.514722][T19486] do_syscall_64+0xd2/0x200 [ 324.514747][T19486] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 324.514808][T19486] ? clear_bhb_loop+0x40/0x90 [ 324.514837][T19486] ? clear_bhb_loop+0x40/0x90 [ 324.514857][T19486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.514876][T19486] RIP: 0033:0x7f9a09bed33c [ 324.514889][T19486] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 324.514905][T19486] RSP: 002b:00007f9a08257030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.514923][T19486] RAX: ffffffffffffffda RBX: 00007f9a09e15fa0 RCX: 00007f9a09bed33c [ 324.514935][T19486] RDX: 000000000000000f RSI: 00007f9a082570a0 RDI: 0000000000000004 [ 324.514946][T19486] RBP: 00007f9a08257090 R08: 0000000000000000 R09: 0000000000000000 [ 324.514956][T19486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.515044][T19486] R13: 0000000000000000 R14: 00007f9a09e15fa0 R15: 00007ffc4a7ed2b8 [ 324.515063][T19486] [ 324.736874][T19487] loop9: detected capacity change from 0 to 256 [ 324.805640][T19490] loop3: detected capacity change from 0 to 8192 [ 324.993005][T19507] loop9: detected capacity change from 0 to 512 [ 325.002942][T19497] loop4: detected capacity change from 0 to 8192 [ 325.074858][T19507] loop9: detected capacity change from 0 to 512 [ 325.097450][T19511] loop3: detected capacity change from 0 to 512 [ 325.104748][T19511] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 325.126442][T19511] EXT4-fs (loop3): 1 truncate cleaned up [ 325.133339][T19511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.196409][T19516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.205212][T19516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.395715][T13359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.470405][T19531] loop3: detected capacity change from 0 to 8192 [ 325.496272][T19533] xt_hashlimit: max too large, truncated to 1048576 [ 325.502952][T19533] xt_hashlimit: overflow, try lower: 0/0 [ 325.558396][T19539] wireguard0: entered promiscuous mode [ 325.563981][T19539] wireguard0: entered allmulticast mode [ 325.610223][T19545] loop3: detected capacity change from 0 to 8192 [ 325.777819][T19550] 8021q: VLANs not supported on vcan0 [ 325.802916][T19552] wireguard0: entered promiscuous mode [ 325.808512][T19552] wireguard0: entered allmulticast mode [ 325.988577][T19564] netlink: 'syz.5.5298': attribute type 29 has an invalid length. [ 325.997711][T19564] netlink: 'syz.5.5298': attribute type 29 has an invalid length. [ 326.006668][T19564] netlink: 'syz.5.5298': attribute type 29 has an invalid length. [ 326.038453][T19566] netlink: 'syz.1.5299': attribute type 3 has an invalid length. [ 326.048426][T19568] xt_hashlimit: max too large, truncated to 1048576 [ 326.055143][T19568] xt_hashlimit: overflow, try lower: 0/0 [ 326.090550][T19571] netlink: 'syz.1.5302': attribute type 1 has an invalid length. [ 326.104535][T19571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.121244][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 326.121261][ T29] audit: type=1400 audit(2000000234.141:20461): avc: denied { write } for pid=19570 comm="syz.1.5302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 326.155471][T19571] bond0: (slave gretap1): making interface the new active one [ 326.164012][T19571] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 326.236443][T19577] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 326.341993][T19583] loop9: detected capacity change from 0 to 8192 [ 326.481583][T19585] $H: renamed from bond0 (while UP) [ 326.490021][T19585] $H: entered promiscuous mode [ 326.495206][T19585] bond_slave_0: entered promiscuous mode [ 326.501018][T19585] bond_slave_1: entered promiscuous mode [ 326.540185][ T29] audit: type=1326 audit(2000000234.551:20462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19582 comm="syz.9.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 326.563950][ T29] audit: type=1326 audit(2000000234.551:20463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19582 comm="syz.9.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 326.742762][ T29] audit: type=1326 audit(2000000234.601:20464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19582 comm="syz.9.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 326.766388][ T29] audit: type=1326 audit(2000000234.601:20465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19582 comm="syz.9.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 326.790028][ T29] audit: type=1326 audit(2000000234.601:20466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19582 comm="syz.9.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 326.813839][ T29] audit: type=1326 audit(2000000234.651:20467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19582 comm="syz.9.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 326.837337][ T29] audit: type=1326 audit(2000000234.651:20468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19582 comm="syz.9.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 326.861002][ T29] audit: type=1326 audit(2000000234.651:20469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19582 comm="syz.9.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 326.884657][ T29] audit: type=1326 audit(2000000234.651:20470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19582 comm="syz.9.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1de3e4e929 code=0x7ffc0000 [ 326.954188][T19590] loop3: detected capacity change from 0 to 8192 [ 326.972247][T19587] loop9: detected capacity change from 0 to 1764 [ 326.979057][T19587] iso9660: Unknown parameter '' [ 326.996937][T19597] loop5: detected capacity change from 0 to 128 [ 327.070260][T19601] loop4: detected capacity change from 0 to 512 [ 327.095431][T19601] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 327.150554][T19597] bio_check_eod: 248 callbacks suppressed [ 327.150571][T19597] syz.5.5310: attempt to access beyond end of device [ 327.150571][T19597] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 327.171350][T19601] EXT4-fs (loop4): 1 truncate cleaned up [ 327.177468][T19597] syz.5.5310: attempt to access beyond end of device [ 327.177468][T19597] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 327.192496][T19601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.218705][T19597] syz.5.5310: attempt to access beyond end of device [ 327.218705][T19597] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 327.235950][T19597] syz.5.5310: attempt to access beyond end of device [ 327.235950][T19597] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 327.252514][T19597] syz.5.5310: attempt to access beyond end of device [ 327.252514][T19597] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 327.266101][T19597] syz.5.5310: attempt to access beyond end of device [ 327.266101][T19597] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 327.299421][T19597] syz.5.5310: attempt to access beyond end of device [ 327.299421][T19597] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 327.338247][T19597] syz.5.5310: attempt to access beyond end of device [ 327.338247][T19597] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 327.353258][T19597] syz.5.5310: attempt to access beyond end of device [ 327.353258][T19597] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 327.367333][T19597] syz.5.5310: attempt to access beyond end of device [ 327.367333][T19597] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 327.572157][T19618] 8021q: VLANs not supported on vcan0 [ 327.620135][T19621] netlink: 'syz.5.5318': attribute type 13 has an invalid length. [ 327.765966][T19621] gretap0: refused to change device tx_queue_len [ 327.782190][T18197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.792043][T19621] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 328.124912][T19633] __nla_validate_parse: 1 callbacks suppressed [ 328.124927][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5322'. [ 328.347241][T19644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.367070][T19639] loop9: detected capacity change from 0 to 8192 [ 328.462458][T19654] loop5: detected capacity change from 0 to 512 [ 328.488778][T19655] loop4: detected capacity change from 0 to 2048 [ 328.504546][T19654] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 328.523057][T19654] EXT4-fs (loop5): 1 truncate cleaned up [ 328.529342][T19654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.555310][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5325'. [ 328.635433][T19668] loop3: detected capacity change from 0 to 256 [ 328.819509][T19659] wireguard0: entered promiscuous mode [ 328.825113][T19659] wireguard0: entered allmulticast mode [ 328.934782][T19655] Alternate GPT is invalid, using primary GPT. [ 328.941314][T19655] loop4: p1 p2 p3 [ 329.103009][T14855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.422372][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5341'. [ 329.431443][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5341'. [ 329.451936][T19696] loop3: detected capacity change from 0 to 8192 [ 329.502648][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5341'. [ 329.814326][T19704] loop4: detected capacity change from 0 to 8192 [ 330.000690][T19698] hsr0: entered promiscuous mode [ 330.071205][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5344'. [ 330.119462][T19698] hsr_slave_0: left promiscuous mode [ 330.138702][T19714] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5345'. [ 330.163218][T19698] hsr_slave_1: left promiscuous mode [ 330.548496][T19725] FAULT_INJECTION: forcing a failure. [ 330.548496][T19725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.561695][T19725] CPU: 1 UID: 0 PID: 19725 Comm: syz.4.5351 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 330.561861][T19725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.561893][T19725] Call Trace: [ 330.561902][T19725] [ 330.561942][T19725] __dump_stack+0x1d/0x30 [ 330.561968][T19725] dump_stack_lvl+0xe8/0x140 [ 330.562077][T19725] dump_stack+0x15/0x1b [ 330.562099][T19725] should_fail_ex+0x265/0x280 [ 330.562120][T19725] should_fail+0xb/0x20 [ 330.562205][T19725] should_fail_usercopy+0x1a/0x20 [ 330.562233][T19725] _copy_from_user+0x1c/0xb0 [ 330.562264][T19725] ___sys_sendmsg+0xc1/0x1d0 [ 330.562320][T19725] __x64_sys_sendmsg+0xd4/0x160 [ 330.562380][T19725] x64_sys_call+0x2999/0x2fb0 [ 330.562409][T19725] do_syscall_64+0xd2/0x200 [ 330.562497][T19725] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 330.562528][T19725] ? clear_bhb_loop+0x40/0x90 [ 330.562615][T19725] ? clear_bhb_loop+0x40/0x90 [ 330.562644][T19725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.562680][T19725] RIP: 0033:0x7fc795e2e929 [ 330.562698][T19725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.562721][T19725] RSP: 002b:00007fc794497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.562759][T19725] RAX: ffffffffffffffda RBX: 00007fc796055fa0 RCX: 00007fc795e2e929 [ 330.562776][T19725] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 330.562792][T19725] RBP: 00007fc794497090 R08: 0000000000000000 R09: 0000000000000000 [ 330.562808][T19725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.562823][T19725] R13: 0000000000000000 R14: 00007fc796055fa0 R15: 00007fff79f1cda8 [ 330.562846][T19725] [ 330.797985][T19728] netlink: 'syz.4.5352': attribute type 13 has an invalid length. [ 330.899322][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5347'. [ 331.154269][T19728] gretap0: refused to change device tx_queue_len [ 331.166089][T19728] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 331.223103][T19732] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5353'. [ 331.276456][T19734] FAULT_INJECTION: forcing a failure. [ 331.276456][T19734] name failslab, interval 1, probability 0, space 0, times 0 [ 331.289256][T19734] CPU: 1 UID: 0 PID: 19734 Comm: syz.1.5355 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 331.289289][T19734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.289306][T19734] Call Trace: [ 331.289315][T19734] [ 331.289325][T19734] __dump_stack+0x1d/0x30 [ 331.289397][T19734] dump_stack_lvl+0xe8/0x140 [ 331.289482][T19734] dump_stack+0x15/0x1b [ 331.289504][T19734] should_fail_ex+0x265/0x280 [ 331.289529][T19734] should_failslab+0x8c/0xb0 [ 331.289558][T19734] kmem_cache_alloc_noprof+0x50/0x310 [ 331.289601][T19734] ? alloc_empty_file+0x76/0x200 [ 331.289697][T19734] alloc_empty_file+0x76/0x200 [ 331.289731][T19734] alloc_file_pseudo+0xc6/0x160 [ 331.289826][T19734] __shmem_file_setup+0x1de/0x210 [ 331.289864][T19734] shmem_file_setup+0x3b/0x50 [ 331.289900][T19734] __se_sys_memfd_create+0x2c3/0x590 [ 331.289924][T19734] __x64_sys_memfd_create+0x31/0x40 [ 331.289960][T19734] x64_sys_call+0x122f/0x2fb0 [ 331.289985][T19734] do_syscall_64+0xd2/0x200 [ 331.290040][T19734] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 331.290104][T19734] ? clear_bhb_loop+0x40/0x90 [ 331.290132][T19734] ? clear_bhb_loop+0x40/0x90 [ 331.290160][T19734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.290224][T19734] RIP: 0033:0x7f7596b3e929 [ 331.290242][T19734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.290265][T19734] RSP: 002b:00007f75951a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 331.290314][T19734] RAX: ffffffffffffffda RBX: 00000000000006a5 RCX: 00007f7596b3e929 [ 331.290330][T19734] RDX: 00007f75951a6ef0 RSI: 0000000000000000 RDI: 00007f7596bc14cc [ 331.290348][T19734] RBP: 00002000000013c0 R08: 00007f75951a6bb7 R09: 00007f75951a6e40 [ 331.290363][T19734] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000800 [ 331.290380][T19734] R13: 00007f75951a6ef0 R14: 00007f75951a6eb0 R15: 0000200000000b40 [ 331.290405][T19734] [ 331.501240][T19736] 8021q: VLANs not supported on vcan0 [ 331.683301][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 331.683361][ T29] audit: type=1326 audit(2000000239.701:20705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19738 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 331.740959][ T29] audit: type=1326 audit(2000000239.731:20706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19738 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 331.764686][ T29] audit: type=1326 audit(2000000239.731:20707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19738 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 331.788483][ T29] audit: type=1326 audit(2000000239.731:20708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19738 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 331.812355][ T29] audit: type=1326 audit(2000000239.731:20709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19738 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 331.836187][ T29] audit: type=1326 audit(2000000239.731:20710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19738 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 331.859921][ T29] audit: type=1326 audit(2000000239.731:20711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19738 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 331.883527][ T29] audit: type=1326 audit(2000000239.731:20712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19738 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 331.907106][ T29] audit: type=1326 audit(2000000239.731:20713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19738 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 331.930876][ T29] audit: type=1326 audit(2000000239.731:20714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19738 comm="syz.4.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc795e2e929 code=0x7ffc0000 [ 331.967645][T19745] loop9: detected capacity change from 0 to 256 [ 332.062365][T19741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.159474][T19750] loop5: detected capacity change from 0 to 8192 [ 332.224699][T19758] serio: Serial port ptm0 [ 332.600395][T19773] 8021q: VLANs not supported on vcan0 [ 332.763930][T19779] loop9: detected capacity change from 0 to 256 [ 332.812768][T19783] loop9: detected capacity change from 0 to 512 [ 332.921970][T19783] loop9: detected capacity change from 0 to 512 [ 332.996440][T19785] loop9: detected capacity change from 0 to 256 [ 333.613651][T19806] bridge_slave_0: left allmulticast mode [ 333.619421][T19806] bridge_slave_0: left promiscuous mode [ 333.625147][T19806] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.908704][T19806] bridge_slave_1: left allmulticast mode [ 333.914432][T19806] bridge_slave_1: left promiscuous mode [ 333.920244][T19806] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.018399][T19806] $H: (slave bond_slave_0): Releasing backup interface [ 334.026967][T19806] bond_slave_0: left promiscuous mode [ 334.034635][T19806] $H: (slave bond_slave_1): Releasing backup interface [ 334.043845][T19806] bond_slave_1: left promiscuous mode [ 334.052269][T19806] team0: Port device team_slave_0 removed [ 334.059807][T19806] team0: Port device team_slave_1 removed [ 334.106488][T19822] loop3: detected capacity change from 0 to 128 [ 334.115493][T19822] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.128531][T19822] ext4 filesystem being mounted at /406/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 334.168983][T13359] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.386094][T19838] 8021q: VLANs not supported on vcan0 [ 334.466301][T16480] dvmrp1 (unregistering): left allmulticast mode [ 334.494930][T16480] $H (unregistering): Released all slaves [ 334.564148][T16480] tipc: Disabling bearer [ 334.569442][T16480] tipc: Left network mode [ 334.597034][T19849] wireguard0: entered promiscuous mode [ 334.602635][T19849] wireguard0: entered allmulticast mode [ 334.694248][T19858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.884559][T19864] FAULT_INJECTION: forcing a failure. [ 334.884559][T19864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.897738][T19864] CPU: 1 UID: 0 PID: 19864 Comm: syz.4.5402 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 334.897853][T19864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 334.897870][T19864] Call Trace: [ 334.897879][T19864] [ 334.897890][T19864] __dump_stack+0x1d/0x30 [ 334.897986][T19864] dump_stack_lvl+0xe8/0x140 [ 334.898035][T19864] dump_stack+0x15/0x1b [ 334.898057][T19864] should_fail_ex+0x265/0x280 [ 334.898084][T19864] should_fail+0xb/0x20 [ 334.898106][T19864] should_fail_usercopy+0x1a/0x20 [ 334.898172][T19864] _copy_from_iter+0xcf/0xe40 [ 334.898239][T19864] ? __build_skb_around+0x1a0/0x200 [ 334.898319][T19864] ? __alloc_skb+0x223/0x320 [ 334.898355][T19864] netlink_sendmsg+0x471/0x6b0 [ 334.898393][T19864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.898484][T19864] __sock_sendmsg+0x145/0x180 [ 334.898506][T19864] __sys_sendto+0x268/0x330 [ 334.898550][T19864] __x64_sys_sendto+0x76/0x90 [ 334.898585][T19864] x64_sys_call+0x2eb6/0x2fb0 [ 334.898685][T19864] do_syscall_64+0xd2/0x200 [ 334.898769][T19864] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 334.898804][T19864] ? clear_bhb_loop+0x40/0x90 [ 334.898826][T19864] ? clear_bhb_loop+0x40/0x90 [ 334.898854][T19864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.898935][T19864] RIP: 0033:0x7fc795e2e929 [ 334.898953][T19864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.898977][T19864] RSP: 002b:00007fc794497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 334.899001][T19864] RAX: ffffffffffffffda RBX: 00007fc796055fa0 RCX: 00007fc795e2e929 [ 334.899018][T19864] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 334.899044][T19864] RBP: 00007fc794497090 R08: 0000000000000000 R09: 0000000000000000 [ 334.899058][T19864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.899074][T19864] R13: 0000000000000000 R14: 00007fc796055fa0 R15: 00007fff79f1cda8 [ 334.899099][T19864] [ 335.197407][T19869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5404'. [ 335.495742][T19872] wireguard0: entered promiscuous mode [ 335.501332][T19872] wireguard0: entered allmulticast mode [ 335.618407][T16475] smc: removing ib device syz2 [ 335.783752][T19887] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5411'. [ 335.882156][T19890] netlink: 'syz.5.5410': attribute type 13 has an invalid length. [ 336.043711][T19892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.068023][T19892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.166958][T19890] gretap0: refused to change device tx_queue_len [ 336.174301][T19890] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 336.240706][T19829] chnl_net:caif_netlink_parms(): no params data found [ 336.355993][T19904] program syz.4.5415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.545707][T19915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5420'. [ 336.765031][T19906] wireguard0: entered promiscuous mode [ 336.770691][T19906] wireguard0: entered allmulticast mode [ 336.853566][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 336.853581][ T29] audit: type=1326 audit(2000000244.871:21004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7596b3e929 code=0x7ffc0000 [ 336.898405][T19829] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.905586][T19829] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.923116][T19829] bridge_slave_0: entered allmulticast mode [ 336.938110][T19829] bridge_slave_0: entered promiscuous mode [ 336.950940][ T29] audit: type=1326 audit(2000000244.901:21005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7596b3e929 code=0x7ffc0000 [ 336.974884][ T29] audit: type=1326 audit(2000000244.901:21006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7596b3e929 code=0x7ffc0000 [ 336.998763][ T29] audit: type=1326 audit(2000000244.901:21007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7596b3e929 code=0x7ffc0000 [ 337.022525][ T29] audit: type=1326 audit(2000000244.901:21008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7596b3e929 code=0x7ffc0000 [ 337.046133][ T29] audit: type=1326 audit(2000000244.901:21009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7596b3e929 code=0x7ffc0000 [ 337.069902][ T29] audit: type=1326 audit(2000000244.901:21010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7596b3e929 code=0x7ffc0000 [ 337.093499][ T29] audit: type=1326 audit(2000000244.901:21011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7596b3e929 code=0x7ffc0000 [ 337.117107][ T29] audit: type=1326 audit(2000000244.901:21012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7596b3e929 code=0x7ffc0000 [ 337.140733][ T29] audit: type=1326 audit(2000000244.901:21013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19921 comm="syz.1.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7596b3e929 code=0x7ffc0000 [ 337.395911][T19829] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.403232][T19829] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.426039][T19829] bridge_slave_1: entered allmulticast mode [ 337.439904][T19829] bridge_slave_1: entered promiscuous mode [ 337.475545][ C1] ================================================================== [ 337.483688][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 337.490935][ C1] [ 337.493281][ C1] read-write to 0xffff8881014cd658 of 8 bytes by interrupt on cpu 0: [ 337.501367][ C1] can_rcv_filter+0xd9/0x4f0 [ 337.505994][ C1] can_receive+0x163/0x1c0 [ 337.510439][ C1] canfd_rcv+0xed/0x190 [ 337.514624][ C1] __netif_receive_skb+0x120/0x270 [ 337.519779][ C1] process_backlog+0x229/0x420 [ 337.524563][ C1] __napi_poll+0x63/0x3a0 [ 337.528932][ C1] net_rx_action+0x391/0x830 [ 337.533536][ C1] handle_softirqs+0xb7/0x290 [ 337.538236][ C1] run_ksoftirqd+0x1c/0x30 [ 337.542681][ C1] smpboot_thread_fn+0x32b/0x530 [ 337.547658][ C1] kthread+0x486/0x510 [ 337.551748][ C1] ret_from_fork+0xda/0x150 [ 337.556277][ C1] ret_from_fork_asm+0x1a/0x30 [ 337.561066][ C1] [ 337.563403][ C1] read-write to 0xffff8881014cd658 of 8 bytes by interrupt on cpu 1: [ 337.571483][ C1] can_rcv_filter+0xd9/0x4f0 [ 337.576101][ C1] can_receive+0x163/0x1c0 [ 337.580581][ C1] canfd_rcv+0xed/0x190 [ 337.584767][ C1] __netif_receive_skb+0x120/0x270 [ 337.589939][ C1] process_backlog+0x229/0x420 [ 337.594730][ C1] __napi_poll+0x63/0x3a0 [ 337.599097][ C1] net_rx_action+0x391/0x830 [ 337.603706][ C1] handle_softirqs+0xb7/0x290 [ 337.608420][ C1] do_softirq+0x5d/0x90 [ 337.612594][ C1] __local_bh_enable_ip+0x70/0x80 [ 337.617678][ C1] rcu_tasks_invoke_cbs+0x29a/0x340 [ 337.622903][ C1] rcu_tasks_one_gp+0x891/0x8e0 [ 337.627783][ C1] rcu_tasks_kthread+0xf7/0x110 [ 337.632658][ C1] kthread+0x486/0x510 [ 337.636752][ C1] ret_from_fork+0xda/0x150 [ 337.641285][ C1] ret_from_fork_asm+0x1a/0x30 [ 337.646075][ C1] [ 337.648414][ C1] value changed: 0x0000000000070d80 -> 0x0000000000070d81 [ 337.655541][ C1] [ 337.657891][ C1] Reported by Kernel Concurrency Sanitizer on: [ 337.664242][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcu_tasks_trace Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 337.676600][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.686705][ C1] ================================================================== [ 337.738273][ C0] ================================================================== [ 337.746411][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 337.753635][ C0] [ 337.755971][ C0] read-write to 0xffff8881039ce080 of 4 bytes by interrupt on cpu 1: [ 337.764056][ C0] can_can_gw_rcv+0x807/0x820 [ 337.768762][ C0] can_rcv_filter+0xc7/0x4f0 [ 337.773384][ C0] can_receive+0x163/0x1c0 [ 337.777846][ C0] canfd_rcv+0xed/0x190 [ 337.782057][ C0] __netif_receive_skb+0x120/0x270 [ 337.787212][ C0] process_backlog+0x229/0x420 [ 337.791998][ C0] __napi_poll+0x63/0x3a0 [ 337.796366][ C0] net_rx_action+0x391/0x830 [ 337.800992][ C0] handle_softirqs+0xb7/0x290 [ 337.805697][ C0] run_ksoftirqd+0x1c/0x30 [ 337.810152][ C0] smpboot_thread_fn+0x32b/0x530 [ 337.815130][ C0] kthread+0x486/0x510 [ 337.819222][ C0] ret_from_fork+0xda/0x150 [ 337.823747][ C0] ret_from_fork_asm+0x1a/0x30 [ 337.828555][ C0] [ 337.830904][ C0] read-write to 0xffff8881039ce080 of 4 bytes by interrupt on cpu 0: [ 337.839015][ C0] can_can_gw_rcv+0x807/0x820 [ 337.843726][ C0] can_rcv_filter+0xc7/0x4f0 [ 337.848363][ C0] can_receive+0x163/0x1c0 [ 337.852810][ C0] canfd_rcv+0xed/0x190 [ 337.856997][ C0] __netif_receive_skb+0x120/0x270 [ 337.862147][ C0] process_backlog+0x229/0x420 [ 337.866938][ C0] __napi_poll+0x63/0x3a0 [ 337.871319][ C0] net_rx_action+0x391/0x830 [ 337.875931][ C0] handle_softirqs+0xb7/0x290 [ 337.880629][ C0] run_ksoftirqd+0x1c/0x30 [ 337.885092][ C0] smpboot_thread_fn+0x32b/0x530 [ 337.890064][ C0] kthread+0x486/0x510 [ 337.894159][ C0] ret_from_fork+0xda/0x150 [ 337.898684][ C0] ret_from_fork_asm+0x1a/0x30 [ 337.903478][ C0] [ 337.905819][ C0] value changed: 0x0007427c -> 0x0007427d [ 337.911547][ C0] [ 337.913891][ C0] Reported by Kernel Concurrency Sanitizer on: [ 337.920155][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 337.932164][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.942254][ C0] ================================================================== [ 340.480789][ C1] ================================================================== [ 340.488934][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 340.496205][ C1] [ 340.498604][ C1] read-write to 0xffff8881014cd658 of 8 bytes by interrupt on cpu 0: [ 340.506695][ C1] can_rcv_filter+0xd9/0x4f0 [ 340.511314][ C1] can_receive+0x163/0x1c0 [ 340.515758][ C1] canfd_rcv+0xed/0x190 [ 340.519959][ C1] __netif_receive_skb+0x120/0x270 [ 340.525112][ C1] process_backlog+0x229/0x420 [ 340.529901][ C1] __napi_poll+0x63/0x3a0 [ 340.534272][ C1] net_rx_action+0x391/0x830 [ 340.538877][ C1] handle_softirqs+0xb7/0x290 [ 340.543581][ C1] do_softirq+0x5d/0x90 [ 340.547753][ C1] __local_bh_enable_ip+0x70/0x80 [ 340.552801][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 340.557755][ C1] batadv_nc_purge_paths+0x22b/0x270 [ 340.563073][ C1] batadv_nc_worker+0x3d8/0xae0 [ 340.567947][ C1] process_scheduled_works+0x4cb/0x9d0 [ 340.573445][ C1] worker_thread+0x582/0x770 [ 340.578504][ C1] kthread+0x486/0x510 [ 340.582596][ C1] ret_from_fork+0xda/0x150 [ 340.587122][ C1] ret_from_fork_asm+0x1a/0x30 [ 340.591998][ C1] [ 340.594332][ C1] read-write to 0xffff8881014cd658 of 8 bytes by interrupt on cpu 1: [ 340.602414][ C1] can_rcv_filter+0xd9/0x4f0 [ 340.607036][ C1] can_receive+0x163/0x1c0 [ 340.611481][ C1] canfd_rcv+0xed/0x190 [ 340.615660][ C1] __netif_receive_skb+0x120/0x270 [ 340.620846][ C1] process_backlog+0x229/0x420 [ 340.625625][ C1] __napi_poll+0x63/0x3a0 [ 340.629999][ C1] net_rx_action+0x391/0x830 [ 340.634613][ C1] handle_softirqs+0xb7/0x290 [ 340.639312][ C1] do_softirq+0x5d/0x90 [ 340.643484][ C1] __local_bh_enable_ip+0x70/0x80 [ 340.648552][ C1] xt_replace_table+0x260/0x450 [ 340.653433][ C1] __do_replace+0xc9/0x570 [ 340.657876][ C1] do_ipt_set_ctl+0x6ea/0x820 [ 340.662582][ C1] nf_setsockopt+0x196/0x1b0 [ 340.667199][ C1] ip_setsockopt+0x102/0x110 [ 340.671816][ C1] tcp_setsockopt+0x98/0xb0 [ 340.676350][ C1] sock_common_setsockopt+0x66/0x80 [ 340.681577][ C1] __sys_setsockopt+0x181/0x200 [ 340.686459][ C1] __x64_sys_setsockopt+0x64/0x80 [ 340.691510][ C1] x64_sys_call+0x2bd5/0x2fb0 [ 340.696215][ C1] do_syscall_64+0xd2/0x200 [ 340.700751][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.706668][ C1] [ 340.709007][ C1] value changed: 0x00000000000a9aba -> 0x00000000000a9abb [ 340.716129][ C1] [ 340.718462][ C1] Reported by Kernel Concurrency Sanitizer on: [ 340.724630][ C1] CPU: 1 UID: 0 PID: 12666 Comm: syz-executor Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 340.737081][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.747162][ C1] ================================================================== [ 340.771514][ C0] ================================================================== [ 340.779891][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 340.787118][ C0] [ 340.789456][ C0] read-write to 0xffff8881039ce080 of 4 bytes by interrupt on cpu 1: [ 340.797540][ C0] can_can_gw_rcv+0x807/0x820 [ 340.802241][ C0] can_rcv_filter+0xc7/0x4f0 [ 340.806860][ C0] can_receive+0x163/0x1c0 [ 340.810573][T19829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.811292][ C0] canfd_rcv+0xed/0x190 [ 340.824514][ C0] __netif_receive_skb+0x120/0x270 [ 340.829671][ C0] process_backlog+0x229/0x420 [ 340.834462][ C0] __napi_poll+0x63/0x3a0 [ 340.838840][ C0] net_rx_action+0x391/0x830 [ 340.843453][ C0] handle_softirqs+0xb7/0x290 [ 340.848157][ C0] do_softirq+0x5d/0x90 [ 340.852336][ C0] __local_bh_enable_ip+0x70/0x80 [ 340.857406][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 340.862371][ C0] lock_sock_nested+0x112/0x140 [ 340.867252][ C0] tcp_close+0x1d/0xd0 [ 340.871358][ C0] inet_release+0xcb/0xf0 [ 340.875815][ C0] inet6_release+0x3e/0x60 [ 340.880361][ C0] sock_close+0x6b/0x150 [ 340.884642][ C0] __fput+0x29b/0x650 [ 340.888669][ C0] fput_close_sync+0x6e/0x120 [ 340.893392][ C0] __x64_sys_close+0x56/0xf0 [ 340.898023][ C0] x64_sys_call+0x2747/0x2fb0 [ 340.902743][ C0] do_syscall_64+0xd2/0x200 [ 340.907300][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.913234][ C0] [ 340.915585][ C0] read-write to 0xffff8881039ce080 of 4 bytes by interrupt on cpu 0: [ 340.923677][ C0] can_can_gw_rcv+0x807/0x820 [ 340.928385][ C0] can_rcv_filter+0xc7/0x4f0 [ 340.933012][ C0] can_receive+0x163/0x1c0 [ 340.937458][ C0] canfd_rcv+0xed/0x190 [ 340.941649][ C0] __netif_receive_skb+0x120/0x270 [ 340.946798][ C0] process_backlog+0x229/0x420 [ 340.951581][ C0] __napi_poll+0x63/0x3a0 [ 340.955950][ C0] net_rx_action+0x391/0x830 [ 340.960570][ C0] handle_softirqs+0xb7/0x290 [ 340.965265][ C0] do_softirq+0x5d/0x90 [ 340.969443][ C0] __local_bh_enable_ip+0x70/0x80 [ 340.974493][ C0] _raw_write_unlock_bh+0x1f/0x30 [ 340.979539][ C0] neigh_periodic_work+0x5ef/0x6a0 [ 340.984673][ C0] process_scheduled_works+0x4cb/0x9d0 [ 340.990167][ C0] worker_thread+0x582/0x770 [ 340.994788][ C0] kthread+0x486/0x510 [ 340.998863][ C0] ret_from_fork+0xda/0x150 [ 341.003382][ C0] ret_from_fork_asm+0x1a/0x30 [ 341.008172][ C0] [ 341.010513][ C0] value changed: 0x000ad490 -> 0x000ad491 [ 341.016259][ C0] [ 341.018591][ C0] Reported by Kernel Concurrency Sanitizer on: [ 341.024749][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 341.036666][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.046752][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 341.053716][ C0] ================================================================== [ 341.621029][T19829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.550258][ C0] ================================================================== [ 343.558482][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 343.565819][ C0] [ 343.568241][ C0] read-write to 0xffff8881014cd6a8 of 8 bytes by interrupt on cpu 1: [ 343.576327][ C0] can_rcv_filter+0xd9/0x4f0 [ 343.580958][ C0] can_receive+0x163/0x1c0 [ 343.586008][ C0] canfd_rcv+0xed/0x190 [ 343.590190][ C0] __netif_receive_skb+0x120/0x270 [ 343.595386][ C0] process_backlog+0x229/0x420 [ 343.600171][ C0] __napi_poll+0x63/0x3a0 [ 343.604546][ C0] net_rx_action+0x391/0x830 [ 343.609171][ C0] handle_softirqs+0xb7/0x290 [ 343.613880][ C0] run_ksoftirqd+0x1c/0x30 [ 343.618326][ C0] smpboot_thread_fn+0x32b/0x530 [ 343.623302][ C0] kthread+0x486/0x510 [ 343.627398][ C0] ret_from_fork+0xda/0x150 [ 343.631932][ C0] ret_from_fork_asm+0x1a/0x30 [ 343.636718][ C0] [ 343.639060][ C0] read-write to 0xffff8881014cd6a8 of 8 bytes by interrupt on cpu 0: [ 343.647227][ C0] can_rcv_filter+0xd9/0x4f0 [ 343.651850][ C0] can_receive+0x163/0x1c0 [ 343.656290][ C0] canfd_rcv+0xed/0x190 [ 343.660487][ C0] __netif_receive_skb+0x120/0x270 [ 343.665640][ C0] process_backlog+0x229/0x420 [ 343.670428][ C0] __napi_poll+0x63/0x3a0 [ 343.674801][ C0] net_rx_action+0x391/0x830 [ 343.679420][ C0] handle_softirqs+0xb7/0x290 [ 343.684182][ C0] do_softirq+0x5d/0x90 [ 343.688459][ C0] __local_bh_enable_ip+0x70/0x80 [ 343.693510][ C0] _raw_write_unlock_bh+0x1f/0x30 [ 343.698568][ C0] neigh_periodic_work+0x5ef/0x6a0 [ 343.703702][ C0] process_scheduled_works+0x4cb/0x9d0 [ 343.709197][ C0] worker_thread+0x582/0x770 [ 343.713825][ C0] kthread+0x486/0x510 [ 343.717919][ C0] ret_from_fork+0xda/0x150 [ 343.722448][ C0] ret_from_fork_asm+0x1a/0x30 [ 343.727229][ C0] [ 343.729566][ C0] value changed: 0x00000000000e7052 -> 0x00000000000e7053 [ 343.736684][ C0] [ 343.739011][ C0] Reported by Kernel Concurrency Sanitizer on: [ 343.745176][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 343.757096][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.767175][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 343.774141][ C0] ================================================================== [ 343.832861][ C0] ================================================================== [ 343.840985][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 343.848205][ C0] [ 343.850533][ C0] read-write to 0xffff8881039ce020 of 4 bytes by interrupt on cpu 1: [ 343.858617][ C0] can_can_gw_rcv+0x807/0x820 [ 343.863323][ C0] can_rcv_filter+0xc7/0x4f0 [ 343.867946][ C0] can_receive+0x163/0x1c0 [ 343.872392][ C0] canfd_rcv+0xed/0x190 [ 343.876663][ C0] __netif_receive_skb+0x120/0x270 [ 343.881811][ C0] process_backlog+0x229/0x420 [ 343.886598][ C0] __napi_poll+0x63/0x3a0 [ 343.890960][ C0] net_rx_action+0x391/0x830 [ 343.895568][ C0] handle_softirqs+0xb7/0x290 [ 343.900271][ C0] do_softirq+0x5d/0x90 [ 343.904451][ C0] __local_bh_enable_ip+0x70/0x80 [ 343.909496][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 343.914457][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 343.920121][ C0] process_scheduled_works+0x4cb/0x9d0 [ 343.925617][ C0] worker_thread+0x582/0x770 [ 343.930245][ C0] kthread+0x486/0x510 [ 343.934336][ C0] ret_from_fork+0xda/0x150 [ 343.938864][ C0] ret_from_fork_asm+0x1a/0x30 [ 343.943655][ C0] [ 343.945993][ C0] read-write to 0xffff8881039ce020 of 4 bytes by interrupt on cpu 0: [ 343.954076][ C0] can_can_gw_rcv+0x807/0x820 [ 343.958780][ C0] can_rcv_filter+0xc7/0x4f0 [ 343.963400][ C0] can_receive+0x163/0x1c0 [ 343.967847][ C0] canfd_rcv+0xed/0x190 [ 343.972031][ C0] __netif_receive_skb+0x120/0x270 [ 343.977186][ C0] process_backlog+0x229/0x420 [ 343.981973][ C0] __napi_poll+0x63/0x3a0 [ 343.986340][ C0] net_rx_action+0x391/0x830 [ 343.990955][ C0] handle_softirqs+0xb7/0x290 [ 343.995685][ C0] do_softirq+0x5d/0x90 [ 343.999861][ C0] __local_bh_enable_ip+0x70/0x80 [ 344.004921][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 344.009882][ C0] wg_packet_decrypt_worker+0x69b/0x6e0 [ 344.015464][ C0] process_scheduled_works+0x4cb/0x9d0 [ 344.020961][ C0] worker_thread+0x582/0x770 [ 344.025590][ C0] kthread+0x486/0x510 [ 344.029683][ C0] ret_from_fork+0xda/0x150 [ 344.034220][ C0] ret_from_fork_asm+0x1a/0x30 [ 344.039009][ C0] [ 344.041348][ C0] value changed: 0x000eadc2 -> 0x000eadc3 [ 344.047095][ C0] [ 344.049459][ C0] Reported by Kernel Concurrency Sanitizer on: [ 344.055625][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 344.067639][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.077723][ C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 344.084285][ C0] ================================================================== [ 344.532854][T19829] team0: Port device team_slave_0 added [ 346.020253][T19829] team0: Port device team_slave_1 added [ 346.570832][ C0] ================================================================== [ 346.578974][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 346.586220][ C0] [ 346.588553][ C0] read-write to 0xffff8881014cd6a8 of 8 bytes by interrupt on cpu 1: [ 346.596649][ C0] can_rcv_filter+0xd9/0x4f0 [ 346.601271][ C0] can_receive+0x163/0x1c0 [ 346.605721][ C0] canfd_rcv+0xed/0x190 [ 346.609913][ C0] __netif_receive_skb+0x120/0x270 [ 346.615062][ C0] process_backlog+0x229/0x420 [ 346.619865][ C0] __napi_poll+0x63/0x3a0 [ 346.624241][ C0] net_rx_action+0x391/0x830 [ 346.628861][ C0] handle_softirqs+0xb7/0x290 [ 346.633558][ C0] do_softirq+0x5d/0x90 [ 346.637741][ C0] __local_bh_enable_ip+0x70/0x80 [ 346.642788][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 346.647901][ C0] batadv_tt_purge+0x2cd/0x610 [ 346.652692][ C0] process_scheduled_works+0x4cb/0x9d0 [ 346.658191][ C0] worker_thread+0x582/0x770 [ 346.662907][ C0] kthread+0x486/0x510 [ 346.666998][ C0] ret_from_fork+0xda/0x150 [ 346.671521][ C0] ret_from_fork_asm+0x1a/0x30 [ 346.676316][ C0] [ 346.678650][ C0] read-write to 0xffff8881014cd6a8 of 8 bytes by interrupt on cpu 0: [ 346.686733][ C0] can_rcv_filter+0xd9/0x4f0 [ 346.691355][ C0] can_receive+0x163/0x1c0 [ 346.695806][ C0] canfd_rcv+0xed/0x190 [ 346.700001][ C0] __netif_receive_skb+0x120/0x270 [ 346.705153][ C0] process_backlog+0x229/0x420 [ 346.709940][ C0] __napi_poll+0x63/0x3a0 [ 346.714299][ C0] net_rx_action+0x391/0x830 [ 346.718919][ C0] handle_softirqs+0xb7/0x290 [ 346.723707][ C0] do_softirq+0x5d/0x90 [ 346.727886][ C0] __local_bh_enable_ip+0x70/0x80 [ 346.732940][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 346.737899][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 346.743599][ C0] process_scheduled_works+0x4cb/0x9d0 [ 346.749090][ C0] worker_thread+0x582/0x770 [ 346.753714][ C0] kthread+0x486/0x510 [ 346.757804][ C0] ret_from_fork+0xda/0x150 [ 346.762327][ C0] ret_from_fork_asm+0x1a/0x30 [ 346.767107][ C0] [ 346.769436][ C0] value changed: 0x00000000001201d7 -> 0x00000000001201d8 [ 346.776551][ C0] [ 346.778893][ C0] Reported by Kernel Concurrency Sanitizer on: [ 346.785054][ C0] CPU: 0 UID: 0 PID: 16476 Comm: kworker/u8:57 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 346.797485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.807565][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 346.814374][ C0] ================================================================== [ 346.903699][ C1] ================================================================== [ 346.911824][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 346.919046][ C1] [ 346.921376][ C1] read-write to 0xffff8881039ce020 of 4 bytes by interrupt on cpu 0: [ 346.929460][ C1] can_can_gw_rcv+0x807/0x820 [ 346.934245][ C1] can_rcv_filter+0xc7/0x4f0 [ 346.938863][ C1] can_receive+0x163/0x1c0 [ 346.943308][ C1] canfd_rcv+0xed/0x190 [ 346.947497][ C1] __netif_receive_skb+0x120/0x270 [ 346.952658][ C1] process_backlog+0x229/0x420 [ 346.957440][ C1] __napi_poll+0x63/0x3a0 [ 346.961805][ C1] net_rx_action+0x391/0x830 [ 346.966406][ C1] handle_softirqs+0xb7/0x290 [ 346.971099][ C1] run_ksoftirqd+0x1c/0x30 [ 346.975541][ C1] smpboot_thread_fn+0x32b/0x530 [ 346.980513][ C1] kthread+0x486/0x510 [ 346.984603][ C1] ret_from_fork+0xda/0x150 [ 346.989130][ C1] ret_from_fork_asm+0x1a/0x30 [ 346.994028][ C1] [ 346.996369][ C1] read-write to 0xffff8881039ce020 of 4 bytes by interrupt on cpu 1: [ 347.004457][ C1] can_can_gw_rcv+0x807/0x820 [ 347.009164][ C1] can_rcv_filter+0xc7/0x4f0 [ 347.013788][ C1] can_receive+0x163/0x1c0 [ 347.018241][ C1] canfd_rcv+0xed/0x190 [ 347.022434][ C1] __netif_receive_skb+0x120/0x270 [ 347.027592][ C1] process_backlog+0x229/0x420 [ 347.032379][ C1] __napi_poll+0x63/0x3a0 [ 347.036748][ C1] net_rx_action+0x391/0x830 [ 347.041364][ C1] handle_softirqs+0xb7/0x290 [ 347.046085][ C1] do_softirq+0x5d/0x90 [ 347.050281][ C1] __local_bh_enable_ip+0x70/0x80 [ 347.055331][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 347.060308][ C1] batadv_tt_purge+0x2cd/0x610 [ 347.065125][ C1] process_scheduled_works+0x4cb/0x9d0 [ 347.070705][ C1] worker_thread+0x582/0x770 [ 347.075344][ C1] kthread+0x486/0x510 [ 347.079428][ C1] ret_from_fork+0xda/0x150 [ 347.083950][ C1] ret_from_fork_asm+0x1a/0x30 [ 347.088739][ C1] [ 347.091070][ C1] value changed: 0x00124813 -> 0x00124815 [ 347.096795][ C1] [ 347.099136][ C1] Reported by Kernel Concurrency Sanitizer on: [ 347.105297][ C1] CPU: 1 UID: 0 PID: 16477 Comm: kworker/u8:58 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 347.117735][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.127823][ C1] Workqueue: bat_events batadv_tt_purge [ 347.133416][ C1] ==================================================================