last executing test programs: 4m27.458656473s ago: executing program 32 (id=669): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 3m20.103328901s ago: executing program 33 (id=1699): setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f0000000400)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000680)=@gcm_256={{0x304}, '\x00', "acba84f0a6731f234db1cc7f3f382ad796c5667cb12ea9ffffffff31d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) (async) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES16=r1, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x2, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0x10}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x242, 0x40) (async) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x242, 0x40) recvmsg$can_j1939(r5, &(0x7f0000000380)={&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000500)=""/81, 0x51}], 0x1, &(0x7f0000000600)=""/101, 0x65}, 0x1) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r9, 0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x2000000) (async) unlinkat(0xffffffffffffff9c, 0x0, 0x2000000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000040)=0x8) 2m21.274129693s ago: executing program 34 (id=2449): socket(0x2, 0x80805, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1694, &(0x7f0000000340)={0x0, 0xa079, 0x10, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r6, 0x0, 0x0) sendfile(r6, r4, 0x0, 0x3) statx(0xffffffffffffffff, 0x0, 0x6000, 0x40, 0x0) syz_open_dev$sg(0x0, 0x0, 0x127081) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000000100)={0x11}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'pim6reg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x6, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0xfffffff2, 0x26, &(0x7f00000002c0)=""/38, 0x41000, 0x0, '\x00', r9, @fallback=0x36, r1, 0x8, &(0x7f0000000340)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x80000000}, 0x10, r10, r7, 0x4, &(0x7f0000000740)=[r1, r11, r1, r1, r1, r1], &(0x7f0000000780)=[{0x1, 0x1, 0x2, 0x4}, {0x1, 0x5, 0xa, 0x4}, {0x5, 0x5, 0x4, 0xc}, {0x0, 0x1, 0x5, 0x8}], 0x10, 0x1df, @void, @value}, 0x94) 22.370115902s ago: executing program 6 (id=4721): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x37) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x38) open(0x0, 0x551083, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x7, &(0x7f0000000a40)=""/4096) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000001) listen(r4, 0x2000fff) accept(r4, 0xfffffffffffffffd, &(0x7f0000000500)=0xfffffffffffffc9f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) 21.496460404s ago: executing program 6 (id=4741): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) read(r0, 0x0, 0x0) 21.478959524s ago: executing program 6 (id=4742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) creat(&(0x7f0000000400)='./bus\x00', 0x22) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 21.458935604s ago: executing program 6 (id=4743): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030428bd7000000000a08cb18d54", @ANYRES32=0x0, @ANYBLOB="46060918408a0000240012800c0001006d6163766c616e001400028006000100000000000800010010000000"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0xe4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffff, 0xa0d140) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000340)='./bus\x00', 0x4937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffa, @loopback}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0xffff, @private0={0xfc, 0x0, '\x00', 0x21}, 0x9}}}, &(0x7f0000000200)=0x84) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000100)=0x1) linkat(r5, &(0x7f00000012c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x42000, 0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) mknodat$null(r7, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000180001fd060003000006001500633800001400168010000880dcd5cc7b2f042b9b0fcf00"/56], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRESOCT=r8, @ANYRES32=r8], 0x78}}, 0x0) 21.328817816s ago: executing program 6 (id=4744): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 21.170012368s ago: executing program 6 (id=4745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r6, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-1\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setregid(0xffffffffffffffff, 0x0) 21.133614579s ago: executing program 35 (id=4745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r6, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-1\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setregid(0xffffffffffffffff, 0x0) 13.07416116s ago: executing program 8 (id=4898): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4}, 0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000000)='Y', 0x1, 0xffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12.855622973s ago: executing program 8 (id=4904): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 12.797869484s ago: executing program 8 (id=4906): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0x2ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) (fail_nth: 9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4e1, &(0x7f0000000740)="$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") r2 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x18}) 12.264633071s ago: executing program 8 (id=4911): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030428bd7000000000a08cb18d54", @ANYRES32=0x0, @ANYBLOB="46060918408a0000240012800c0001006d6163766c616e001400028006000100000000000800010010000000"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0xe4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffff, 0xa0d140) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000340)='./bus\x00', 0x4937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffa, @loopback}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0xffff, @private0={0xfc, 0x0, '\x00', 0x21}, 0x9}}}, &(0x7f0000000200)=0x84) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000100)=0x1) linkat(r4, &(0x7f00000012c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 12.055815814s ago: executing program 8 (id=4920): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 11.918585086s ago: executing program 2 (id=4924): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./cgroup/../file0\x00', 0xa5000084) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(0x0) 11.900218996s ago: executing program 2 (id=4925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='rxrpc_tx_data\x00', r3, 0x0, 0x3}, 0x18) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r4, 0x0, 0x0, 0xa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x6, 0x0, 0x1, 0x8, 0x1ffff, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket(0x10, 0x3, 0x0) r10 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f00000003c0)=0xfffffff7, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r9, 0x80, &(0x7f00000004c0)=@ieee802154={0x24, @long={0x3, 0x1}}}) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r13}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r7, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r14, &(0x7f0000000180), 0x400008a, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) 11.761895578s ago: executing program 8 (id=4927): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x50) syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xbbd2, 0x10100, 0x0, 0x242}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2, @ANYRES64=0x0], 0x20) 11.761310758s ago: executing program 36 (id=4927): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x50) syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xbbd2, 0x10100, 0x0, 0x242}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2, @ANYRES64=0x0], 0x20) 11.713649918s ago: executing program 2 (id=4929): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x30, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x4004) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) close(r7) r8 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r8, 0x0, 0x400000000000000, 0x2) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRESHEX=r3], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) 11.576467211s ago: executing program 2 (id=4931): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030428bd7000000000a08cb18d54", @ANYRES32=0x0, @ANYBLOB="46060918408a0000240012800c0001006d6163766c616e001400028006000100000000000800010010000000"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0xe4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffff, 0xa0d140) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000340)='./bus\x00', 0x4937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffa, @loopback}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0xffff, @private0={0xfc, 0x0, '\x00', 0x21}, 0x9}}}, &(0x7f0000000200)=0x84) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000100)=0x1) linkat(r4, &(0x7f00000012c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 11.393309453s ago: executing program 2 (id=4932): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x1b, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 10.756535982s ago: executing program 2 (id=4941): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000780090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200"], 0x1ec}}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) r2 = inotify_init1(0xd53808d5f2875908) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x24000420) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) tkill(0x0, 0x12) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2) flock(r6, 0x2) dup3(r6, r5, 0x0) 10.755925862s ago: executing program 37 (id=4941): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000780090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200"], 0x1ec}}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) r2 = inotify_init1(0xd53808d5f2875908) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x24000420) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) tkill(0x0, 0x12) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2) flock(r6, 0x2) dup3(r6, r5, 0x0) 9.626405717s ago: executing program 7 (id=4951): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, &(0x7f0000000000)={0x20, 0x2, 0x0, 0xfeff200d, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) get_mempolicy(0x0, &(0x7f0000002000), 0x82c, &(0x7f0000fff000/0x1000)=nil, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x9, &(0x7f00000001c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xebe7e31d90b993c0}}], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 9.587743688s ago: executing program 7 (id=4952): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@user_xattr}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x587, &(0x7f0000000dc0)="$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") r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4}, 0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000000)='Y', 0x1, 0xffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.968310516s ago: executing program 7 (id=4957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x22, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @private=0xa010101}}}}}, 0x0) 8.728793749s ago: executing program 7 (id=4958): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030428bd7000000000a08cb18d54", @ANYRES32=0x0, @ANYBLOB="46060918408a0000240012800c0001006d6163766c616e001400028006000100000000000800010010000000"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0xe4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffff, 0xa0d140) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000340)='./bus\x00', 0x4937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffa, @loopback}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0xffff, @private0={0xfc, 0x0, '\x00', 0x21}, 0x9}}}, &(0x7f0000000200)=0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 8.483763983s ago: executing program 7 (id=4961): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68e}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file2\x00', 0x2000414, &(0x7f0000000340)=ANY=[], 0x1, 0x2a1, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 8.424810564s ago: executing program 3 (id=4962): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68e}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file2\x00', 0x2000414, &(0x7f0000000340)=ANY=[], 0x1, 0x2a1, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 8.268579866s ago: executing program 3 (id=4963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000080), {[{{@arp={@loopback, @private=0xa010102, 0x80800000, 0xff, 0xa, 0x4, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0xb, 0x7, 0x7, 0x8000, 0xe, 0x8, 'bridge0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xb, 0x36, {0x3}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "651e94c9dcc32e0ff33cf170bcc24a94c6cdbccfcadbf52c2cb4d88ae54c"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) syz_clone3(&(0x7f0000000900)={0x20004100, &(0x7f0000000500), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000680)=""/133, 0x85, &(0x7f0000000740)=""/41, &(0x7f00000008c0)=[0x0, r2], 0x2, {r3}}, 0x58) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xf351d12eb3919460, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) mq_open(&(0x7f0000000d80)=']\x00\x85,l\xb7\x00q\x14\x16&s\xea\xe5%\xf6B\x0f\nc\x04\x16\x99\xf1.\xa9\xbb\xad\x8a\x17v\x18\v\xe0\xce\xb2\x97\x95\x8cw\xd7^\xf4F#x\xe4\x1cz\xf6h\xa1} ', 0x40, 0x78, &(0x7f0000000280)={0x80000000, 0x359b, 0x0, 0xf66}) keyctl$chown(0x4, r6, 0xee00, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$rds(r4, &(0x7f0000000480)={0x2, 0x4e24, @broadcast}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r7], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000004800210628bd7000fcdbdf250a008000", @ANYRES32, @ANYBLOB="db05000014000100fe800000000000000000000000000014080002"], 0x90}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8008080}, 0x44881) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000008000440000000830800024000000005140000001100010000000000000000000500000a5265d3206d65aca33c56fa2be98c11f60d52d82e33ff794ced88c0c227225c"], 0x8c}}, 0x0) keyctl$chown(0x4, r6, 0x0, 0x0) 8.076778718s ago: executing program 7 (id=4964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) (fail_nth: 1) 8.066696989s ago: executing program 38 (id=4964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) (fail_nth: 1) 7.835611732s ago: executing program 3 (id=4970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x400454dc, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b002b3660d716fb8bc00000008000000100000016f97f1a3e07f48886bd3afe72a32b797efea5564b43ea2f130e84b56e77cf084e40da1783a9cb410984ed4bd104f0e20f4539b397be0fd00f2c5869d8d9fcb4f3bdf33ef5f15b21934e326e2955d1c54032f22291e3766dee37dba2af80898eca262d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) setresgid(0xee00, 0xee01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) unshare(0x2040400) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x5, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0x18fff) syz_emit_ethernet(0x62, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0x2, 0x0, 0x0, 0x1000, {[@window={0x3, 0x3, 0x6}, @generic={0x22, 0x4, "f0b2"}, @md5sig={0x13, 0x12, "2313a3101166d6c856214c013c019043"}, @generic={0x13, 0x2}, @sack={0x5, 0xe, [0x5, 0x3, 0x20]}]}}}}}}}, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x14d842, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x22, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @private=0xa010101}}}}}, 0x0) 7.361615398s ago: executing program 3 (id=4973): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030428bd7000000000a08cb18d54", @ANYRES32=0x0, @ANYBLOB="46060918408a0000240012800c0001006d6163766c616e001400028006000100000000000800010010000000"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0xe4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffff, 0xa0d140) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000340)='./bus\x00', 0x4937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffa, @loopback}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0xffff, @private0={0xfc, 0x0, '\x00', 0x21}, 0x9}}}, &(0x7f0000000200)=0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 7.149825972s ago: executing program 3 (id=4974): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xd2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[], 0x20) ioctl$PPPIOCSMRU1(r3, 0x40047457, &(0x7f0000000000)=0xfffffff7) 6.929173024s ago: executing program 3 (id=4976): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c5985000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 6.922420004s ago: executing program 39 (id=4976): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c5985000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 4.748630705s ago: executing program 1 (id=4991): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0xffffffffffffffbe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) r6 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 4.685400565s ago: executing program 1 (id=4993): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xd2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[], 0x20) ioctl$PPPIOCSMRU1(r3, 0x40047457, &(0x7f0000000000)=0xfffffff7) 4.580489767s ago: executing program 1 (id=4994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ftruncate(r3, 0x2e8e8c3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307", @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}, 0x0) 4.558565627s ago: executing program 1 (id=4995): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030428bd7000000000a08cb18d54", @ANYRES32=0x0, @ANYBLOB="46060918408a0000240012800c0001006d6163766c616e001400028006000100000000000800010010000000"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0xe4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffff, 0xa0d140) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000000), 0x1, 0x4bb, &(0x7f0000000580)="$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") open(&(0x7f0000000340)='./bus\x00', 0x4937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffa, @loopback}, 0x1c) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 4.37548726s ago: executing program 1 (id=4997): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000000000000000000000010500000010000000010000000000000800000000005f"], 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xfff0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77400779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x80}}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000004c0)='kfree\x00', r8}, 0x23) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r9}, 0x18) r10 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r10, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000000)={0x4a, 0x735, 0x6, 0xb, 0x9, 0x81}) 3.948691495s ago: executing program 1 (id=4998): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000500090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x1b, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 3.939363016s ago: executing program 40 (id=4998): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000500090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x1b, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 3.071620868s ago: executing program 9 (id=5004): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000540)="fd3f01374033c6f43cf7fb0a0bffff8c690ea817f66d9de28be132261ad39351327c131f8e97dad2c563eb4961b29394106c12c64998d50a763ac38a195b36ed34dfdc6851094ffcd5a30a34f63a399bad34f3aa3010eadc7980373f30814c9afab0a183f37ee2c5602d714bd27a219e87c0357c903c35caef741181500b32deeac8e23c65b0b3255132fe593ca7a33690d248c0fb3b5f7cfea02333108a1ee67eaafc010fed7e83f4de9253adbc378cb8da6cf685ebe6c3ae8c2b76e5b7d899a3d9061a592d663e20a86bae12a40832d5c0debf0f", 0xd5}, {&(0x7f0000000640)="84a0e7c814c8adf0a5e44536b742d879778c9083c94cbbfa380f2c8fc398e82372c06a18a4fedb76a8f97d224cf0da8d29d48a8253f82237980f2ec5c56349d84dd4ae9f24ee99a7367479dbe9686db2a4850199955218280f0d975214800cb68ee3dbd3ee664d03fb7701557555e7770801657941561207defca0ba5188b5505ef6289ddfd6cb75b0befcf48128ce91d4c56b5c6789071cefefc6e4523d548141c34ad1a18e046959112b977add92478316fad223907465504c270cee5cf0e1f32befc4360ba4c816e7d6", 0xcb}, {&(0x7f0000000300)="346c4c5ede62014e933194d4c59bb7ae0554c60f4dda8cc3210170f7c8837b3b56ecfdc91d61f11aaba82a63c841a609fbb0ca7ae8033da2696963a4a642a9338125c33899e608472e59d4823a9ed890f6eb9d9acf67df5e51aabddd9c7260a76ad6", 0x62}], 0x3, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="d17824805eec538affff2a35", 0xc}, {&(0x7f00000007c0)="b4d44244f1706408cdab1067a9be9f10f1d477708d7f6e5a51668e537509db012bfe409cbd2ad7c2c735c1a9c3ab54c512677bccb0c2889f701dc3a6ca78c1124d735e87ed5ec686945a24539ba957ed3a3b4c602698a078e8a736cfbfa2bbc613f84fb28c9f063e129e27b6fcfc7e760de476a29c1627a53ec15044acd24f3ad909082a932737c8c58606d1", 0x8c}, {&(0x7f0000000880)="7704937928d34f0bf72ca585a872f3687ebc52abe147a0c065eb3ac9133e27a04fd1861ff420073f0a40121c6ec7fdedf1e1bfe3640d583f08a137c0f9b9094b97aa60ed24ffd9c2340c94d8fd2d97c6b6121ecfc8125092030e32f4e4f6565f77d61a1b7b6634616826697a324cdb8527fcd3b8d2ed2a16be749163c01563d5e84cec7968c60264d05a727d7c002447ee5bb7de7964fae35995c385967f2cf52bfd146ad789befdec820b23dfddc11744654de85bd41a82b415a9b5b7fad58dfc5c27122fe2f3d1bea828f9d4596b87d687e36b", 0xd4}], 0x3, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x32}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x6f, [@loopback, @empty, @remote, @private=0xa010100, @loopback, @multicast1, @loopback, @local, @loopback]}, @timestamp_prespec={0x44, 0x34, 0x8f, 0x3, 0xd, [{@private=0xa010102, 0x4}, {@private=0xa010101, 0x6}, {@rand_addr=0x64010102, 0x40}, {@remote, 0x9}, {@remote, 0xc72c}, {@remote, 0x8}]}, @noop, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x7, 0xc, "eb3e0f64ade2661c61ba"}]}, @timestamp_prespec={0x44, 0x24, 0x6a, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@broadcast, 0xfff}, {@local, 0x8}]}, @timestamp_addr={0x44, 0x4, 0xaa, 0x1, 0x8}, @generic={0x86, 0xd, "9f3a587b2502e258c49488"}]}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x11, [@broadcast, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010101]}, @generic={0x89, 0xb, "669cdc25365baf288e"}, @ssrr={0x89, 0x1b, 0x34, [@multicast2, @rand_addr=0x64010102, @empty, @multicast2, @local, @broadcast]}, @end, @timestamp_prespec={0x44, 0x2c, 0x2d, 0x3, 0x9, [{@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x25}}, {@loopback, 0x4}, {@rand_addr=0x64010102, 0x2d4a}, {@private=0xa010102, 0x2}]}, @ssrr={0x89, 0x27, 0x74, [@empty, @multicast2, @remote, @empty, @loopback, @multicast2, @broadcast, @loopback, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x230}}, {{&(0x7f0000000d00)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000d40)="d501faae4118ca39a8b7571dd3c0af74fc0d9d8f2ea57f427bbcefdca28b0f224dc69672d38115b4e59228b24d73dc74c63d734dfdaf87cb0e89f616ebbdc060793939489073816e1639a73181f6a67276b810cf774654cc248f70847b1c142c16ca3e2e86e4354726bda42723ea69b01aaf7164438b4dca09fdf4e82dea01356b3bd9df12d9bccc9feb456b6aeb3686f0bd136438d2", 0x96}, {&(0x7f0000000e00)="3509621ab03a378334e16158c7bc8bf67e64527c3cfb6928653cd5beac3746dbb96b42bbd4e790fce5749ef3648d48f7dbeeb4c2a9f1e17dde75624c85e0edb543dece5ddf73e35c31c8bb1fdc914abb76effaf6e7f591e38413aa231790d6cbb10ee127f8d25082b3a92fecca32c12ea87376be7db551c23670d1555000e90312617c547063d4b74cc47af2802f2607339508ed061d7ba2caaf8444ee442ea21541b64739b2ebd87420d9695e6a542bbc14cee2c9a4f2a9b777ddb2bd8cf76b2331fcc8645912b069c018d1bc70316061001e80957ffd52221f5651748ff71971571abe9e5398c9b38ecc8cd52fe6acf6", 0xf1}, {&(0x7f0000000f00)="514e544858db8f65b1141547c4ee28c42f80bf95dced7963fe294cf86be73e2476f0e56a0ecd7f0314191638fc75f20beaf034287987c1b429986bcd047dd1e3fdfe4e2cd90baaf9a28c1ba83df1b094a570a1134537c206afc9903c8a1829a8a82c37b043829e28a08012124b703159ed9eb3a97902a09e29233e23f7b3401155c827152ef3676afeb0d1c09d74a71d7153f42e8573efc25a1fe20ff9adba3b760f0b73c15a4553969e9e492fb1ddaac47d1da6390f3a7cb21b6e3c0437cd6067001712601d7f0667766507e83cd0a7536079f4a365b8f57df735afc34104bd77d855204df8efbe51fe", 0xea}, {&(0x7f0000001d00)="3da3aa90b7ccc3e995f3d8662974894224a48d9a1219d63d008b7c13a03d70a30c8b1babb2c88e81a06c02e6202a4feff6701e6aa1f777a6ac64c0b8cb4edb69ef635b38a307b0a83c5364385c3fd4", 0x4f}], 0x4}}, {{&(0x7f00000010c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001000)=[{&(0x7f0000001100)="1d84b66e2b07eda95c9bcb2b605f26aa70942b39bbc545ec33dae3e0b06c91a4db65e52b7691769eed6e5456c619e64ec14cd670fef88e3a6f15f8e6c40d8acce6cbf746a7adae5237500f52d0d3a4e7c074a247d425edc80a99af5a6c3d3c7c7a22e5e05a153929a7c4a05560a2bae433510d89e6204ae55ec532b883cbbb9009493829a40d7a5ffa4e5ca423b06475ba09f667fa4811409574204c90a2e5c8eb6fed78051f83572baac80b5a97726ddae11c95cb8acbf8", 0xb8}, {&(0x7f00000011c0)="86eb8ef6176ae9e768cbf98571ef55bf9e5b7f055e532a8ede8c4e80ebbed4777d526037bf7d2031e92bafdc8870f8da36f62acffe8ec8f32f75b12bf7e23731", 0x40}, {&(0x7f0000001200)="72676aa07ce8a097091fd7fc0a3a7bc366951dcf98cbb6f0f5156d8c1b8ac13d4ca00d6fbd783227ac8411aacac84abe3910a8ef7efb64730669a9d85e887f40a0a803eae5413d0275601e6c1447129e1834c6895812eee59f5ee7ddc1b165150a66ee703e33845f3e1770b2c6e60aafc0daa51aa2f7f3a5856b83946354ffdaa45a825c754cacded48bf6b48d5acdb1be22fa08f90ae94282227c6ba151d3a82453381528d876f4f5cb7c0c842cbf51fd2a1c820d8bc234d16102f027e6", 0xbe}, {&(0x7f00000012c0)="ade98cfd8bd2cfc19858d4df57984cab751dd2604c70b435551942b53992ffe4bd54d122c48d4f8f85a936adcd9ea059267dcf1e1dd77aed7f3300b0a7f9dfbfc2d7f5f167b9b7d6d0857d4a4ae4a2bffde47e40ba5843a4943a83aed2c8fd63d29704efc31ba5e66534d82e120168e9b161c53a0b539b160fe04a4ed279f3fb8d74e04bbed04197a0471f74696c191f6bf505de86aaffef201c039f7fd1185736b97cf8831a", 0xa6}, {&(0x7f0000001380)="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", 0xfc}, {&(0x7f0000001e40)="cef9a1ff53d48911d4ab3f236cf33b4a7c7b0d5d5508d4389632e46f5a31d592ef6e5c72cf4dff17cbc60e89d88b0f10bda06524498f769a1118ad42f09a1ee4f3e5b30b1282bd5af7bf1cea71ac3b366d8e3da545b91d1604bfef4f3f45ff02ee72530ecbe1eb05dd509a4b956347d2c38ce3f23e18b14753048ad920d7738dbbee536513e757be49a3b1c4792a9c7489ed18ed88a84c8f756d5fa5082c5f14715bd054e454", 0xa6}], 0x6, &(0x7f0000001500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x8e, 0x1, 0xf, [{@remote, 0x1}]}, @end, @timestamp_prespec={0x44, 0x2c, 0x6b, 0x3, 0x0, [{@loopback}, {@local, 0xffc00000}, {@broadcast}, {@empty, 0x4}, {@broadcast, 0x9}]}, @rr={0x7, 0x1f, 0xa2, [@rand_addr=0x64010102, @private=0xa010101, @local, @private=0xa010100, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x218}}], 0xa0}}, {{&(0x7f00000015c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001600)="317ff6428f6dad84c6a3f60959", 0xd}, {&(0x7f0000001640)="0850e1bd9fe5193626a1805d8cb31d08178e1d9c82844fd7fc471757c0e933ced6a034b40a368bb0881fea70cba1213adbe879f420cc5fa435f1b086e0a8ae5687b8627a24bb0bc97e47cfca7946ccbef822c3117ce7db65084b2c46c2c2485a4accf90518a60a4679f51563545a7426d5b6283f32470e8e9424c4e57737b52fa76b8e96d1301921ddd77c56ec242f1b0dc0a1cc848a7984302f13440966dab73a4f3508c648b645c126c91e191552f02da0564daf47aad999ff0106aba8ad6c8145a1660cf5c616fdd80881c0519a3fb9f9b3652c", 0xd5}, {&(0x7f0000001740)="5403e887fddac34a9b6e3e4cb2928663c90c59187cdb95811b59b6eb3212f2138711ec2012ce01cf3998705f3e5ee5fb85290b9705b788e1784ed86a2a18bf182d3c852c7a41d37b93a4f040f05f3a0d2ef74c7043d41ad744bd791dab7fd652fac13cf60e5cc71c045d26e9778911", 0x6f}, {&(0x7f00000017c0)="15eee1b2c0d75293c3a1e67155b0bd0904c14f298a7b83fc599ceb3611c330ef58e024775633556cd64bd3755e066d5b7127ffe6ffaed22b369b785aaee12143897f159bbfbde927b08adfc3ba6f88ee98ec52259e08943a9ac9ab061485f71ead31f8292df7de786b783f74bebc9709d53d2e0b12db056b6bb5aadc15", 0x7d}, {&(0x7f0000001840)="db22abfa05ca289e23d6f2b9f251d483839511943fe67719641e73bbb6e3fcee0e5f4198117301d11b30cd3e", 0x2c}, {&(0x7f0000001880)="ce49e06f72572cb6597c3d1a1192471a95f2485c8dfbb3fa4c08118a15d177ea7e7f19be6b99966a70943a97f113f68c70ff46ac23eda76779fe05216537f7c58fdc944c5163b51b0a78fb2bf62c8b411d704ef8786af99cfa9fb657250dd89805866efd9d88c9283450628600a77c513d6690746c32a109a198db203a0e0d0a484718ca58462cd38920e1815e25e62657cb3dc92121da974c1f5768d8fee4d2d2ca6927c3f146764c", 0xa9}, {&(0x7f0000001940)="eb8c39b758b912331fe3972a574b16b0876b1dd1236570f3418377c3d77e841e49ba37b2ad6c2997a231e8912daa9efdb96aa9b85712525a6129ad35b634f5070cdad02850da", 0x46}], 0x7, &(0x7f0000001a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x48}}], 0x5, 0x4005) 2.92048001s ago: executing program 9 (id=5007): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 2.763659912s ago: executing program 9 (id=5008): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0xafdd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x16, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2130}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcfe6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x2, 0x4, 0x7, 0x4, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000040)='syzkaller\x00', 0x101, 0x6f, &(0x7f0000000180)=""/111, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x8, 0x100, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0], &(0x7f0000000300)=[{0x0, 0x1, 0x1, 0x6}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='f2fs_write_begin\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmmsg$sock(r4, &(0x7f0000000280), 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.214755019s ago: executing program 0 (id=5010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) socket(0x2c, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/77, 0x4d}, 0x8}], 0x1, 0x40000041, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = gettid() timer_create(0x1, &(0x7f0000000040)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000080)) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000340)='cpu&&0&&\t') perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0xc, 0x3, 0x44, 0xe, 0x0, 0x8001, 0x80081, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0x8, 0xb4}, 0x591, 0x8, 0x436, 0x1, 0x5e40000000000, 0x8, 0x5, 0x0, 0x5, 0x0, 0x9}, r5, 0x5, r6, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_clone(0x4021000, &(0x7f00000009c0)="5a80cec24e23a39ec2306873871ad6546fae271f53b4a27a45fe6438a37b4c8cfad4f9dbe887e0a32fb309652f3685b85fb24d3385d5aece359de0cf5a461506bce048f54843160b6353ea1a3a9f82f427a200b8ffb5cf75a36cbd4aeb84d2e167f9b35f88191746b45cb6e3268fd5c0477f2c694fc53c84e27306121021086e57e9e3e4dceae59c28e2946a8b6ebfb0ff40c567dbe737bc18f2f181a606559ff8327a10c236b59ff1cdf0eb54fcfbb363e27f84ee5fe44cad9c23f29bbdc896f9ed556fbe9cb0c0305556806990a8ab42721141a26a530d98a6dcda70d4f3de2a2475e94a02aee8517046b334b91397d9b4105e0ecb43401eb19a", 0xfb, &(0x7f00000007c0), &(0x7f00000008c0), &(0x7f0000000ac0)="14e9fa15b3b7be988ab6a65c0cfd4bc948b4fa843adc2dca454a1ee3ea5686d5e3b47827f590a5f249ba99aea1d7ea9eaebacb1fb4f0f98fccb9b7aa8701e3c14a4cc5cd8b6b4df318a87dbb1829e169df1051f2b52c1ee582e425a4b9eb2895917a5d57d4c8492531bc4b519312da89d89a7c0a24a18702d4452961ad14e19ce4880a3fe468d8869c95cbfae5f46591e1306f4bb7683baeca21a66d0612c0034a2b27c9e0af") 1.787228985s ago: executing program 5 (id=4977): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000080), {[{{@arp={@loopback, @private=0xa010102, 0x80800000, 0xff, 0xa, 0x4, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0xb, 0x7, 0x7, 0x8000, 0xe, 0x8, 'bridge0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xb, 0x36, {0x3}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "651e94c9dcc32e0ff33cf170bcc24a94c6cdbccfcadbf52c2cb4d88ae54c"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) syz_clone3(&(0x7f0000000900)={0x20004100, &(0x7f0000000500), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000680)=""/133, 0x85, &(0x7f0000000740)=""/41, &(0x7f00000008c0)=[0x0, r2], 0x2, {r3}}, 0x58) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xf351d12eb3919460, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) mq_open(&(0x7f0000000d80)=']\x00\x85,l\xb7\x00q\x14\x16&s\xea\xe5%\xf6B\x0f\nc\x04\x16\x99\xf1.\xa9\xbb\xad\x8a\x17v\x18\v\xe0\xce\xb2\x97\x95\x8cw\xd7^\xf4F#x\xe4\x1cz\xf6h\xa1} ', 0x40, 0x78, &(0x7f0000000280)={0x80000000, 0x359b, 0x0, 0xf66}) keyctl$chown(0x4, r6, 0xee00, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$rds(r4, &(0x7f0000000480)={0x2, 0x4e24, @broadcast}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r7], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000004800210628bd7000fcdbdf250a008000", @ANYRES32, @ANYBLOB="db05000014000100fe800000000000000000000000000014080002"], 0x90}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000030a010800000000000000000500000108000a400000000408000540fffffffd140000001100010000000000000000000300000a698d2dee295888bb17bca5fbe7280f8e641e8d0398d7714c7fe860c8c0dd56640b2312f7a17e2a6f50b1f2f63c8e6c461590d49e2b8b36088e06f9602178f20b681aeff8662694743bb9e2f40b0422d57f4eed935b51bd7a4c7a3c30d387ceaf491ffe315a04fc08f266b9e7c01818fc7b02cabfeef9f317e4037897f6816121080a1b1197a489073f059fca304fd39c2f5fe6162b99b5ccf3de2e8a03c10b4002ce982753e5c4c6f99d9e969e6be4e840d4e101f60ce4971f2ed61a1869d780303d867ab71f5017f8933fb29595a10f2fa2d8f2bd304327ce0054f5009c4e779ba74c0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8008080}, 0x44881) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000008000440000000830800024000000005140000001100010000000000000000000500000a5265d3206d65aca33c56fa2be98c11f60d52d82e33ff794ced88c0c227225c"], 0x8c}}, 0x0) keyctl$chown(0x4, r6, 0x0, 0x0) 1.590912668s ago: executing program 9 (id=5013): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB='k'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_migrate_pages_start\x00', r2}, 0x18) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x0, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2880490, &(0x7f0000000600)={[], [{@fowner_gt}, {@subj_role={'subj_role', 0x3d, '@^:'}}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_eq}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x3000) set_mempolicy(0x6, 0x0, 0xe0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000300)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r6}, &(0x7f0000000680), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in=@broadcast}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendmmsg$inet(r7, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000a00)="c4", 0x1}], 0x1, &(0x7f0000000ec0)=ANY=[], 0x150}}], 0x2, 0x4048841) 1.336506662s ago: executing program 0 (id=5014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "7c01e651f544b3ef", "22f65d30fcac182aa928fd0a15c343e4", "98486d5e", "7b02fa90c78373a9"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000000, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415", 0xa}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce040) 1.298488592s ago: executing program 0 (id=5015): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e30, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) 1.171948744s ago: executing program 5 (id=5016): mmap(&(0x7f0000050000/0x2000)=nil, 0x2000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a791f14412dde2ab00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/kexec_crash_loaded', 0x10402, 0xd6) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000040000000c00088008000c00", @ANYRES32=0x0, @ANYBLOB="893ec074eb14372863b31f12d94d6e5afaa69f1a492964ad5b1c8629331cc607bc83"], 0x28}}, 0x0) setuid(0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000033, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) shutdown(r2, 0x1) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000001540), 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x8001, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xefce}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x208, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x7, 0x4}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.159492474s ago: executing program 0 (id=5017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='rxrpc_tx_data\x00', r3, 0x0, 0x3}, 0x18) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r4, 0x0, 0x0, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x6, 0x0, 0x1, 0x8, 0x1ffff, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket(0x10, 0x3, 0x0) r9 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f00000003c0)=0xfffffff7, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r8, 0x80, &(0x7f00000004c0)=@ieee802154={0x24, @long={0x3, 0x1}}}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r12}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r6, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 1.114700495s ago: executing program 9 (id=5018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) getpgrp(0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x101, 0x9, {{0xf, 0x4, 0x1, 0x26, 0x3c, 0x66, 0x0, 0xfd, 0x4, 0x0, @remote, @multicast1, {[@cipso={0x86, 0xfffffffffffffe85, 0x2, [{0x7, 0x11, "866bd720090e837fa35cd74e67e156"}]}, @cipso={0x86, 0xe, 0x1, [{0x7, 0x8, "dcb4abdbac42"}]}]}}}}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x7, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x6, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0xfffffc01, 0x24, &(0x7f0000000480)=""/36, 0x41100, 0x9, '\x00', r5, @cgroup_sockopt=0x15, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x3, 0x8, 0x3}, 0x10, r7, r1, 0x7, &(0x7f0000000600)=[r4], &(0x7f0000000640)=[{0x5, 0x2, 0x9, 0xb}, {0x1, 0x5, 0xb, 0xa}, {0x3, 0x2, 0x3}, {0x5, 0x3, 0x3, 0x2}, {0x5, 0x2, 0xf, 0xa}, {0x4, 0x5, 0xb, 0xc}, {0x2, 0x1, 0x9, 0x7}], 0x10, 0x3, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000bc0d0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000fe84818ecf0610000000000000004030000000000000000000009"], 0x0, 0x56, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x4) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000007a03000018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000b8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xa5d4}, 0x14c58, 0x0, 0x2, 0x1, 0x100008, 0x2, 0x31, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r11, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r11}}, './file1\x00'}) 1.024760666s ago: executing program 4 (id=5019): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setresgid(0x0, 0x0, 0x0) 992.431066ms ago: executing program 4 (id=5020): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) unlinkat(r2, &(0x7f0000000080)='./bus/file0\x00', 0x200) sendto$packet(r0, &(0x7f00000002c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000000)="2dbad03abc4313172a8e115936c6bd401b533f137d19211062c5df09b2895289e5956df492c753d079775fed220b18a30676820c87250907d7354ba5b1f6679fd7c826b7972141a7643f0d55f56ece44d5d75ab0ff03dd4a3c2a58ed40a31fbf56c84e800e6feda04362ad22fae35fca8523e2223d8b29a56de8f2b6cdb180cb8e298bf25a83c8094da9b384f6cb9f97e2892a77aefc89f1d3d8e066b4cc1a2530cbffcd5d3af2b326de8e5fb819646bf1224804c0a1", 0xb6, 0x26046810, &(0x7f0000000100)={0x11, 0x1c, r1, 0x1, 0x0, 0x6, @local}, 0x14) 902.245478ms ago: executing program 0 (id=5021): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x68e}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file2\x00', 0x2000414, &(0x7f0000000340)=ANY=[], 0x1, 0x2a1, &(0x7f0000000540)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 845.633638ms ago: executing program 5 (id=5022): name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14"], &(0x7f0000000280), 0x1200) 831.857349ms ago: executing program 0 (id=5023): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000780090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200"], 0x1ec}}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) r2 = inotify_init1(0xd53808d5f2875908) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x24000420) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAym373F78sSfcc2urKSdGQ/J0tf4qSzxAaxLvnr1xURT0V/dMT9F68/Pn2t1MYBm6qeRNSBikrEP1RUPg7I39svfx9cK2VUAmyFuycWJgBWxn/nwtxg9DTmBnbeS2LptE4SEe3NzDXbFRG3b41dP3Nr7Hps0jwcUGz+WkQ8XRT/SSP+B6InBhrxX2uK/3RccCr7mua/3mb9y6eKxT9snYX471k1/qNF/L+zJP7fbbP+wfvJ93qb4r+33UsCAAAAAACAyrp5IiJeLPr7f21x/U8UrP/pi4jjG1D/4LLjlX//r93ZgGqAAndPRLxSuP63lq/+HejIUo811gN0JWfOTU0eiojHI+JAdO1Ij0dWqePg53u+blU2mK3/yx9p/beztYBZO+507mg+Z2J8dvxhrxuIuHst4pnC9b/JYv+fFPT/6e+D6QesY8/zN061Kls7/oHNUv82Yn9h/3//rhXJ6vfnGG6MB4bzUcFKz378xQ+t6m83/t1iAh5e2v/vXD3+B5Kl9+uZWX8dh+c6663K2h3/dydvNm45053lfTQ+O3t5JKI7OdmR5jblj66/zfAoyuMhj5c0/g88t/r8X9H4vzci5pf938lfzXuKc0/+2/d7q/YY/0N50vifWFf/v/7E6I2BH1vV/2D9/5FGX38gyzH/Bwu+ysO0uzm/IBw7i4q2ur0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CioRcSuSGpDi+labWgooi8inoidtalLM7MvnLn0wcWJtKzx+f+1/JN++xeOk/zz/weWHI8uOz4cEbsj4suO3sbx0OlLUxNlXzwAAAAAAAAAAAAAAAAAAABsE30t9v+n/ugou3XApussuwFAaQri/5cy2gFsPf0/VJf4h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/gEAAAAA4JGye9/NX5OImH+5t/FIdWdlXaW2DNhstbIbAJTGLX6guiz9geryHh9I1ijvaXnSWmeuZvr0Q5wMAAAAAAAAAAAAAJWzf6/9/1BV9v9Dddn/D9WV7//fV3I7gK3nPT4Qa+zkL9z/v+ZZAAAAAAAAAAAAAMBGmpm7cn58amryssRb26MZW5mo1+tX05+C7dKe/3kiXwq/XdqzLJHv9Xuws8r7nQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADT7LwAA//8RKiTG") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) tkill(0x0, 0x12) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x5}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2) flock(r7, 0x2) dup3(r7, r5, 0x0) 770.077789ms ago: executing program 4 (id=5024): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf3c4}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}]}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x4, 0xb, 0x2, 0x1000, 0x1, 0x7, 0xec6, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x8, 0x2, 0x7, 0x1, 0x1, 0x2, 0xff, 0x8}}, {0x14, 0x2, [0x9, 0x6, 0xc395, 0x6, 0x285, 0x80, 0x0, 0x3ff]}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) unshare(0x400) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) 768.272819ms ago: executing program 5 (id=5025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000080), {[{{@arp={@loopback, @private=0xa010102, 0x80800000, 0xff, 0xa, 0x4, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0xb, 0x7, 0x7, 0x8000, 0xe, 0x8, 'bridge0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xb, 0x36, {0x3}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "651e94c9dcc32e0ff33cf170bcc24a94c6cdbccfcadbf52c2cb4d88ae54c"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) syz_clone3(&(0x7f0000000900)={0x20004100, &(0x7f0000000500), &(0x7f0000000580), &(0x7f00000005c0), {0xd}, &(0x7f0000000680)=""/133, 0x85, &(0x7f0000000740)=""/41, &(0x7f00000008c0)=[0x0, r2], 0x2, {r3}}, 0x58) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xf351d12eb3919460, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) mq_open(&(0x7f0000000d80)=']\x00\x85,l\xb7\x00q\x14\x16&s\xea\xe5%\xf6B\x0f\nc\x04\x16\x99\xf1.\xa9\xbb\xad\x8a\x17v\x18\v\xe0\xce\xb2\x97\x95\x8cw\xd7^\xf4F#x\xe4\x1cz\xf6h\xa1} ', 0x40, 0x78, &(0x7f0000000280)={0x80000000, 0x359b, 0x0, 0xf66}) keyctl$chown(0x4, r6, 0xee00, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$rds(r4, &(0x7f0000000480)={0x2, 0x4e24, @broadcast}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r7], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000004800210628bd7000fcdbdf250a008000", @ANYRES32, @ANYBLOB="db05000014000100fe800000000000000000000000000014080002"], 0x90}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8008080}, 0x44881) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000008000440000000830800024000000005140000001100010000000000000000000500000a5265d3206d65aca33c56fa2be98c11f60d52d82e33ff794ced88c0c227225c"], 0x8c}}, 0x0) keyctl$chown(0x4, r6, 0x0, 0x0) 360.959625ms ago: executing program 4 (id=5026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='rxrpc_tx_data\x00', r3, 0x0, 0x3}, 0x18) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r4, 0x0, 0x0, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x6, 0x0, 0x1, 0x8, 0x1ffff, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket(0x10, 0x3, 0x0) r9 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f00000003c0)=0xfffffff7, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r8, 0x80, &(0x7f00000004c0)=@ieee802154={0x24, @long={0x3, 0x1}}}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r12}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r6, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 359.433965ms ago: executing program 9 (id=5027): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unlink(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 242.494947ms ago: executing program 5 (id=5028): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xd2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[], 0x20) ioctl$PPPIOCSMRU1(r3, 0x40047457, &(0x7f0000000000)=0xfffffff7) 36.80054ms ago: executing program 4 (id=5029): setresuid(0x0, 0xee01, 0xee00) r0 = socket(0xa, 0x5, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x29, 0x4c, &(0x7f0000000000)=0x2000000, 0x4) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000340)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x37, 0x2d]}}}}]}) 7.60806ms ago: executing program 4 (id=5030): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0xffffffffffffffbe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 0s ago: executing program 5 (id=5031): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0xffffffffffffffbe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) r6 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) kernel console output (not intermixed with test programs): ? __pfx_sg_ioctl+0x10/0x10 [ 329.090142][T17002] __se_sys_ioctl+0xce/0x140 [ 329.090199][T17002] __x64_sys_ioctl+0x43/0x50 [ 329.090226][T17002] x64_sys_call+0x19a8/0x2fb0 [ 329.090281][T17002] do_syscall_64+0xd2/0x200 [ 329.090311][T17002] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.090346][T17002] ? clear_bhb_loop+0x40/0x90 [ 329.090375][T17002] ? clear_bhb_loop+0x40/0x90 [ 329.090438][T17002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.090474][T17002] RIP: 0033:0x7f49aecbe969 [ 329.090489][T17002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.090507][T17002] RSP: 002b:00007f49ad327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.090527][T17002] RAX: ffffffffffffffda RBX: 00007f49aeee5fa0 RCX: 00007f49aecbe969 [ 329.090544][T17002] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 0000000000000003 [ 329.090561][T17002] RBP: 00007f49ad327090 R08: 0000000000000000 R09: 0000000000000000 [ 329.090625][T17002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.090641][T17002] R13: 0000000000000000 R14: 00007f49aeee5fa0 R15: 00007ffd47583cf8 [ 329.090659][T17002] [ 329.365516][T17010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.391569][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4564'. [ 329.401216][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4564'. [ 329.409430][T17014] loop7: detected capacity change from 0 to 128 [ 329.446980][T17014] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 329.459583][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4567'. [ 329.469426][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4567'. [ 329.537650][ T6297] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 329.541442][T17028] loop2: detected capacity change from 0 to 1024 [ 329.565676][T17034] IPVS: stopping master sync thread 17035 ... [ 329.581892][T17034] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4572'. [ 329.602541][T17028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.627641][T17028] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 329.642972][T17028] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 329.655418][T17028] EXT4-fs (loop2): This should not happen!! Data will be lost [ 329.655418][T17028] [ 329.665125][T17028] EXT4-fs (loop2): Total free blocks count 0 [ 329.665221][T17032] loop1: detected capacity change from 0 to 128 [ 329.671181][T17028] EXT4-fs (loop2): Free/Dirty block details [ 329.683394][T17028] EXT4-fs (loop2): free_blocks=20480 [ 329.688738][T17028] EXT4-fs (loop2): dirty_blocks=32 [ 329.693885][T17028] EXT4-fs (loop2): Block reservation details [ 329.699957][T17028] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 329.749446][T17032] +}[@: attempt to access beyond end of device [ 329.749446][T17032] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 329.790555][T17032] +}[@: attempt to access beyond end of device [ 329.790555][T17032] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 329.805858][T17054] FAULT_INJECTION: forcing a failure. [ 329.805858][T17054] name failslab, interval 1, probability 0, space 0, times 0 [ 329.818681][T17054] CPU: 1 UID: 0 PID: 17054 Comm: syz.6.4576 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 329.818731][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.818745][T17054] Call Trace: [ 329.818753][T17054] [ 329.818762][T17054] __dump_stack+0x1d/0x30 [ 329.818787][T17054] dump_stack_lvl+0xe8/0x140 [ 329.818811][T17054] dump_stack+0x15/0x1b [ 329.818874][T17054] should_fail_ex+0x265/0x280 [ 329.818906][T17054] should_failslab+0x8c/0xb0 [ 329.818995][T17054] kmem_cache_alloc_noprof+0x50/0x310 [ 329.819031][T17054] ? skb_clone+0x151/0x1f0 [ 329.819069][T17054] skb_clone+0x151/0x1f0 [ 329.819104][T17054] __netlink_deliver_tap+0x2c9/0x500 [ 329.819219][T17054] netlink_unicast+0x64c/0x670 [ 329.819276][T17054] netlink_sendmsg+0x58b/0x6b0 [ 329.819312][T17054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.819368][T17054] __sock_sendmsg+0x145/0x180 [ 329.819411][T17054] ____sys_sendmsg+0x31e/0x4e0 [ 329.819468][T17054] ___sys_sendmsg+0x17b/0x1d0 [ 329.819521][T17054] __x64_sys_sendmsg+0xd4/0x160 [ 329.819642][T17054] x64_sys_call+0x2999/0x2fb0 [ 329.819738][T17054] do_syscall_64+0xd2/0x200 [ 329.819763][T17054] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.819803][T17054] ? clear_bhb_loop+0x40/0x90 [ 329.819850][T17054] ? clear_bhb_loop+0x40/0x90 [ 329.819880][T17054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.819907][T17054] RIP: 0033:0x7f2699e3e969 [ 329.819928][T17054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.820024][T17054] RSP: 002b:00007f26984a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.820050][T17054] RAX: ffffffffffffffda RBX: 00007f269a065fa0 RCX: 00007f2699e3e969 [ 329.820068][T17054] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 329.820083][T17054] RBP: 00007f26984a7090 R08: 0000000000000000 R09: 0000000000000000 [ 329.820095][T17054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.820110][T17054] R13: 0000000000000000 R14: 00007f269a065fa0 R15: 00007ffdff05a798 [ 329.820135][T17054] [ 329.820366][T17054] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.4576'. [ 329.842895][T17056] FAULT_INJECTION: forcing a failure. [ 329.842895][T17056] name failslab, interval 1, probability 0, space 0, times 0 [ 329.859998][T17032] +}[@: attempt to access beyond end of device [ 329.859998][T17032] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 329.862134][T17056] CPU: 0 UID: 0 PID: 17056 Comm: syz.7.4578 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 329.862232][T17056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.862251][T17056] Call Trace: [ 329.862262][T17056] [ 329.862273][T17056] __dump_stack+0x1d/0x30 [ 329.862302][T17056] dump_stack_lvl+0xe8/0x140 [ 329.862469][T17056] dump_stack+0x15/0x1b [ 329.862492][T17056] should_fail_ex+0x265/0x280 [ 329.862567][T17056] should_failslab+0x8c/0xb0 [ 329.862597][T17056] kmem_cache_alloc_noprof+0x50/0x310 [ 329.862633][T17056] ? skb_clone+0x151/0x1f0 [ 329.862723][T17056] skb_clone+0x151/0x1f0 [ 329.862835][T17056] __netlink_deliver_tap+0x2c9/0x500 [ 329.862878][T17056] netlink_unicast+0x64c/0x670 [ 329.862913][T17056] netlink_sendmsg+0x58b/0x6b0 [ 329.863019][T17056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.863057][T17056] __sock_sendmsg+0x145/0x180 [ 329.863166][T17056] ____sys_sendmsg+0x31e/0x4e0 [ 329.863219][T17056] ___sys_sendmsg+0x17b/0x1d0 [ 329.863272][T17056] __x64_sys_sendmsg+0xd4/0x160 [ 329.863334][T17056] x64_sys_call+0x2999/0x2fb0 [ 329.863364][T17056] do_syscall_64+0xd2/0x200 [ 329.863399][T17056] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.863490][T17056] ? clear_bhb_loop+0x40/0x90 [ 329.863520][T17056] ? clear_bhb_loop+0x40/0x90 [ 329.863582][T17056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.863613][T17056] RIP: 0033:0x7fc080fde969 [ 329.863636][T17056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.863663][T17056] RSP: 002b:00007fc07f647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.863689][T17056] RAX: ffffffffffffffda RBX: 00007fc081205fa0 RCX: 00007fc080fde969 [ 329.863776][T17056] RDX: 0000000000000890 RSI: 0000200000000280 RDI: 0000000000000003 [ 329.863794][T17056] RBP: 00007fc07f647090 R08: 0000000000000000 R09: 0000000000000000 [ 329.863811][T17056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.863828][T17056] R13: 0000000000000000 R14: 00007fc081205fa0 R15: 00007ffe969fc6e8 [ 329.863882][T17056] [ 329.863901][T17056] netlink: 'syz.7.4578': attribute type 10 has an invalid length. [ 329.866835][T17032] +}[@: attempt to access beyond end of device [ 329.866835][T17032] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 329.964734][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4570'. [ 329.980168][T17032] +}[@: attempt to access beyond end of device [ 329.980168][T17032] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 329.992378][ T6558] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 329.996159][T17032] +}[@: attempt to access beyond end of device [ 329.996159][T17032] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 330.346463][T17032] +}[@: attempt to access beyond end of device [ 330.346463][T17032] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 330.362011][T17032] +}[@: attempt to access beyond end of device [ 330.362011][T17032] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 330.375036][T17032] +}[@: attempt to access beyond end of device [ 330.375036][T17032] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 330.388755][T17032] +}[@: attempt to access beyond end of device [ 330.388755][T17032] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 330.461959][T17079] loop3: detected capacity change from 0 to 2048 [ 330.480812][T17079] EXT4-fs: Ignoring removed mblk_io_submit option [ 330.487321][T17079] EXT4-fs: test_dummy_encryption option not supported [ 330.509004][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 330.509021][ T29] audit: type=1326 audit(1748517831.874:62234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.1.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64269be969 code=0x7ffc0000 [ 330.518256][T17079] random: crng reseeded on system resumption [ 330.538943][ T29] audit: type=1326 audit(1748517831.874:62235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.1.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64269be969 code=0x7ffc0000 [ 330.553393][T17071] infiniband syz!: set active [ 330.572589][T17088] loop2: detected capacity change from 0 to 512 [ 330.573182][T17071] infiniband syz!: added team_slave_0 [ 330.633094][ T29] audit: type=1400 audit(1748517831.874:62236): avc: denied { append } for pid=17078 comm="syz.3.4588" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 330.656570][ T29] audit: type=1400 audit(1748517831.874:62237): avc: denied { open } for pid=17078 comm="syz.3.4588" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 330.680358][ T29] audit: type=1326 audit(1748517831.934:62238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.1.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64269be969 code=0x7ffc0000 [ 330.704005][ T29] audit: type=1326 audit(1748517831.934:62239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.1.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64269be969 code=0x7ffc0000 [ 330.727800][ T29] audit: type=1326 audit(1748517831.934:62240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.1.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64269be969 code=0x7ffc0000 [ 330.751470][ T29] audit: type=1326 audit(1748517831.954:62241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.1.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64269be969 code=0x7ffc0000 [ 330.775111][ T29] audit: type=1326 audit(1748517831.954:62242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.1.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64269be969 code=0x7ffc0000 [ 330.798739][ T29] audit: type=1326 audit(1748517831.954:62243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17086 comm="syz.1.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64269be969 code=0x7ffc0000 [ 330.844662][T17071] RDS/IB: syz!: added [ 330.853454][T17095] loop6: detected capacity change from 0 to 2048 [ 330.860787][T17071] smc: adding ib device syz! with port count 1 [ 330.870048][T17096] loop1: detected capacity change from 0 to 8192 [ 330.875687][T17088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.889825][T17095] EXT4-fs: Ignoring removed mblk_io_submit option [ 330.897583][T17071] smc: ib device syz! port 1 has pnetid [ 330.947282][T17088] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.958674][T17095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.983507][T17095] random: crng reseeded on system resumption [ 331.085609][T17113] loop1: detected capacity change from 0 to 128 [ 331.105270][T17095] FAULT_INJECTION: forcing a failure. [ 331.105270][T17095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.107322][T17113] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.118588][T17095] CPU: 0 UID: 0 PID: 17095 Comm: syz.6.4590 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 331.118630][T17095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.118715][T17095] Call Trace: [ 331.118723][T17095] [ 331.118735][T17095] __dump_stack+0x1d/0x30 [ 331.118764][T17095] dump_stack_lvl+0xe8/0x140 [ 331.118792][T17095] dump_stack+0x15/0x1b [ 331.118816][T17095] should_fail_ex+0x265/0x280 [ 331.118875][T17095] should_fail_alloc_page+0xf2/0x100 [ 331.118908][T17095] __alloc_frozen_pages_noprof+0xff/0x360 [ 331.119036][T17095] alloc_pages_mpol+0xb3/0x250 [ 331.119078][T17095] vma_alloc_folio_noprof+0x1aa/0x300 [ 331.119117][T17095] handle_mm_fault+0xe9f/0x2c00 [ 331.119147][T17095] ? mas_walk+0xf2/0x120 [ 331.119231][T17095] do_user_addr_fault+0x636/0x1090 [ 331.119378][T17095] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 331.119415][T17095] exc_page_fault+0x62/0xa0 [ 331.119467][T17095] asm_exc_page_fault+0x26/0x30 [ 331.119494][T17095] RIP: 0033:0x7f2699debf6b [ 331.119515][T17095] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 331.119540][T17095] RSP: 002b:00007f26984a4e10 EFLAGS: 00010246 [ 331.119562][T17095] RAX: 00007f26984a6f30 RBX: 00007f269a033620 RCX: 0000000000000000 [ 331.119617][T17095] RDX: 00007f26984a6f78 RSI: 00007f2699e9dbf8 RDI: 00007f26984a4e30 [ 331.119634][T17095] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 331.119651][T17095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.119668][T17095] R13: 0000000000000000 R14: 00007f269a065fa0 R15: 00007ffdff05a798 [ 331.119694][T17095] [ 331.119779][T17095] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 331.317090][T12778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.322664][T17116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.370155][ T51] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.407061][T17118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.439526][T17120] loop3: detected capacity change from 0 to 164 [ 331.449087][T17120] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4597'. [ 331.459064][T16730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.499856][T17129] x_tables: duplicate underflow at hook 1 [ 331.606449][T17151] loop6: detected capacity change from 0 to 512 [ 331.617290][T17161] loop7: detected capacity change from 0 to 512 [ 331.629176][T17151] journal_path: Non-blockdev passed as './bus' [ 331.635394][T17151] EXT4-fs: error: could not find journal device path [ 331.671270][T17161] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 331.819456][T17161] EXT4-fs (loop7): 1 truncate cleaned up [ 331.843478][T17161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.952062][T11211] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.973526][T17211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.581716][T17238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.658544][T17241] loop6: detected capacity change from 0 to 128 [ 332.698521][T17241] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.768374][T17207] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.822818][T17256] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 332.826470][T17254] loop6: detected capacity change from 0 to 128 [ 332.854006][T17254] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.926173][T17144] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.005733][T17267] netlink: 'syz.3.4632': attribute type 13 has an invalid length. [ 333.074121][T17267] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.081477][T17267] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.113457][T17274] loop6: detected capacity change from 0 to 512 [ 333.126623][T17274] journal_path: Non-blockdev passed as './bus' [ 333.132934][T17274] EXT4-fs: error: could not find journal device path [ 333.164424][T17215] syz.7.4610 (17215) used greatest stack depth: 6992 bytes left [ 333.169527][T17267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.173932][T17274] FAULT_INJECTION: forcing a failure. [ 333.173932][T17274] name failslab, interval 1, probability 0, space 0, times 0 [ 333.183682][T17267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.192131][T17274] CPU: 1 UID: 0 PID: 17274 Comm: syz.6.4633 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 333.192167][T17274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.192183][T17274] Call Trace: [ 333.192191][T17274] [ 333.192253][T17274] __dump_stack+0x1d/0x30 [ 333.192285][T17274] dump_stack_lvl+0xe8/0x140 [ 333.192311][T17274] dump_stack+0x15/0x1b [ 333.192334][T17274] should_fail_ex+0x265/0x280 [ 333.192378][T17274] should_failslab+0x8c/0xb0 [ 333.192443][T17274] __kmalloc_noprof+0xa5/0x3e0 [ 333.192533][T17274] ? usb_hcd_submit_urb+0x5d3/0x1200 [ 333.192573][T17274] ? terminate_walk+0x27f/0x2a0 [ 333.192604][T17274] usb_hcd_submit_urb+0x5d3/0x1200 [ 333.192650][T17274] usb_submit_urb+0xab5/0xbb0 [ 333.192722][T17274] ? should_fail_ex+0xdb/0x280 [ 333.192764][T17274] usbfs_start_wait_urb+0x95/0x1c0 [ 333.192797][T17274] do_proc_control+0x628/0x8b0 [ 333.192830][T17274] proc_control_compat+0xae/0xe0 [ 333.192889][T17274] usbdev_ioctl+0xee1/0x1710 [ 333.192931][T17274] ? __pfx_usbdev_ioctl+0x10/0x10 [ 333.193014][T17274] __se_sys_ioctl+0xce/0x140 [ 333.193054][T17274] __x64_sys_ioctl+0x43/0x50 [ 333.193092][T17274] x64_sys_call+0x19a8/0x2fb0 [ 333.193162][T17274] do_syscall_64+0xd2/0x200 [ 333.193198][T17274] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 333.193234][T17274] ? clear_bhb_loop+0x40/0x90 [ 333.193286][T17274] ? clear_bhb_loop+0x40/0x90 [ 333.193316][T17274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.193347][T17274] RIP: 0033:0x7f2699e3e969 [ 333.193367][T17274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.193430][T17274] RSP: 002b:00007f26984a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.193456][T17274] RAX: ffffffffffffffda RBX: 00007f269a065fa0 RCX: 00007f2699e3e969 [ 333.193480][T17274] RDX: 0000200000000600 RSI: 00000000c0105500 RDI: 0000000000000005 [ 333.193498][T17274] RBP: 00007f26984a7090 R08: 0000000000000000 R09: 0000000000000000 [ 333.193549][T17274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.193566][T17274] R13: 0000000000000000 R14: 00007f269a065fa0 R15: 00007ffdff05a798 [ 333.193591][T17274] [ 333.436449][T17267] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.445620][T17267] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.454553][T17267] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.463481][T17267] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.488541][T17276] erspan0: entered promiscuous mode [ 333.494260][T17276] macvtap1: entered promiscuous mode [ 333.500237][T17276] macvtap1: entered allmulticast mode [ 333.505765][T17276] erspan0: entered allmulticast mode [ 333.513023][T17277] erspan0: left allmulticast mode [ 333.518171][T17277] erspan0: left promiscuous mode [ 333.538845][T17282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=17282 comm=syz.6.4636 [ 333.660006][T17288] loop2: detected capacity change from 0 to 512 [ 333.666916][T17288] journal_path: Non-blockdev passed as './bus' [ 333.673250][T17288] EXT4-fs: error: could not find journal device path [ 333.729535][T17294] loop1: detected capacity change from 0 to 128 [ 333.739020][T17294] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.777404][T17298] __nla_validate_parse: 11 callbacks suppressed [ 333.777470][T17298] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4639'. [ 333.830566][T17295] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4639'. [ 333.845845][T17303] loop6: detected capacity change from 0 to 1024 [ 333.853293][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4644'. [ 333.863552][ T6558] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.896249][T17305] rdma_op ffff88811a05cd80 conn xmit_rdma 0000000000000000 [ 333.914016][T17303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.976326][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4644'. [ 334.036658][T17303] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 334.052385][T17303] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 334.064801][T17303] EXT4-fs (loop6): This should not happen!! Data will be lost [ 334.064801][T17303] [ 334.074522][T17303] EXT4-fs (loop6): Total free blocks count 0 [ 334.080635][T17303] EXT4-fs (loop6): Free/Dirty block details [ 334.086563][T17303] EXT4-fs (loop6): free_blocks=20480 [ 334.091949][T17303] EXT4-fs (loop6): dirty_blocks=32 [ 334.097099][T17303] EXT4-fs (loop6): Block reservation details [ 334.103164][T17303] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 334.103236][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4648'. [ 334.118252][T17316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4648'. [ 334.127232][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4648'. [ 334.137510][T17316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4648'. [ 334.146588][T17316] netlink: 'syz.1.4648': attribute type 6 has an invalid length. [ 334.219818][T17318] C: renamed from team_slave_0 (while UP) [ 334.244912][T17318] netlink: 'syz.2.4650': attribute type 3 has an invalid length. [ 334.252751][T17318] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4650'. [ 334.265759][T17318] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 334.313985][T17141] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 334.356337][T17329] loop3: detected capacity change from 0 to 1024 [ 334.377587][T17333] loop7: detected capacity change from 0 to 128 [ 334.395715][T17333] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 334.413002][T17329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.433103][T17337] FAULT_INJECTION: forcing a failure. [ 334.433103][T17337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.446228][T17337] CPU: 1 UID: 0 PID: 17337 Comm: syz.2.4658 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 334.446265][T17337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 334.446281][T17337] Call Trace: [ 334.446308][T17337] [ 334.446315][T17337] __dump_stack+0x1d/0x30 [ 334.446336][T17337] dump_stack_lvl+0xe8/0x140 [ 334.446377][T17337] dump_stack+0x15/0x1b [ 334.446399][T17337] should_fail_ex+0x265/0x280 [ 334.446434][T17337] should_fail+0xb/0x20 [ 334.446512][T17337] should_fail_usercopy+0x1a/0x20 [ 334.446549][T17337] _copy_from_user+0x1c/0xb0 [ 334.446579][T17337] user_termios_to_kernel_termios+0x22/0x30 [ 334.446622][T17337] set_termios+0xd5/0x4e0 [ 334.446724][T17337] tty_mode_ioctl+0x379/0x5c0 [ 334.446766][T17337] n_tty_ioctl_helper+0x91/0x210 [ 334.446805][T17337] n_tty_ioctl+0x101/0x200 [ 334.446836][T17337] ? __pfx_n_tty_ioctl+0x10/0x10 [ 334.446894][T17337] tty_ioctl+0x842/0xb80 [ 334.446932][T17337] ? __pfx_tty_ioctl+0x10/0x10 [ 334.446968][T17337] __se_sys_ioctl+0xce/0x140 [ 334.447067][T17337] __x64_sys_ioctl+0x43/0x50 [ 334.447107][T17337] x64_sys_call+0x19a8/0x2fb0 [ 334.447140][T17337] do_syscall_64+0xd2/0x200 [ 334.447199][T17337] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 334.447234][T17337] ? clear_bhb_loop+0x40/0x90 [ 334.447301][T17337] ? clear_bhb_loop+0x40/0x90 [ 334.447331][T17337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.447359][T17337] RIP: 0033:0x7f731ca4e969 [ 334.447379][T17337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.447401][T17337] RSP: 002b:00007f731b0b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.447420][T17337] RAX: ffffffffffffffda RBX: 00007f731cc75fa0 RCX: 00007f731ca4e969 [ 334.447572][T17337] RDX: 0000200000000140 RSI: 00000000402c542c RDI: 0000000000000003 [ 334.447585][T17337] RBP: 00007f731b0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 334.447597][T17337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.447615][T17337] R13: 0000000000000000 R14: 00007f731cc75fa0 R15: 00007ffe1fee5e48 [ 334.447641][T17337] [ 334.676463][T17340] loop1: detected capacity change from 0 to 128 [ 334.702316][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4651'. [ 334.757457][T17207] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 334.836078][T17345] loop7: detected capacity change from 0 to 2048 [ 334.842992][T12638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.867989][T17351] loop2: detected capacity change from 0 to 128 [ 334.908302][T17351] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.920850][T17347] loop1: detected capacity change from 0 to 8192 [ 334.933586][ T3517] loop7: p1 < > p4 [ 334.948381][ T3517] loop7: p4 size 8388608 extends beyond EOD, truncated [ 334.953721][T17351] ext4 filesystem being mounted at /346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 334.990309][T17345] loop7: p1 < > p4 [ 335.009739][T17345] loop7: p4 size 8388608 extends beyond EOD, truncated [ 335.054626][T17357] loop3: detected capacity change from 0 to 164 [ 335.106353][T12778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 335.250365][T17370] bridge_slave_1: left allmulticast mode [ 335.256131][T17370] bridge_slave_1: left promiscuous mode [ 335.261950][T17370] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.271714][T17370] bridge_slave_0: left allmulticast mode [ 335.277544][T17370] bridge_slave_0: left promiscuous mode [ 335.283392][T17370] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.344579][T17373] loop6: detected capacity change from 0 to 256 [ 335.451384][T17375] syzkaller0: entered promiscuous mode [ 335.457012][T17375] syzkaller0: entered allmulticast mode [ 335.751491][T17389] loop1: detected capacity change from 0 to 128 [ 335.758780][T17389] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 335.795676][ T6558] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 335.808667][T17388] loop6: detected capacity change from 0 to 164 [ 335.874658][T17400] FAULT_INJECTION: forcing a failure. [ 335.874658][T17400] name failslab, interval 1, probability 0, space 0, times 0 [ 335.887399][T17400] CPU: 0 UID: 0 PID: 17400 Comm: syz.7.4684 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 335.887435][T17400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.887452][T17400] Call Trace: [ 335.887461][T17400] [ 335.887471][T17400] __dump_stack+0x1d/0x30 [ 335.887496][T17400] dump_stack_lvl+0xe8/0x140 [ 335.887586][T17400] dump_stack+0x15/0x1b [ 335.887608][T17400] should_fail_ex+0x265/0x280 [ 335.887648][T17400] should_failslab+0x8c/0xb0 [ 335.887670][T17400] kmem_cache_alloc_noprof+0x50/0x310 [ 335.887777][T17400] ? skb_clone+0x151/0x1f0 [ 335.887806][T17400] skb_clone+0x151/0x1f0 [ 335.887835][T17400] __netlink_deliver_tap+0x2c9/0x500 [ 335.887902][T17400] netlink_unicast+0x64c/0x670 [ 335.887935][T17400] netlink_sendmsg+0x58b/0x6b0 [ 335.887974][T17400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.888003][T17400] __sock_sendmsg+0x145/0x180 [ 335.888110][T17400] ____sys_sendmsg+0x31e/0x4e0 [ 335.888138][T17400] ___sys_sendmsg+0x17b/0x1d0 [ 335.888177][T17400] __x64_sys_sendmsg+0xd4/0x160 [ 335.888257][T17400] x64_sys_call+0x2999/0x2fb0 [ 335.888287][T17400] do_syscall_64+0xd2/0x200 [ 335.888352][T17400] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 335.888382][T17400] ? clear_bhb_loop+0x40/0x90 [ 335.888410][T17400] ? clear_bhb_loop+0x40/0x90 [ 335.888437][T17400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.888507][T17400] RIP: 0033:0x7fc080fde969 [ 335.888589][T17400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.888658][T17400] RSP: 002b:00007fc07f647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.888683][T17400] RAX: ffffffffffffffda RBX: 00007fc081205fa0 RCX: 00007fc080fde969 [ 335.888700][T17400] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 335.888713][T17400] RBP: 00007fc07f647090 R08: 0000000000000000 R09: 0000000000000000 [ 335.888736][T17400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.888748][T17400] R13: 0000000000000000 R14: 00007fc081205fa0 R15: 00007ffe969fc6e8 [ 335.888770][T17400] [ 336.229458][T17414] loop2: detected capacity change from 0 to 128 [ 336.245409][T17414] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 336.290172][T17417] loop6: detected capacity change from 0 to 256 [ 336.327222][T17204] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 336.364785][T17421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.372078][T17421] IPv6: NLM_F_CREATE should be set when creating new route [ 336.386241][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 336.386260][ T29] audit: type=1326 audit(1748517837.744:62448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.6.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2699e3e969 code=0x7ffc0000 [ 336.446859][T17421] bridge0: entered promiscuous mode [ 336.454700][ T29] audit: type=1326 audit(1748517837.784:62449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.6.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f2699e3e969 code=0x7ffc0000 [ 336.478322][ T29] audit: type=1326 audit(1748517837.784:62450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.6.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2699e3e969 code=0x7ffc0000 [ 336.480198][T17421] bridge0: port 3(macvlan2) entered blocking state [ 336.502054][ T29] audit: type=1326 audit(1748517837.784:62451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.6.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2699e3e969 code=0x7ffc0000 [ 336.508682][T17421] bridge0: port 3(macvlan2) entered disabled state [ 336.532228][ T29] audit: type=1326 audit(1748517837.784:62452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.6.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2699e3e969 code=0x7ffc0000 [ 336.562374][ T29] audit: type=1326 audit(1748517837.784:62453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.6.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2699e3e969 code=0x7ffc0000 [ 336.585996][ T29] audit: type=1326 audit(1748517837.784:62454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.6.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2699e3e969 code=0x7ffc0000 [ 336.609750][ T29] audit: type=1326 audit(1748517837.784:62455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.6.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2699e3e969 code=0x7ffc0000 [ 336.617883][T17421] macvlan2: entered allmulticast mode [ 336.633483][ T29] audit: type=1326 audit(1748517837.784:62456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.6.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2699e3e969 code=0x7ffc0000 [ 336.638814][T17421] bridge0: entered allmulticast mode [ 336.662328][ T29] audit: type=1326 audit(1748517837.784:62457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17416 comm="syz.6.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2699e3e969 code=0x7ffc0000 [ 336.709067][T17421] macvlan2: left allmulticast mode [ 336.714300][T17421] bridge0: left allmulticast mode [ 336.733558][T17421] bridge0: left promiscuous mode [ 336.875464][T17437] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.882871][T17437] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.951162][T17437] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.960223][T17437] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.969166][T17437] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.978127][T17437] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.002646][T17437] netlink: 'syz.2.4701': attribute type 27 has an invalid length. [ 337.038946][T17446] loop2: detected capacity change from 0 to 1024 [ 337.054209][T17446] EXT4-fs: Ignoring removed orlov option [ 337.091481][T17446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.105429][T17451] loop3: detected capacity change from 0 to 256 [ 337.115974][T17446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.754263][T17463] xfrm0: mtu less than device minimum [ 338.194488][T17490] Driver unsupported XDP return value 0 on prog (id 2918) dev N/A, expect packet loss! [ 338.260627][T17494] loop7: detected capacity change from 0 to 1024 [ 338.280088][T17494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.309318][T17494] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 338.325670][T17494] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 338.338214][T17494] EXT4-fs (loop7): This should not happen!! Data will be lost [ 338.338214][T17494] [ 338.347924][T17494] EXT4-fs (loop7): Total free blocks count 0 [ 338.353936][T17494] EXT4-fs (loop7): Free/Dirty block details [ 338.359970][T17494] EXT4-fs (loop7): free_blocks=20480 [ 338.365330][T17494] EXT4-fs (loop7): dirty_blocks=32 [ 338.370500][T17494] EXT4-fs (loop7): Block reservation details [ 338.376543][T17494] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 338.488944][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 338.501677][T17503] loop2: detected capacity change from 0 to 1024 [ 338.542454][T17503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.568947][T17503] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 338.584119][T17503] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 338.596454][T17503] EXT4-fs (loop2): This should not happen!! Data will be lost [ 338.596454][T17503] [ 338.606173][T17503] EXT4-fs (loop2): Total free blocks count 0 [ 338.612372][T17503] EXT4-fs (loop2): Free/Dirty block details [ 338.618537][T17503] EXT4-fs (loop2): free_blocks=20480 [ 338.623900][T17503] EXT4-fs (loop2): dirty_blocks=32 [ 338.629266][T17503] EXT4-fs (loop2): Block reservation details [ 338.635362][T17503] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 338.661402][T17158] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 338.712488][T17520] loop2: detected capacity change from 0 to 128 [ 338.720763][T17520] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 338.752121][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 338.829875][T17527] __nla_validate_parse: 17 callbacks suppressed [ 338.829895][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4734'. [ 338.866789][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4734'. [ 339.068378][T17546] loop6: detected capacity change from 0 to 512 [ 339.098784][T17546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.111430][T17546] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.144043][T16730] EXT4-fs error (device loop6): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 339.156015][T16730] EXT4-fs error (device loop6): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 339.329395][T16730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.342286][T17195] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.460956][T17195] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.523003][T17195] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.545477][T17568] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4752'. [ 339.572786][T17568] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4752'. [ 339.587781][T17195] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.693494][T17195] bridge_slave_1: left allmulticast mode [ 339.699267][T17195] bridge_slave_1: left promiscuous mode [ 339.705032][T17195] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.718035][T17195] bridge_slave_0: left allmulticast mode [ 339.723744][T17195] bridge_slave_0: left promiscuous mode [ 339.729608][T17195] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.810232][T17195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.828643][T17195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.841130][T17195] bond0 (unregistering): Released all slaves [ 339.902772][T17589] FAULT_INJECTION: forcing a failure. [ 339.902772][T17589] name failslab, interval 1, probability 0, space 0, times 0 [ 339.915674][T17589] CPU: 1 UID: 0 PID: 17589 Comm: syz.7.4761 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 339.915709][T17589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.915726][T17589] Call Trace: [ 339.915779][T17589] [ 339.915789][T17589] __dump_stack+0x1d/0x30 [ 339.915815][T17589] dump_stack_lvl+0xe8/0x140 [ 339.915835][T17589] dump_stack+0x15/0x1b [ 339.915851][T17589] should_fail_ex+0x265/0x280 [ 339.915904][T17589] should_failslab+0x8c/0xb0 [ 339.915933][T17589] kmem_cache_alloc_node_noprof+0x57/0x320 [ 339.915962][T17589] ? __alloc_skb+0x101/0x320 [ 339.915992][T17589] __alloc_skb+0x101/0x320 [ 339.916095][T17589] mgmt_cmd_complete+0x42/0x210 [ 339.916206][T17589] ? read_commands+0x4d/0x160 [ 339.916262][T17589] read_commands+0x13d/0x160 [ 339.916296][T17589] hci_mgmt_cmd+0x7f2/0x8a0 [ 339.916327][T17589] hci_sock_sendmsg+0x518/0x910 [ 339.916397][T17589] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 339.916426][T17589] __sock_sendmsg+0x145/0x180 [ 339.916471][T17589] sock_write_iter+0x165/0x1b0 [ 339.916565][T17589] aio_write+0x2e5/0x410 [ 339.916603][T17589] io_submit_one+0xacd/0x11d0 [ 339.916651][T17589] __se_sys_io_submit+0xfb/0x280 [ 339.916758][T17589] __x64_sys_io_submit+0x43/0x50 [ 339.916810][T17589] x64_sys_call+0xfc4/0x2fb0 [ 339.916839][T17589] do_syscall_64+0xd2/0x200 [ 339.916879][T17589] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 339.916914][T17589] ? clear_bhb_loop+0x40/0x90 [ 339.916943][T17589] ? clear_bhb_loop+0x40/0x90 [ 339.917043][T17589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.917072][T17589] RIP: 0033:0x7fc080fde969 [ 339.917093][T17589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.917170][T17589] RSP: 002b:00007fc07f647038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 339.917195][T17589] RAX: ffffffffffffffda RBX: 00007fc081205fa0 RCX: 00007fc080fde969 [ 339.917212][T17589] RDX: 0000200000000940 RSI: 0000000000000001 RDI: 00007fc081d42000 [ 339.917227][T17589] RBP: 00007fc07f647090 R08: 0000000000000000 R09: 0000000000000000 [ 339.917243][T17589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.917258][T17589] R13: 0000000000000000 R14: 00007fc081205fa0 R15: 00007ffe969fc6e8 [ 339.917282][T17589] [ 340.155252][T17592] loop2: detected capacity change from 0 to 2048 [ 340.162089][T17592] EXT4-fs: Invalid want_extra_isize 5 [ 340.186673][T17592] loop2: detected capacity change from 0 to 512 [ 340.203504][T17195] hsr_slave_0: left promiscuous mode [ 340.218517][T17195] hsr_slave_1: left promiscuous mode [ 340.224344][T17195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.231815][T17195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.245531][T17195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.253136][T17195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.262107][T17592] EXT4-fs (loop2): 1 orphan inode deleted [ 340.272876][T17592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.287304][T17592] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.295329][T17195] veth1_macvtap: left promiscuous mode [ 340.303472][T17195] veth0_macvtap: left promiscuous mode [ 340.309762][T17195] veth1_vlan: left promiscuous mode [ 340.315124][T17186] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 1 [ 340.316789][T17195] veth0_vlan: left promiscuous mode [ 340.374513][T12778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.443320][T17606] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4765'. [ 340.463467][T17195] team0 (unregistering): Port device team_slave_1 removed [ 340.486583][T17195] team0 (unregistering): Port device team_slave_0 removed [ 340.494929][T17610] rdma_op ffff88811a07d580 conn xmit_rdma 0000000000000000 [ 340.598798][T17606] netlink: 830 bytes leftover after parsing attributes in process `syz.7.4765'. [ 340.633462][T17557] chnl_net:caif_netlink_parms(): no params data found [ 340.709810][T17632] loop3: detected capacity change from 0 to 128 [ 340.744674][T17557] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.751845][T17557] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.782214][T17557] bridge_slave_0: entered allmulticast mode [ 340.789037][T17557] bridge_slave_0: entered promiscuous mode [ 340.797010][T17557] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.804153][T17557] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.812140][T17557] bridge_slave_1: entered allmulticast mode [ 340.819040][T17557] bridge_slave_1: entered promiscuous mode [ 340.857628][T17557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.891584][T17652] loop1: detected capacity change from 0 to 128 [ 340.905006][T17557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.918982][T17652] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.920737][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4775'. [ 340.945340][T17652] ext4 filesystem being mounted at /327/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 340.977679][T17653] loop7: detected capacity change from 0 to 1024 [ 341.004136][T17557] team0: Port device team_slave_0 added [ 341.013735][T17557] team0: Port device team_slave_1 added [ 341.042633][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4775'. [ 341.060082][T17653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.076043][T17557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.083090][T17557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.109165][T17557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.129540][T17557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.136524][T17557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.162553][T17557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.176732][T17653] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 341.193262][T17653] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 341.205604][T17653] EXT4-fs (loop7): This should not happen!! Data will be lost [ 341.205604][T17653] [ 341.215377][T17653] EXT4-fs (loop7): Total free blocks count 0 [ 341.221511][T17653] EXT4-fs (loop7): Free/Dirty block details [ 341.227599][T17653] EXT4-fs (loop7): free_blocks=20480 [ 341.232928][T17653] EXT4-fs (loop7): dirty_blocks=32 [ 341.238128][T17653] EXT4-fs (loop7): Block reservation details [ 341.244144][T17653] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 341.261695][T12339] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.306757][T17557] hsr_slave_0: entered promiscuous mode [ 341.324756][T17557] hsr_slave_1: entered promiscuous mode [ 341.334247][T17557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.351593][T17557] Cannot create hsr debugfs directory [ 341.391348][T17677] loop3: detected capacity change from 0 to 128 [ 341.393812][ T29] kauditd_printk_skb: 779 callbacks suppressed [ 341.393831][ T29] audit: type=1326 audit(1748517842.754:63236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f731ca45927 code=0x7ffc0000 [ 341.437271][T17677] bio_check_eod: 1 callbacks suppressed [ 341.437290][T17677] syz.3.4781: attempt to access beyond end of device [ 341.437290][T17677] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 341.455372][ T29] audit: type=1326 audit(1748517842.794:63237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f731c9eab39 code=0x7ffc0000 [ 341.456153][T17677] buffer_io_error: 6 callbacks suppressed [ 341.456165][T17677] Buffer I/O error on dev loop3, logical block 2065, async page read [ 341.479163][ T29] audit: type=1326 audit(1748517842.794:63238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f731ca45927 code=0x7ffc0000 [ 341.516084][ T29] audit: type=1326 audit(1748517842.794:63239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f731c9eab39 code=0x7ffc0000 [ 341.537195][T17677] syz.3.4781: attempt to access beyond end of device [ 341.537195][T17677] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 341.539082][ T29] audit: type=1326 audit(1748517842.794:63240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f731ca4e969 code=0x7ffc0000 [ 341.552314][T17677] Buffer I/O error on dev loop3, logical block 2066, async page read [ 341.575374][ T29] audit: type=1326 audit(1748517842.794:63241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f731ca45927 code=0x7ffc0000 [ 341.606566][ T29] audit: type=1326 audit(1748517842.794:63242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f731c9eab39 code=0x7ffc0000 [ 341.626656][T17677] syz.3.4781: attempt to access beyond end of device [ 341.626656][T17677] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 341.629563][ T29] audit: type=1326 audit(1748517842.794:63243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f731ca4e969 code=0x7ffc0000 [ 341.642784][T17677] Buffer I/O error on dev loop3, logical block 2067, async page read [ 341.665808][ T29] audit: type=1326 audit(1748517842.804:63244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f731ca45927 code=0x7ffc0000 [ 341.697500][ T29] audit: type=1326 audit(1748517842.804:63245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17620 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f731c9eab39 code=0x7ffc0000 [ 341.744581][ T6296] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 341.757252][T17677] syz.3.4781: attempt to access beyond end of device [ 341.757252][T17677] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 341.770613][T17677] Buffer I/O error on dev loop3, logical block 2068, async page read [ 341.779737][T17677] syz.3.4781: attempt to access beyond end of device [ 341.779737][T17677] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 341.793084][T17677] Buffer I/O error on dev loop3, logical block 2069, async page read [ 341.804843][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4783'. [ 341.817962][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4783'. [ 341.834410][T17677] syz.3.4781: attempt to access beyond end of device [ 341.834410][T17677] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 341.847749][T17677] Buffer I/O error on dev loop3, logical block 2070, async page read [ 341.878130][T17677] syz.3.4781: attempt to access beyond end of device [ 341.878130][T17677] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 341.891510][T17677] Buffer I/O error on dev loop3, logical block 2071, async page read [ 341.934586][T17557] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 341.963396][T17557] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 341.982863][T17557] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 342.003200][T17557] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 342.010780][T17677] syz.3.4781: attempt to access beyond end of device [ 342.010780][T17677] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 342.024194][T17677] Buffer I/O error on dev loop3, logical block 2072, async page read [ 342.034854][T17677] syz.3.4781: attempt to access beyond end of device [ 342.034854][T17677] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 342.048256][T17677] Buffer I/O error on dev loop3, logical block 2065, async page read [ 342.058381][T17677] syz.3.4781: attempt to access beyond end of device [ 342.058381][T17677] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 342.071734][T17677] Buffer I/O error on dev loop3, logical block 2066, async page read [ 342.132316][T17557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.181784][T17557] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.214576][T17716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.236446][T17158] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.243640][T17158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.251576][T17718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.276367][T17158] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.283652][T17158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.372260][T17723] loop7: detected capacity change from 0 to 128 [ 342.389662][T17723] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 342.401715][T17557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.464790][T17186] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 342.509753][T17747] rdma_op ffff88811a955180 conn xmit_rdma 0000000000000000 [ 342.535497][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x1 [ 342.543034][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.550646][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.558120][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.565611][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.573135][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.608494][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.615981][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.623471][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.630986][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x2 [ 342.638763][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.646401][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.653997][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.661457][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.668929][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.676338][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.683785][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.691228][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.698857][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.706384][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.713892][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.721338][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.728843][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.736263][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.743857][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.751455][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.758977][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.766437][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.773956][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.781452][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.788881][ T3513] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 342.852834][T17557] veth0_vlan: entered promiscuous mode [ 342.866929][T17557] veth1_vlan: entered promiscuous mode [ 342.874932][ T3513] hid-generic 0000:0004:0000.0010: hidraw0: HID v0.02 Device [syz0] on syz1 [ 342.911106][T17557] veth0_macvtap: entered promiscuous mode [ 342.919250][T17557] veth1_macvtap: entered promiscuous mode [ 342.944110][T17557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.954749][T17774] fido_id[17774]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 342.962455][T17779] loop2: detected capacity change from 0 to 512 [ 342.985734][T17557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.996804][T17779] EXT4-fs: test_dummy_encryption option not supported [ 343.006082][T17557] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.014888][T17557] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.023779][T17557] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.032671][T17557] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.056450][T17784] FAULT_INJECTION: forcing a failure. [ 343.056450][T17784] name failslab, interval 1, probability 0, space 0, times 0 [ 343.069319][T17784] CPU: 0 UID: 0 PID: 17784 Comm: syz.7.4796 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 343.069347][T17784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.069360][T17784] Call Trace: [ 343.069366][T17784] [ 343.069455][T17784] __dump_stack+0x1d/0x30 [ 343.069500][T17784] dump_stack_lvl+0xe8/0x140 [ 343.069520][T17784] dump_stack+0x15/0x1b [ 343.069537][T17784] should_fail_ex+0x265/0x280 [ 343.069653][T17784] should_failslab+0x8c/0xb0 [ 343.069682][T17784] kmem_cache_alloc_noprof+0x50/0x310 [ 343.069709][T17784] ? skb_clone+0x151/0x1f0 [ 343.069787][T17784] skb_clone+0x151/0x1f0 [ 343.069843][T17784] __netlink_deliver_tap+0x2c9/0x500 [ 343.069886][T17784] netlink_unicast+0x64c/0x670 [ 343.069920][T17784] netlink_sendmsg+0x58b/0x6b0 [ 343.069954][T17784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.070044][T17784] __sock_sendmsg+0x145/0x180 [ 343.070089][T17784] ____sys_sendmsg+0x31e/0x4e0 [ 343.070126][T17784] ___sys_sendmsg+0x17b/0x1d0 [ 343.070170][T17784] __x64_sys_sendmsg+0xd4/0x160 [ 343.070361][T17784] x64_sys_call+0x2999/0x2fb0 [ 343.070393][T17784] do_syscall_64+0xd2/0x200 [ 343.070419][T17784] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 343.070461][T17784] ? clear_bhb_loop+0x40/0x90 [ 343.070555][T17784] ? clear_bhb_loop+0x40/0x90 [ 343.070586][T17784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.070621][T17784] RIP: 0033:0x7fc080fde969 [ 343.070647][T17784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.070671][T17784] RSP: 002b:00007fc07f626038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.070697][T17784] RAX: ffffffffffffffda RBX: 00007fc081206080 RCX: 00007fc080fde969 [ 343.070714][T17784] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 343.070732][T17784] RBP: 00007fc07f626090 R08: 0000000000000000 R09: 0000000000000000 [ 343.070749][T17784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.070766][T17784] R13: 0000000000000000 R14: 00007fc081206080 R15: 00007ffe969fc6e8 [ 343.070793][T17784] [ 343.071520][T17784] netlink: 'syz.7.4796': attribute type 1 has an invalid length. [ 343.159382][T17790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.176918][T17784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.188095][T17788] rdma_op ffff888112281580 conn xmit_rdma 0000000000000000 [ 343.752239][T17857] rdma_op ffff888112281d80 conn xmit_rdma 0000000000000000 [ 343.876250][T17849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.979682][T17877] rdma_op ffff888118668580 conn xmit_rdma 0000000000000000 [ 344.284574][T17910] FAULT_INJECTION: forcing a failure. [ 344.284574][T17910] name failslab, interval 1, probability 0, space 0, times 0 [ 344.297350][T17910] CPU: 1 UID: 0 PID: 17910 Comm: syz.1.4829 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 344.297431][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.297446][T17910] Call Trace: [ 344.297454][T17910] [ 344.297464][T17910] __dump_stack+0x1d/0x30 [ 344.297492][T17910] dump_stack_lvl+0xe8/0x140 [ 344.297519][T17910] dump_stack+0x15/0x1b [ 344.297541][T17910] should_fail_ex+0x265/0x280 [ 344.297690][T17910] should_failslab+0x8c/0xb0 [ 344.297712][T17910] kmem_cache_alloc_noprof+0x50/0x310 [ 344.297738][T17910] ? getname_flags+0x80/0x3b0 [ 344.297770][T17910] getname_flags+0x80/0x3b0 [ 344.297819][T17910] __x64_sys_getxattr+0xfd/0x140 [ 344.297864][T17910] x64_sys_call+0x2f5b/0x2fb0 [ 344.297893][T17910] do_syscall_64+0xd2/0x200 [ 344.297997][T17910] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 344.298025][T17910] ? clear_bhb_loop+0x40/0x90 [ 344.298062][T17910] ? clear_bhb_loop+0x40/0x90 [ 344.298092][T17910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.298118][T17910] RIP: 0033:0x7f64269be969 [ 344.298138][T17910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.298160][T17910] RSP: 002b:00007f6425027038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 344.298207][T17910] RAX: ffffffffffffffda RBX: 00007f6426be5fa0 RCX: 00007f64269be969 [ 344.298223][T17910] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 344.298241][T17910] RBP: 00007f6425027090 R08: 0000000000000000 R09: 0000000000000000 [ 344.298258][T17910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.298273][T17910] R13: 0000000000000000 R14: 00007f6426be5fa0 R15: 00007ffce61f9db8 [ 344.298345][T17910] [ 344.302058][T17912] __nla_validate_parse: 7 callbacks suppressed [ 344.302077][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4830'. [ 344.362789][T17914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.395285][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4830'. [ 344.560611][T17919] loop3: detected capacity change from 0 to 1024 [ 344.583131][T17919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.610882][T17919] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 344.631305][T17919] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 344.643652][T17919] EXT4-fs (loop3): This should not happen!! Data will be lost [ 344.643652][T17919] [ 344.653317][T17919] EXT4-fs (loop3): Total free blocks count 0 [ 344.659354][T17919] EXT4-fs (loop3): Free/Dirty block details [ 344.665322][T17919] EXT4-fs (loop3): free_blocks=20480 [ 344.670652][T17919] EXT4-fs (loop3): dirty_blocks=32 [ 344.675831][T17919] EXT4-fs (loop3): Block reservation details [ 344.681858][T17919] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 344.700344][T17932] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4837'. [ 344.750757][T17932] loop2: detected capacity change from 0 to 1024 [ 344.765382][T17936] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4839'. [ 344.768545][T17932] EXT4-fs: Ignoring removed orlov option [ 344.802062][T17195] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 344.816921][T17932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.830172][T17936] loop1: detected capacity change from 0 to 1024 [ 344.837080][T17936] EXT4-fs: Ignoring removed orlov option [ 344.849921][T17932] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.902612][T17936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.932752][T17936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.973109][T17953] 9pnet_fd: Insufficient options for proto=fd [ 345.019185][T17955] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.054480][T17944] netlink: 'syz.3.4841': attribute type 13 has an invalid length. [ 345.089836][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4846'. [ 345.132372][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4846'. [ 345.180760][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4847'. [ 345.328904][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4847'. [ 345.502537][T17967] can: request_module (can-proto-0) failed. [ 345.594726][T17981] loop2: detected capacity change from 0 to 128 [ 345.876763][T17994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.918135][T18001] rdma_op ffff88811910ed80 conn xmit_rdma 0000000000000000 [ 346.016194][T18007] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4863'. [ 346.040009][T18007] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4863'. [ 346.143189][T18018] loop2: detected capacity change from 0 to 1024 [ 346.213621][T18018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.280174][T12778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.362491][T18035] loop3: detected capacity change from 0 to 1024 [ 346.403346][T18035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.431761][T18035] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 346.450842][T18035] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 346.463241][T18035] EXT4-fs (loop3): This should not happen!! Data will be lost [ 346.463241][T18035] [ 346.473158][T18035] EXT4-fs (loop3): Total free blocks count 0 [ 346.479213][T18035] EXT4-fs (loop3): Free/Dirty block details [ 346.485282][T18035] EXT4-fs (loop3): free_blocks=20480 [ 346.490695][T18035] EXT4-fs (loop3): dirty_blocks=32 [ 346.495842][T18035] EXT4-fs (loop3): Block reservation details [ 346.501950][T18035] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 346.502497][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 346.502514][ T29] audit: type=1400 audit(1748517847.874:63506): avc: denied { setopt } for pid=18003 comm="syz.1.4864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.683156][ T6296] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 346.794174][T18057] random: crng reseeded on system resumption [ 346.794233][T18055] syzkaller0: entered promiscuous mode [ 346.805736][T18055] syzkaller0: entered allmulticast mode [ 346.869821][ T29] audit: type=1400 audit(1748517848.154:63507): avc: denied { append } for pid=18054 comm="syz.3.4883" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 346.893276][ T29] audit: type=1400 audit(1748517848.154:63508): avc: denied { open } for pid=18054 comm="syz.3.4883" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 347.028082][T18066] FAULT_INJECTION: forcing a failure. [ 347.028082][T18066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.041226][T18066] CPU: 1 UID: 0 PID: 18066 Comm: syz.8.4888 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 347.041317][T18066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.041334][T18066] Call Trace: [ 347.041342][T18066] [ 347.041380][T18066] __dump_stack+0x1d/0x30 [ 347.041401][T18066] dump_stack_lvl+0xe8/0x140 [ 347.041424][T18066] dump_stack+0x15/0x1b [ 347.041445][T18066] should_fail_ex+0x265/0x280 [ 347.041566][T18066] should_fail+0xb/0x20 [ 347.041605][T18066] should_fail_usercopy+0x1a/0x20 [ 347.041644][T18066] _copy_from_user+0x1c/0xb0 [ 347.041726][T18066] get_nodes+0x104/0x290 [ 347.041763][T18066] __x64_sys_set_mempolicy+0x10d/0x170 [ 347.041803][T18066] x64_sys_call+0x273c/0x2fb0 [ 347.041896][T18066] do_syscall_64+0xd2/0x200 [ 347.041961][T18066] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 347.041994][T18066] ? clear_bhb_loop+0x40/0x90 [ 347.042104][T18066] ? clear_bhb_loop+0x40/0x90 [ 347.042134][T18066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.042164][T18066] RIP: 0033:0x7fba1615e969 [ 347.042231][T18066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.042255][T18066] RSP: 002b:00007fba147c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 347.042281][T18066] RAX: ffffffffffffffda RBX: 00007fba16385fa0 RCX: 00007fba1615e969 [ 347.042307][T18066] RDX: 00000000000000e0 RSI: 00002000000003c0 RDI: 0000000000000006 [ 347.042321][T18066] RBP: 00007fba147c7090 R08: 0000000000000000 R09: 0000000000000000 [ 347.042380][T18066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.042397][T18066] R13: 0000000000000000 R14: 00007fba16385fa0 R15: 00007fff79debc98 [ 347.042424][T18066] [ 347.046172][ T29] audit: type=1400 audit(1748517848.404:63509): avc: denied { ioctl } for pid=18067 comm="syz.1.4884" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 347.169389][T18073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.176816][ T29] audit: type=1400 audit(1748517848.434:63510): avc: denied { create } for pid=18067 comm="syz.1.4884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.276684][ T29] audit: type=1400 audit(1748517848.434:63511): avc: denied { connect } for pid=18067 comm="syz.1.4884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.450883][ T29] audit: type=1400 audit(1748517848.814:63512): avc: denied { getopt } for pid=18089 comm="syz.2.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.604869][ T29] audit: type=1400 audit(1748517848.964:63513): avc: denied { name_connect } for pid=18102 comm="syz.3.4902" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 347.737210][ T29] audit: type=1400 audit(1748517849.094:63514): avc: denied { ioctl } for pid=18102 comm="syz.3.4902" path="socket:[54672]" dev="sockfs" ino=54672 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 347.742165][T18114] loop8: detected capacity change from 0 to 128 [ 347.811409][ T29] audit: type=1400 audit(1748517849.144:63515): avc: denied { sys_module } for pid=18102 comm="syz.3.4902" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 347.856777][T18114] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.887515][T18114] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 347.935768][T18125] loop1: detected capacity change from 0 to 256 [ 347.943695][T18114] FAULT_INJECTION: forcing a failure. [ 347.943695][T18114] name failslab, interval 1, probability 0, space 0, times 0 [ 347.951469][T18125] FAT-fs (loop1): bogus number of FAT sectors [ 347.956675][T18114] CPU: 0 UID: 0 PID: 18114 Comm: syz.8.4906 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 347.956743][T18114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.956762][T18114] Call Trace: [ 347.956770][T18114] [ 347.956781][T18114] __dump_stack+0x1d/0x30 [ 347.956810][T18114] dump_stack_lvl+0xe8/0x140 [ 347.956894][T18114] dump_stack+0x15/0x1b [ 347.956957][T18114] should_fail_ex+0x265/0x280 [ 347.956999][T18114] should_failslab+0x8c/0xb0 [ 347.957029][T18114] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 347.957144][T18114] ? sidtab_sid2str_get+0xa0/0x130 [ 347.957187][T18114] kmemdup_noprof+0x2b/0x70 [ 347.957256][T18114] sidtab_sid2str_get+0xa0/0x130 [ 347.957288][T18114] security_sid_to_context_core+0x1eb/0x2e0 [ 347.957322][T18114] security_sid_to_context_force+0x2a/0x40 [ 347.957448][T18114] selinux_inode_init_security+0x31f/0x3c0 [ 347.957578][T18114] security_inode_init_security+0x149/0x330 [ 347.957694][T18114] ? __pfx_ext4_initxattrs+0x10/0x10 [ 347.957806][T18114] ext4_init_security+0x34/0x50 [ 347.957899][T18114] __ext4_new_inode+0x20fb/0x22e0 [ 347.957948][T18114] ext4_create+0x16e/0x2f0 [ 347.958012][T18114] ? __pfx_ext4_create+0x10/0x10 [ 347.958052][T18114] path_openat+0x1102/0x2170 [ 347.958157][T18114] do_filp_open+0x109/0x230 [ 347.958218][T18114] do_sys_openat2+0xa6/0x110 [ 347.958257][T18114] __x64_sys_openat+0xf2/0x120 [ 347.958345][T18114] x64_sys_call+0x1af/0x2fb0 [ 347.958375][T18114] do_syscall_64+0xd2/0x200 [ 347.958411][T18114] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 347.958478][T18114] ? clear_bhb_loop+0x40/0x90 [ 347.958507][T18114] ? clear_bhb_loop+0x40/0x90 [ 347.958598][T18114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.958662][T18114] RIP: 0033:0x7fba1615e969 [ 347.958684][T18114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.958732][T18114] RSP: 002b:00007fba147c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 347.958758][T18114] RAX: ffffffffffffffda RBX: 00007fba16385fa0 RCX: 00007fba1615e969 [ 347.958776][T18114] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 347.958794][T18114] RBP: 00007fba147c7090 R08: 0000000000000000 R09: 0000000000000000 [ 347.958811][T18114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.958829][T18114] R13: 0000000000000000 R14: 00007fba16385fa0 R15: 00007fff79debc98 [ 347.958909][T18114] [ 348.207977][T18125] FAT-fs (loop1): Can't find a valid FAT filesystem [ 348.215629][T17557] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.331037][T18139] loop8: detected capacity change from 0 to 512 [ 348.357565][T18139] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.400320][T18139] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.456856][T17557] EXT4-fs error (device loop8): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 348.488241][T17557] EXT4-fs error (device loop8): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 348.502408][T18160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.507708][T18158] rdma_op ffff8881191a4180 conn xmit_rdma 0000000000000000 [ 348.646042][T18170] loop7: detected capacity change from 0 to 512 [ 348.657304][T18170] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 348.671154][T18170] EXT4-fs (loop7): invalid journal inode [ 348.673608][T17557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.678467][T18170] EXT4-fs (loop7): can't get journal size [ 348.695816][T18170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 348.706093][T17158] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.725885][T18170] System zones: 1-12, 13-13 [ 348.731508][T18170] EXT4-fs (loop7): 1 truncate cleaned up [ 348.737925][T18170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.784572][T17158] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.812686][T18178] pim6reg: entered allmulticast mode [ 348.868727][T11211] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.878762][T17158] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.939280][T18189] loop2: detected capacity change from 0 to 512 [ 348.995814][T17158] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.031626][T18186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.032491][T18189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.054469][T18189] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.112399][T12778] EXT4-fs error (device loop2): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 349.139464][T12778] EXT4-fs error (device loop2): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 349.169145][T17158] bridge_slave_1: left allmulticast mode [ 349.175041][T17158] bridge_slave_1: left promiscuous mode [ 349.180851][T17158] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.190760][T17158] bridge_slave_0: left allmulticast mode [ 349.196431][T17158] bridge_slave_0: left promiscuous mode [ 349.202188][T17158] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.262251][T18199] rdma_op ffff888128eb6580 conn xmit_rdma 0000000000000000 [ 349.340683][T17158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.352401][T17158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.362349][T17158] bond0 (unregistering): Released all slaves [ 349.374758][T18176] chnl_net:caif_netlink_parms(): no params data found [ 349.388230][T18203] x_tables: duplicate underflow at hook 2 [ 349.396529][T18198] pim6reg: entered allmulticast mode [ 349.420135][T18205] FAULT_INJECTION: forcing a failure. [ 349.420135][T18205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.433272][T18205] CPU: 1 UID: 0 PID: 18205 Comm: syz.3.4936 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 349.433309][T18205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.433327][T18205] Call Trace: [ 349.433336][T18205] [ 349.433346][T18205] __dump_stack+0x1d/0x30 [ 349.433383][T18205] dump_stack_lvl+0xe8/0x140 [ 349.433404][T18205] dump_stack+0x15/0x1b [ 349.433492][T18205] should_fail_ex+0x265/0x280 [ 349.433531][T18205] should_fail+0xb/0x20 [ 349.433633][T18205] should_fail_usercopy+0x1a/0x20 [ 349.433742][T18205] _copy_from_user+0x1c/0xb0 [ 349.433769][T18205] __sys_bpf+0x178/0x790 [ 349.433846][T18205] __x64_sys_bpf+0x41/0x50 [ 349.433881][T18205] x64_sys_call+0x2478/0x2fb0 [ 349.433909][T18205] do_syscall_64+0xd2/0x200 [ 349.433956][T18205] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 349.433988][T18205] ? clear_bhb_loop+0x40/0x90 [ 349.434010][T18205] ? clear_bhb_loop+0x40/0x90 [ 349.434099][T18205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.434127][T18205] RIP: 0033:0x7f49aecbe969 [ 349.434148][T18205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.434167][T18205] RSP: 002b:00007f49ad327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.434186][T18205] RAX: ffffffffffffffda RBX: 00007f49aeee5fa0 RCX: 00007f49aecbe969 [ 349.434210][T18205] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 349.434228][T18205] RBP: 00007f49ad327090 R08: 0000000000000000 R09: 0000000000000000 [ 349.434245][T18205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.434317][T18205] R13: 0000000000000000 R14: 00007f49aeee5fa0 R15: 00007ffd47583cf8 [ 349.434340][T18205] [ 349.561150][T14302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.657798][T18211] __nla_validate_parse: 17 callbacks suppressed [ 349.657813][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4938'. [ 349.688938][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4938'. [ 349.724681][T17158] hsr_slave_0: left promiscuous mode [ 349.755812][T17158] hsr_slave_1: left promiscuous mode [ 349.766407][T17158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.773914][T17158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.799912][T17158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.807432][T17158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.829228][T17158] veth1_macvtap: left promiscuous mode [ 349.840335][T17158] veth0_macvtap: left promiscuous mode [ 349.845989][T17158] veth1_vlan: left promiscuous mode [ 349.851778][T17158] veth0_vlan: left promiscuous mode [ 349.937763][T17158] team0 (unregistering): Port device team_slave_1 removed [ 349.947601][T17158] team0 (unregistering): Port device team_slave_0 removed [ 349.985843][T18176] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.993023][T18176] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.001443][T18176] bridge_slave_0: entered allmulticast mode [ 350.008125][T18176] bridge_slave_0: entered promiscuous mode [ 350.027365][T18176] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.034468][T18176] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.054358][T18176] bridge_slave_1: entered allmulticast mode [ 350.064300][T18176] bridge_slave_1: entered promiscuous mode [ 350.097061][T18176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.138352][T18176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.198637][T18176] team0: Port device team_slave_0 added [ 350.205642][T18176] team0: Port device team_slave_1 added [ 350.250163][T18176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.257239][T18176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.283429][T18176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.303289][T18176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.310335][T18176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.336447][T18176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.396381][T18176] hsr_slave_0: entered promiscuous mode [ 350.402620][T18176] hsr_slave_1: entered promiscuous mode [ 350.409109][T18176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.416732][T18176] Cannot create hsr debugfs directory [ 350.472338][T18221] chnl_net:caif_netlink_parms(): no params data found [ 350.558623][T18286] loop7: detected capacity change from 0 to 512 [ 350.576805][T18286] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 350.600275][T18221] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.607546][T18221] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.616401][T18221] bridge_slave_0: entered allmulticast mode [ 350.624130][T18221] bridge_slave_0: entered promiscuous mode [ 350.631106][T18221] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.638254][T18221] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.645647][T18221] bridge_slave_1: entered allmulticast mode [ 350.652024][T18286] EXT4-fs (loop7): 1 truncate cleaned up [ 350.663204][T18286] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.667765][T18221] bridge_slave_1: entered promiscuous mode [ 350.706421][T18296] loop1: detected capacity change from 0 to 2048 [ 350.719664][T11211] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.766931][T18221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.791236][T18176] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 350.847810][T18221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.857518][T18176] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 350.905503][T18176] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 350.944314][T18310] loop7: detected capacity change from 0 to 1024 [ 350.975323][T18176] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 350.996908][T18221] team0: Port device team_slave_0 added [ 351.004810][T18310] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.031206][T18221] team0: Port device team_slave_1 added [ 351.057095][T17158] bridge_slave_1: left allmulticast mode [ 351.062949][T17158] bridge_slave_1: left promiscuous mode [ 351.068718][T17158] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.083002][T18310] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 351.107812][T18310] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 351.120205][T18310] EXT4-fs (loop7): This should not happen!! Data will be lost [ 351.120205][T18310] [ 351.123783][T17158] bridge_slave_0: left allmulticast mode [ 351.129936][T18310] EXT4-fs (loop7): Total free blocks count 0 [ 351.135625][T17158] bridge_slave_0: left promiscuous mode [ 351.141628][T18310] EXT4-fs (loop7): Free/Dirty block details [ 351.147302][T17158] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.153093][T18310] EXT4-fs (loop7): free_blocks=20480 [ 351.165591][T18310] EXT4-fs (loop7): dirty_blocks=32 [ 351.170792][T18310] EXT4-fs (loop7): Block reservation details [ 351.176800][T18310] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 351.200901][T18325] loop9: detected capacity change from 0 to 7 [ 351.213750][ T3311] buffer_io_error: 22 callbacks suppressed [ 351.213768][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 351.233294][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 351.241239][ T3311] loop9: unable to read partition table [ 351.256412][T18333] loop3: detected capacity change from 0 to 1024 [ 351.263502][T18333] EXT4-fs: Ignoring removed mblk_io_submit option [ 351.288812][T18325] Buffer I/O error on dev loop9, logical block 0, async page read [ 351.298350][T18325] Buffer I/O error on dev loop9, logical block 0, async page read [ 351.306291][T18325] loop9: unable to read partition table [ 351.314744][T18333] EXT4-fs: Ignoring removed nobh option [ 351.314989][T18221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.320482][T18333] EXT4-fs: Ignoring removed bh option [ 351.327367][T18221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.335257][T18325] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 351.335257][T18325] U) failed (rc=-5) [ 351.358666][T18221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.369944][T18221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.383605][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 351.390094][T18221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.398212][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 351.423859][T18221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.431787][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 351.450425][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 351.458516][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 351.466483][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 351.521390][T18333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.543888][T17186] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 351.563738][T18176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.574029][T17158] hsr_slave_0: left promiscuous mode [ 351.577007][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 351.577024][ T29] audit: type=1400 audit(1748517852.944:63667): avc: denied { map } for pid=18323 comm="syz.3.4955" path="pipe:[33727]" dev="pipefs" ino=33727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 351.585996][T18325] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.4955: inode #327696: comm syz.3.4955: iget: illegal inode # [ 351.622653][T17158] hsr_slave_1: left promiscuous mode [ 351.629540][T17158] pim6reg (unregistering): left allmulticast mode [ 351.637443][T18325] EXT4-fs (loop3): Remounting filesystem read-only [ 351.637999][ T29] audit: type=1400 audit(1748517852.944:63668): avc: denied { setattr } for pid=18323 comm="syz.3.4955" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 351.666587][ T29] audit: type=1400 audit(1748517852.944:63669): avc: denied { read } for pid=18323 comm="syz.3.4955" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 351.676792][T18325] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.3.4955: cleanup dec ref error -30 [ 351.689794][ T29] audit: type=1400 audit(1748517852.944:63670): avc: denied { open } for pid=18323 comm="syz.3.4955" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 351.689835][ T29] audit: type=1400 audit(1748517852.944:63671): avc: denied { ioctl } for pid=18323 comm="syz.3.4955" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 351.709066][T18325] EXT4-fs warning (device loop3): ext4_xattr_block_set:2190: inode #18: comm syz.3.4955: dec ref error=-30 [ 351.793785][ T29] audit: type=1326 audit(1748517853.154:63672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.7.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc080fde969 code=0x7ffc0000 [ 351.797339][T18347] loop7: detected capacity change from 0 to 512 [ 351.817654][ T29] audit: type=1326 audit(1748517853.154:63673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.7.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc080fde969 code=0x7ffc0000 [ 351.847369][ T29] audit: type=1326 audit(1748517853.154:63674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.7.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc080fde969 code=0x7ffc0000 [ 351.870938][ T29] audit: type=1326 audit(1748517853.154:63675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.7.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc080fde969 code=0x7ffc0000 [ 351.894617][ T29] audit: type=1326 audit(1748517853.154:63676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.7.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc080fde969 code=0x7ffc0000 [ 351.909925][T18347] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.919781][T17158] team0 (unregistering): Port device team_slave_1 removed [ 351.930921][T18347] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.950410][T17158] team0 (unregistering): Port device C removed [ 351.952763][T12638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.007521][T18347] loop7: detected capacity change from 512 to 64 [ 352.028710][T11211] EXT4-fs error (device loop7): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 352.044326][T11211] EXT4-fs error (device loop7): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 352.050268][T18176] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.066767][T18221] hsr_slave_0: entered promiscuous mode [ 352.073175][T18221] hsr_slave_1: entered promiscuous mode [ 352.114763][T17186] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.121923][T17186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.139125][T18356] loop3: detected capacity change from 0 to 128 [ 352.149361][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.156465][T17186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.168646][T18356] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 352.195241][T14663] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.244628][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 352.313687][T18176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.423607][T17158] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.450236][T18373] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4963'. [ 352.488693][T18373] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4963'. [ 352.502645][T17158] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.568477][T18176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.620547][T17158] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.713645][T17158] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.844778][T18221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.869577][T18221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.888221][T18221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.904460][T18221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.923439][T17158] bridge_slave_1: left allmulticast mode [ 352.929213][T17158] bridge_slave_1: left promiscuous mode [ 352.934975][T17158] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.952619][T17158] bridge_slave_0: left allmulticast mode [ 352.958484][T17158] bridge_slave_0: left promiscuous mode [ 352.964221][T17158] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.041197][T17158] bond0 (unregistering): Released all slaves [ 353.164460][T18435] loop3: detected capacity change from 0 to 512 [ 353.192300][T18176] veth0_vlan: entered promiscuous mode [ 353.204495][T18435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.225494][T18435] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.236612][T17158] hsr_slave_0: left promiscuous mode [ 353.244515][T17158] hsr_slave_1: left promiscuous mode [ 353.252108][T17158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.259640][T17158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.268303][T17158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.275805][T17158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.287723][T17158] veth1_macvtap: left promiscuous mode [ 353.293406][T17158] veth0_macvtap: left promiscuous mode [ 353.299514][T17158] veth1_vlan: left promiscuous mode [ 353.304948][T17158] veth0_vlan: left promiscuous mode [ 353.337324][T18435] loop3: detected capacity change from 512 to 64 [ 353.362374][T12638] EXT4-fs error (device loop3): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 353.374830][T12638] EXT4-fs error (device loop3): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 353.410381][T17158] team0 (unregistering): Port device team_slave_1 removed [ 353.423709][T17158] team0 (unregistering): Port device team_slave_0 removed [ 353.431656][T17196] smc: removing ib device syz! [ 353.448439][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.559465][T18221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.577446][T18176] veth1_vlan: entered promiscuous mode [ 353.596411][T18221] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.638399][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.645545][ T6296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.667941][T18176] veth0_macvtap: entered promiscuous mode [ 353.700762][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.707904][T17186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.739519][T18176] veth1_macvtap: entered promiscuous mode [ 353.760487][T18387] chnl_net:caif_netlink_parms(): no params data found [ 353.870220][T18176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.917074][T18176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.941228][T18387] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.948466][T18387] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.955922][T18387] bridge_slave_0: entered allmulticast mode [ 353.962744][T18387] bridge_slave_0: entered promiscuous mode [ 353.969805][T18387] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.977022][T18387] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.984295][T18387] bridge_slave_1: entered allmulticast mode [ 353.990990][T18387] bridge_slave_1: entered promiscuous mode [ 353.999923][T18176] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.008774][T18176] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.017504][T18176] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.026240][T18176] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.059178][T18387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.080488][T18387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.119343][T18387] team0: Port device team_slave_0 added [ 354.132500][T18221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.145100][T18387] team0: Port device team_slave_1 added [ 354.180190][T18387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.187284][T18387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.213311][T18387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.225124][T18387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.232186][T18387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.258281][T18387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.287425][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4928'. [ 354.333431][T18465] chnl_net:caif_netlink_parms(): no params data found [ 354.345133][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4928'. [ 354.371746][T18387] hsr_slave_0: entered promiscuous mode [ 354.382325][T18387] hsr_slave_1: entered promiscuous mode [ 354.388764][T18387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.396513][T18387] Cannot create hsr debugfs directory [ 354.500614][T18534] loop9: detected capacity change from 0 to 128 [ 354.512502][T18534] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 354.544228][T18465] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.551420][T18465] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.558974][T18465] bridge_slave_0: entered allmulticast mode [ 354.565195][T17149] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 354.565876][T18465] bridge_slave_0: entered promiscuous mode [ 354.683839][T18465] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.691115][T18465] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.700793][T18465] bridge_slave_1: entered allmulticast mode [ 354.706821][T18541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.707482][T18465] bridge_slave_1: entered promiscuous mode [ 354.739824][T18221] veth0_vlan: entered promiscuous mode [ 354.779813][T18465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.798510][T18465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.821490][ T6296] hsr_slave_0: left promiscuous mode [ 354.842614][ T6296] hsr_slave_1: left promiscuous mode [ 354.852778][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.869221][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.918187][ T6296] team0 (unregistering): Port device team_slave_1 removed [ 354.929087][ T6296] team0 (unregistering): Port device team_slave_0 removed [ 354.936417][T18553] loop9: detected capacity change from 0 to 8192 [ 354.992058][T18221] veth1_vlan: entered promiscuous mode [ 355.006992][T18562] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4984'. [ 355.037585][T18565] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4985'. [ 355.039431][T18465] team0: Port device team_slave_0 added [ 355.104016][T18465] team0: Port device team_slave_1 added [ 355.116915][T18221] veth0_macvtap: entered promiscuous mode [ 355.142881][T18387] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.166082][T18465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.173220][T18465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.199334][T18465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.238243][T18221] veth1_macvtap: entered promiscuous mode [ 355.243745][T18465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.243761][T18465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.243903][T18465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.246187][T18387] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.401093][T18221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.422766][T18387] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.471683][T18221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.475217][T18590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.492446][T18465] hsr_slave_0: entered promiscuous mode [ 355.493084][T18465] hsr_slave_1: entered promiscuous mode [ 355.493412][T18465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.493431][T18465] Cannot create hsr debugfs directory [ 355.529971][T18221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.538850][T18221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.547722][T18221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.556520][T18221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.577289][T18387] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.777894][T18610] rdma_op ffff888109200d80 conn xmit_rdma 0000000000000000 [ 355.806496][T18387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.824686][T18387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.835186][T18614] sctp: [Deprecated]: syz.4.4942 (pid 18614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.835186][T18614] Use struct sctp_sack_info instead [ 355.856148][T18387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.878146][T18387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.904542][T18619] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4994'. [ 355.994492][T18627] loop1: detected capacity change from 0 to 512 [ 356.003152][T18387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.021877][T18627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.042325][T18387] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.052686][T18627] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.052759][T17158] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.070261][T17158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.101914][T17158] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.109127][T17158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.136399][T12339] EXT4-fs error (device loop1): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 356.164364][T12339] EXT4-fs error (device loop1): ext4_lookup:1784: inode #2: comm syz-executor: '.' linked to parent dir [ 356.179235][T18465] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 356.190322][T18465] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 356.211110][T18465] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 356.230278][T18465] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 356.286464][T18387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.297855][T14490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.340069][T18465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.368641][T18465] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.382710][T17171] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.389973][T17171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.413567][T18465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.424108][T18465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.442552][T17171] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.449795][T17171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.484965][T18387] veth0_vlan: entered promiscuous mode [ 356.498444][T18387] veth1_vlan: entered promiscuous mode [ 356.519071][T18465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.534826][T17171] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.560586][T18387] veth0_macvtap: entered promiscuous mode [ 356.592332][T17171] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.630166][T18387] veth1_macvtap: entered promiscuous mode [ 356.650414][T18685] FAULT_INJECTION: forcing a failure. [ 356.650414][T18685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.651664][T18387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.663633][T18685] CPU: 0 UID: 0 PID: 18685 Comm: syz.4.5000 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 356.663670][T18685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.663689][T18685] Call Trace: [ 356.663699][T18685] [ 356.663709][T18685] __dump_stack+0x1d/0x30 [ 356.663746][T18685] dump_stack_lvl+0xe8/0x140 [ 356.663773][T18685] dump_stack+0x15/0x1b [ 356.663865][T18685] should_fail_ex+0x265/0x280 [ 356.663908][T18685] should_fail+0xb/0x20 [ 356.663996][T18685] should_fail_usercopy+0x1a/0x20 [ 356.664040][T18685] _copy_from_user+0x1c/0xb0 [ 356.664066][T18685] __sys_sendto+0x19e/0x330 [ 356.664109][T18685] __x64_sys_sendto+0x76/0x90 [ 356.664220][T18685] x64_sys_call+0x2eb6/0x2fb0 [ 356.664250][T18685] do_syscall_64+0xd2/0x200 [ 356.664284][T18685] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 356.664350][T18685] ? clear_bhb_loop+0x40/0x90 [ 356.664380][T18685] ? clear_bhb_loop+0x40/0x90 [ 356.664411][T18685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.664468][T18685] RIP: 0033:0x7f28b30be969 [ 356.664489][T18685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.664514][T18685] RSP: 002b:00007f28b1727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 356.664539][T18685] RAX: ffffffffffffffda RBX: 00007f28b32e5fa0 RCX: 00007f28b30be969 [ 356.664557][T18685] RDX: 000000000000000e RSI: 00002000000002c0 RDI: 0000000000000003 [ 356.664584][T18685] RBP: 00007f28b1727090 R08: 00002000000000c0 R09: 0000000000000014 [ 356.664609][T18685] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.664627][T18685] R13: 0000000000000000 R14: 00007f28b32e5fa0 R15: 00007ffc2fff5268 [ 356.664652][T18685] [ 356.875518][T17171] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.894644][T18387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.914490][T18387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.923372][T18387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.932299][T18387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.941177][T18387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.984889][T18695] loop9: detected capacity change from 0 to 2048 [ 357.047979][T17171] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.229931][T18465] veth0_vlan: entered promiscuous mode [ 357.266468][T17171] bridge_slave_1: left allmulticast mode [ 357.272442][T17171] bridge_slave_1: left promiscuous mode [ 357.278149][T17171] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.301093][T17171] bridge_slave_0: left allmulticast mode [ 357.306875][T17171] bridge_slave_0: left promiscuous mode [ 357.312843][T17171] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.492380][T18465] veth1_vlan: entered promiscuous mode [ 357.519310][T17171] hsr_slave_1: left promiscuous mode [ 357.525102][T17171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.532829][T17171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.575123][T17171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.582828][T17171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.594411][T17171] veth1_macvtap: left promiscuous mode [ 357.600018][T17171] veth0_macvtap: left promiscuous mode [ 357.652194][T17171] pim6reg (unregistering): left allmulticast mode [ 357.663327][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5006'. [ 357.689222][T17171] team0 (unregistering): Port device team_slave_1 removed [ 357.699097][T17171] team0 (unregistering): Port device team_slave_0 removed [ 357.711018][T18690] loop4: detected capacity change from 0 to 8192 [ 357.722623][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5006'. [ 357.771826][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 357.771844][ T29] audit: type=1326 audit(1748517859.134:63858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.9.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c859ce969 code=0x7ffc0000 [ 357.814240][T18723] netlink: 'syz.9.5008': attribute type 13 has an invalid length. [ 357.827413][ T29] audit: type=1326 audit(1748517859.164:63859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.9.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c859ce969 code=0x7ffc0000 [ 357.851222][ T29] audit: type=1326 audit(1748517859.164:63860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.9.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c859ce969 code=0x7ffc0000 [ 357.875014][ T29] audit: type=1326 audit(1748517859.164:63861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.9.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c859ce969 code=0x7ffc0000 [ 357.898629][ T29] audit: type=1326 audit(1748517859.164:63862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.9.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c859ce969 code=0x7ffc0000 [ 357.922246][ T29] audit: type=1326 audit(1748517859.164:63863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.9.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c859ce969 code=0x7ffc0000 [ 357.945850][ T29] audit: type=1326 audit(1748517859.164:63864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.9.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6c859ce969 code=0x7ffc0000 [ 357.969567][ T29] audit: type=1326 audit(1748517859.164:63865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.9.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c859ce969 code=0x7ffc0000 [ 357.993317][ T29] audit: type=1326 audit(1748517859.164:63866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.9.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6c859ce969 code=0x7ffc0000 [ 358.016907][ T29] audit: type=1326 audit(1748517859.174:63867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18727 comm="syz.9.5008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6c85a01225 code=0x7ffc0000 [ 358.041871][T18690] loop4: p1 p3 p4 [ 358.045875][T18690] loop4: p1 size 8390912 extends beyond EOD, truncated [ 358.057044][T18690] loop4: p3 size 589824 extends beyond EOD, truncated [ 358.086533][T18723] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.093784][T18723] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.104384][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 358.104566][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 358.117403][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 358.138492][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5009'. [ 358.167665][T18723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.178027][T18723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.211586][T18723] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.220608][T18723] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.229795][T18723] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.238936][T18723] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.255417][T18465] veth0_macvtap: entered promiscuous mode [ 358.273126][T18465] veth1_macvtap: entered promiscuous mode [ 358.338873][T18465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.359413][T18680] chnl_net:caif_netlink_parms(): no params data found [ 358.378553][T18465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.443374][T18465] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.452279][T18465] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.461122][T18465] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.470085][T18465] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.527861][T18680] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.535060][T18680] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.558787][T18680] bridge_slave_0: entered allmulticast mode [ 358.578958][T18680] bridge_slave_0: entered promiscuous mode [ 358.590920][T18680] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.598229][T18680] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.606965][T18680] bridge_slave_1: entered allmulticast mode [ 358.615424][T18680] bridge_slave_1: entered promiscuous mode [ 358.650791][T18774] loop4: detected capacity change from 0 to 512 [ 358.664997][T18680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.679793][T18774] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.686332][T18774] EXT4-fs: inline encryption not supported [ 358.697779][T18680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.706366][T18774] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 358.715929][T18774] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 358.726051][T18774] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 358.746738][T18774] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c02c, mo2=0002] [ 358.763271][T18680] team0: Port device team_slave_0 added [ 358.780295][T18680] team0: Port device team_slave_1 added [ 358.786055][T18774] System zones: 0-2, 18-18, 34-34 [ 358.792893][T18774] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.5012: couldn't read orphan inode 15 (err -116) [ 358.818738][T18774] EXT4-fs (loop4): Remounting filesystem read-only [ 358.832998][T18774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.851640][T18680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.858689][T18680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.884826][T18680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.898446][T18774] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.920357][T18792] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4977'. [ 358.968181][T18792] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4977'. [ 358.968965][T18803] loop9: detected capacity change from 0 to 2048 [ 358.978979][T18680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.990724][T18680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.016780][T18680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.069421][T18680] hsr_slave_0: entered promiscuous mode [ 359.077671][T18680] hsr_slave_1: entered promiscuous mode [ 359.086805][T18680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.097008][T18680] Cannot create hsr debugfs directory [ 359.249219][T18823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.507526][T18680] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 359.530748][T18680] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 359.564053][T18680] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 359.579606][T18680] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 359.680656][T18840] loop4: detected capacity change from 0 to 8192 [ 359.696162][T18857] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5023'. [ 359.702408][T18680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.749438][T18680] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.769460][T17207] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.776764][T17207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.810278][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5024'. [ 359.822525][T17207] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.829749][T17207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.066100][T18680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.322464][T18680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.544379][T18900] ================================================================== [ 360.552524][T18900] BUG: KCSAN: data-race in css_set_move_task / memcpy_and_pad [ 360.560038][T18900] [ 360.562402][T18900] write to 0xffff88810a2d8958 of 8 bytes by task 18899 on cpu 1: [ 360.570162][T18900] css_set_move_task+0x212/0x430 [ 360.575140][T18900] cgroup_exit+0x6b/0x350 [ 360.579499][T18900] do_exit+0x5f5/0x16f0 [ 360.583706][T18900] do_group_exit+0x139/0x140 [ 360.588341][T18900] __x64_sys_exit_group+0x1f/0x20 [ 360.593416][T18900] x64_sys_call+0x2fa4/0x2fb0 [ 360.598130][T18900] do_syscall_64+0xd2/0x200 [ 360.602658][T18900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.608674][T18900] [ 360.611008][T18900] read to 0xffff88810a2d8000 of 3200 bytes by task 18900 on cpu 0: [ 360.618951][T18900] memcpy_and_pad+0x48/0x80 [ 360.623475][T18900] arch_dup_task_struct+0x2c/0x40 [ 360.628511][T18900] dup_task_struct+0x83/0x6a0 [ 360.633205][T18900] copy_process+0x399/0x1fe0 [ 360.637813][T18900] kernel_clone+0x16c/0x5b0 [ 360.642339][T18900] __x64_sys_clone+0xe6/0x120 [ 360.647032][T18900] x64_sys_call+0x2c59/0x2fb0 [ 360.651726][T18900] do_syscall_64+0xd2/0x200 [ 360.656245][T18900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.662155][T18900] [ 360.664481][T18900] Reported by Kernel Concurrency Sanitizer on: [ 360.670729][T18900] CPU: 0 UID: 0 PID: 18900 Comm: dhcpcd-run-hook Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 360.683336][T18900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.693467][T18900] ================================================================== [ 360.715244][T18680] veth0_vlan: entered promiscuous mode [ 360.730943][T18904] rdma_op ffff88811a2be580 conn xmit_rdma 0000000000000000 [ 360.751022][T18680] veth1_vlan: entered promiscuous mode [ 360.774462][T18680] veth0_macvtap: entered promiscuous mode [ 360.791798][T18680] veth1_macvtap: entered promiscuous mode [ 360.804513][T18680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.819667][T18680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.833841][T18680] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.842699][T18680] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.851459][T18680] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.860263][T18680] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0