last executing test programs: 1m33.547995505s ago: executing program 0 (id=1553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000040000200000038000480200001800a00010071756f7461000400100002800c000140000000000000008314000180090001007866726d00000000040002800900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 1m33.519433926s ago: executing program 0 (id=1554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x7}, {0x2, 0x4}, {0xffffffff, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1m33.490339326s ago: executing program 0 (id=1555): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) fcntl$dupfd(r0, 0x406, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000001012a375a7430000000002000000020000000000000000000000000000010500000010000000010000000000000e01000000000000000061c8be51fff500cfbf7fbd3af42131d9d97835aea94a12b65291a6def31b59d4d417a16519bc28417d8f7e56bd85"], 0x0, 0x53}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x3, 0x4}, 0x48) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1ddb}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000540)='cpu&00\t||') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f0000002200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1dee}}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x30, 0x2e, 0x2e]}}, 0x0, 0x45, 0x0, 0x1, 0x6}, 0x28) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r6) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c872e100e8ffffff850000000700000002c70000004002002d37f0fffcffffff"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x3, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x2, 0xa}, {0x0, 0x2, 0x6, 0x6}, {0x4, 0x5, 0x9, 0x5}, {0x5, 0x1, 0x10, 0x1}, {0x2, 0x4, 0xd, 0xc}, {0x4, 0x1, 0xb, 0x4}, {0x1, 0x2, 0x10, 0xb}, {0x1, 0x5, 0xd, 0xc}, {0x3, 0x2, 0x0, 0xb}], 0x10, 0x3}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) unshare(0x2a020480) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@map=r4, 0x31, 0x1, 0x8, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0], 0x0}, 0x40) r9 = open(0x0, 0x66842, 0x21) pwritev2(r9, 0x0, 0x0, 0x7abff, 0xb6, 0x3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@ifindex, r7, 0x2f, 0x34, 0x4, @void, @void, @void, @value, r8}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) 1m33.117249672s ago: executing program 0 (id=1561): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ff90000000000000100000850000007b00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, 0x701}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) bind$rxrpc(r3, &(0x7f0000000540)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @empty, 0x1c0}}, 0x24) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@nomblk_io_submit}, {@nombcache}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1c71c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1m32.821117076s ago: executing program 0 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21) 1m32.552560031s ago: executing program 0 (id=1568): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') lstat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000001900)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, 0x0, 0x102, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xfd}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1f}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c000}, 0x22000001) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', r9, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x4, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r13) 1m32.551888941s ago: executing program 32 (id=1568): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') lstat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000001900)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, 0x0, 0x102, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xfd}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1f}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c000}, 0x22000001) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', r9, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x4, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r13) 2.526396381s ago: executing program 3 (id=3232): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000440)={0xb, 0x29, 0x2, {0x4}}, 0xb) fallocate(r0, 0x11, 0xffc, 0x6d8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000240)='syzkaller\x00', 0xffffdff2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) syz_clone(0x10000, &(0x7f0000000480)="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", 0x1000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="fcc988c490203edfe00b0dc5dd7cdb6dad3119ab02cc2b265be27e85bbef1eb006b9d6bfa86f6559cd6f1d9c4aa10d4ba3869ed99979aec5976547c9bb45ea45122162e80150cb8183bffab8f3e92bf9b0d0081d564d482602865569315c2b211af64899be75a761215de7cf5b02956497cd603be40895991c36f4daf24d6760ba4673de33c6675883a2c641661f6a5c7796fa4b86e1a98436caa05b467a2f31e7911c066a66f8d93ddc7deb590129eb3f266bb67314052d83cf7a6d24b5df59b60e440dda3e9215f1b39b2c") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xf) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r6 = syz_open_procfs(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001800010028bd7000fcdbdf251d01020005000d00a0"], 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x4008000) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f00000000c0)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000, {r6}}, 0x20) cachestat(r6, &(0x7f0000001480)={0x8, 0x658}, &(0x7f00000014c0), 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000000000000000000007110cc34dbe1ada900000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB="14000000250004b64609a5be292dd4bd7d2a1be4d202b16b2bf879e1d27000ffdbdf250000002134cb42c0f5e7220fae707a8d5c1491edfaf7"], 0x14}}, 0x4048890) 2.364714044s ago: executing program 3 (id=3233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "040000000048bd00", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 2.319112614s ago: executing program 3 (id=3234): lseek(0xffffffffffffffff, 0x7d, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=@newchain={0x24, 0x64, 0x20, 0x6, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0x2, 0x5}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0xe, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 2.200510826s ago: executing program 3 (id=3235): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000389000/0x3000)=nil, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1bf667d38ac73c0000000000cc59"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x18) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x3000) fallocate(r7, 0x0, 0x0, 0x1000f4) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES64=r1, @ANYBLOB="ca9cc651a98c7f4d6f6bff1dec19afde5bb1b799d186a1458edb06980227fa813865a0ff34201bf3717ff7c5798ecc59d6956d17833d1eb3bdc4d29764ff602760d1897e2dfc1b861fe91a58dc84e29f4e293bfa75813ae7176ea680535afc90936f9e", @ANYRESHEX=r6, @ANYRES32=r5, @ANYBLOB="718f5a0713bd735ad52ceb01636f3f93dca1a7459143e6bab136eb49506891bef60de5956a550db11358f0c8c031efbde70c07497d76798582e165acd67ddb18a8d91c5929c1741470f63d8a3cb741a9fb20de95aeb10e21ac2d4cfd5d8b9a35fa622e09037e47aba9848e2b1cc9937db31b33f7b320448f3597c6011b1e14527c07f86c2c7bbea5fc820c5e58a64fe6611c3834f80accf12e8a4030903f98a7d078064f19b12936869871f3fc378906105bf65bc4083a73918f8380d1f956495c1fdd22d903b7", @ANYBLOB="31fde66478c412011987c4b052d67e727be82fea5069aee3b503adab3ecfa7d5e5f377fd839f00fed7022aa5228490d58b01385ef15b4601411b96896b6131deaa9db3ab56d633d67d80d4d8a39a911d036bb60e8682fb17bc7cdf1b5a6d63216d0a6b27152965782cea1b2fb33195f4c05ac328afacdae0ba130759ece79804965917af7809d0ffd59072171f90779fbdb8443da20e14ffdf2c66587870cd46f974c85e3533b3ca918b4643c8411537151742850f1a526988aa8afebd8a24fbd0e4a3cf139537ae5c0db2ca87b7f67a8d6f099c0bed499e3fe90474f5ff6b2f62f5577b429d03f5bfc7841f505e", @ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0xb, @mcast2}, {0xa, 0xfffd, 0xb, @mcast1}}}, 0x48) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x88381) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x100}, 0x94) 1.751050863s ago: executing program 4 (id=3242): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) close_range(r0, r1, 0x0) 1.725764623s ago: executing program 4 (id=3245): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) process_vm_readv(0x0, &(0x7f00000027c0), 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x1}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x80166a87e08db6a7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000000000000001c0000001800058014000205000000683000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='dlm_recv\x00', r4, 0x0, 0x1}, 0x18) r8 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'ip6erspan0\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x4, 0x1, [0x7]}}) 1.707778854s ago: executing program 1 (id=3246): r0 = socket$caif_stream(0x25, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) 1.683124854s ago: executing program 1 (id=3249): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0xc4dc]}}, 0x5c) (fail_nth: 3) 1.393227479s ago: executing program 1 (id=3251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffee0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000002c0)={@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, {&(0x7f0000000000)=""/205, 0xcd}, &(0x7f0000000100), 0x28}, 0xa0) 1.392297909s ago: executing program 3 (id=3252): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/197, 0xc5}], 0x1, 0x73, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffebf}, &(0x7f0000000200)={0x0}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c03f8c71de35f0fe59248ad3e6989ca825be2d1bf746719a10d0a71460f8aa078745075298ced9b5070d5f6056321163019a49351c254613735f6501358943799dbb0d54c4c2c30ec53188fb84c57f8edd6e8236a8b9c2d52bce33e4a615a5495c8f93"], 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="08000200"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.358605639s ago: executing program 5 (id=3254): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100), 0x4) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001980)='xprtrdma_post_send\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x65f5, 0x1, 0xff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f00000001c0)=r5}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001700), 0x5, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000001900)=ANY=[@ANYBLOB="85100000feffffff180000000000000000000000ffff0000182a0000", @ANYRES32=r2, @ANYBLOB="00000000000026020435decfa63a8a63720836ce000f8865888e0000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000014c0)='GPL\x00', 0x839, 0xfd, &(0x7f0000001600)=""/253, 0x40f00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0x3, 0xfffffff6, 0x9f}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001740)=[r7, r7, r1, r2, r2, r2, r1], &(0x7f0000001780)=[{0x3, 0x3, 0x4, 0x6}, {0x4, 0x4, 0xd, 0x9}, {0x0, 0x2, 0x4, 0x4}, {0x2, 0x1, 0x6, 0x2}, {0x1, 0x4, 0x4, 0x1}, {0x2, 0x2, 0x2, 0x8}], 0x10, 0x5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) sendfile(r1, r1, 0x0, 0x800000009) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r0, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfdef) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x7fe, 0x1, 0x103, 0xd, 0x8001, 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.32845784s ago: executing program 1 (id=3255): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@grpquota}, {@nouid32}, {@nodelalloc}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x625, &(0x7f0000000c80)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x800) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1.267519571s ago: executing program 2 (id=3258): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000005b1f8f00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x28004004) 1.247795481s ago: executing program 2 (id=3259): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x1de0, 0x0) 1.158150593s ago: executing program 5 (id=3260): r0 = socket$caif_stream(0x25, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) 1.154999182s ago: executing program 2 (id=3261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018180000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x3c, &(0x7f0000000240)=""/60, 0x41100, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x9, 0x9, 0xeb1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r0, r0, r0], &(0x7f0000000540)=[{0x4, 0x1, 0xa, 0xb}, {0x2, 0x5, 0xf, 0x9}, {0x2, 0x1, 0xf, 0x1}, {0x4, 0x4, 0x10, 0x4}, {0x2, 0x4, 0x6, 0x4}, {0x1, 0x4, 0x4, 0xa}, {0x1, 0x5, 0x0, 0x8}, {0x1, 0x1, 0xe, 0x6}], 0x10, 0xbef5}, 0x94) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5, @ANYBLOB="81853fab46680e8a80a8ef4a2c4afcc05a0cecf4417618dec3d73195ff1c34b1142ae4d3d6e58540811a4a81c3744195fd309c53bf69cf8de23fa6285e3be91fb099141b00ef3cc666b4480963ee3da8fa072f5f5509b64ece69f1bbda6c558efa8025c915563b4de6e23aae3743fe2da74baeecaaf2b77d2db54100b46c2716ce2e9864ebee5348428aed43482490e861ff0cbd0e4280a5b1b87da14766fe"], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, r5, &(0x7f0000000700)={0x75a7, 0x9, 0x0, 0x4}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0xfffffff9, @private1, 0xa2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r9, 0x9, 0xf39, 0x7, 0x6, 0x1}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000680)={r9, 0x4}, &(0x7f00000006c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r5, @ANYRES8=r9, @ANYRESOCT=r1, @ANYRES64=r10, @ANYRES32=r4, @ANYBLOB="820626dbb77153c85c59b2"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='devfreq_monitor\x00', r11, 0x0, 0xfffffffffffffffe}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2000000000000178, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r12 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbf9ffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r13, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r13, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'lo\x00'}) 873.989267ms ago: executing program 1 (id=3262): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) syz_emit_ethernet(0x82, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ae1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c000364010184000000000000000000000000ac1414aa00000000ac1414bb000000000000000000000000ac14140000000000000000000000000000008b08d08742793636403bd70a59c5d46f49dfb08be30cefd00ab2ace28473e7fcf79c5fd016fed73650814fd2dbdc66d23a32ee16afc70a61e06efe"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x1316575}, 0x3, {0x1}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180), r6) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x4, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x0, 0x0, 0xf}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r9, &(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='kfree\x00', r11, 0x0, 0x3}, 0x18) 872.291907ms ago: executing program 5 (id=3272): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@grpquota}, {@nouid32}, {@nodelalloc}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x625, &(0x7f0000000c80)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x800) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 859.324967ms ago: executing program 4 (id=3263): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000389000/0x3000)=nil, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1bf667d38ac73c0000000000cc59"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x18) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x3000) fallocate(r7, 0x0, 0x0, 0x1000f4) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES64=r1, @ANYBLOB="ca9cc651a98c7f4d6f6bff1dec19afde5bb1b799d186a1458edb06980227fa813865a0ff34201bf3717ff7c5798ecc59d6956d17833d1eb3bdc4d29764ff602760d1897e2dfc1b861fe91a58dc84e29f4e293bfa75813ae7176ea680535afc90936f9e", @ANYRESHEX=r6, @ANYRES32=r5, @ANYBLOB="718f5a0713bd735ad52ceb01636f3f93dca1a7459143e6bab136eb49506891bef60de5956a550db11358f0c8c031efbde70c07497d76798582e165acd67ddb18a8d91c5929c1741470f63d8a3cb741a9fb20de95aeb10e21ac2d4cfd5d8b9a35fa622e09037e47aba9848e2b1cc9937db31b33f7b320448f3597c6011b1e14527c07f86c2c7bbea5fc820c5e58a64fe6611c3834f80accf12e8a4030903f98a7d078064f19b12936869871f3fc378906105bf65bc4083a73918f8380d1f956495c1fdd22d903b7", @ANYBLOB="31fde66478c412011987c4b052d67e727be82fea5069aee3b503adab3ecfa7d5e5f377fd839f00fed7022aa5228490d58b01385ef15b4601411b96896b6131deaa9db3ab56d633d67d80d4d8a39a911d036bb60e8682fb17bc7cdf1b5a6d63216d0a6b27152965782cea1b2fb33195f4c05ac328afacdae0ba130759ece79804965917af7809d0ffd59072171f90779fbdb8443da20e14ffdf2c66587870cd46f974c85e3533b3ca918b4643c8411537151742850f1a526988aa8afebd8a24fbd0e4a3cf139537ae5c0db2ca87b7f67a8d6f099c0bed499e3fe90474f5ff6b2f62f5577b429d03f5bfc7841f505ec34be65a", @ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0xb, @mcast2}, {0xa, 0xfffd, 0xb, @mcast1}}}, 0x48) syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x88381) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x100}, 0x94) 438.161024ms ago: executing program 5 (id=3264): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r0, r1, 0x0) 418.864764ms ago: executing program 5 (id=3265): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000000000000050000000100000002030000", @ANYRES32, @ANYBLOB="2400422f6fb0727dea4f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000050000000600"/28], 0x50) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000300)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x7800, 0xd, 0xb8c, {{0x1b, 0x4, 0x2, 0x28, 0x6c, 0x64, 0x0, 0x3, 0x2, 0x0, @local, @remote, {[@end, @generic={0x44, 0x3, "83"}, @timestamp_prespec={0x44, 0x14, 0x2d, 0x3, 0x1, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}]}, @timestamp_addr={0x44, 0xc, 0x74, 0x1, 0xe, [{@multicast2, 0x3ff}]}, @cipso={0x86, 0x33, 0x0, [{0x2, 0x7, '1xwy/'}, {0x6, 0xb, "ac7f521c4657eb26d7"}, {0x1, 0xc, "81a36610e61c2b75c533"}, {0x5, 0xf, "68d8b9992e9a2fa09a73243bf1"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x7, 0x40, 0x2, @mcast1, @private1, 0x700, 0x10, 0x0, 0x996}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4070000", @ANYRES16=r2, @ANYBLOB="000828bd7000fedbdf250e0000007000018014000200697036746e6c300000000000000000001400020064766d72703000000000000000000000140002007369743000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="14000200736974300000000000000000000000001400020064766d727031000000000000000000007c0001800800030001000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f626f6e640000001400020076657468305f766972745f77696669001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0x7a4}, 0x1, 0x0, 0x0, 0x88000}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x17, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x2, 0x0, 0x1, 0x6, 0x9, 0x4, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r8, 0x4) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x40000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r9, 0x80585414, &(0x7f0000000e40)) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) r13 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r13, 0x4c0a, &(0x7f0000000140)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90bf8b1c5512406c7f0000000000000000000000000000000000000000000009", [0x2, 0x40000000000000]}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x7, @empty, 0x10000}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "061000", 0x10, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x8, 0x100, @val=0x80}}}}}}}}, 0x0) 277.284186ms ago: executing program 5 (id=3266): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c62) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000940)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001c80)=""/4104, 0x1008}, 0x40002002) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) set_robust_list(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) 276.074506ms ago: executing program 2 (id=3267): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000700000000000000a065770bfc3cd795"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1ddb}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='cpu<00\t||') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00a78774aca25f000000000000000000000002000000000000", @ANYRES32, @ANYBLOB="5b0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000200"/28], 0x50) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="184700000500000000000000000000009500", @ANYRES32, @ANYBLOB='\x00'/11], &(0x7f0000000300)='GPL\x00', 0x52cc, 0x13, &(0x7f0000000400)=""/19, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[r6, r0, r7], &(0x7f0000000c00)=[{0x5, 0x1, 0x9, 0x6}], 0x10, 0x624}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000011000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000020000000100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='rxrpc_timer\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@noinit_itable}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x46f, &(0x7f0000000580)="$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") r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000a52000/0x4000)=nil) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 256.459656ms ago: executing program 4 (id=3268): sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x4000081) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x10, 0x20}, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x200}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x58, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x2, 0x8, 0xac, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000240)={@private=0xa010102, @loopback, @multicast1}, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 190.222227ms ago: executing program 2 (id=3269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xfffffffffffffeb0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x8001}, 0x18) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0xb, 0x6, 0xb, 0x40, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000, 0x8, 0x0, 0xc}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000021713947803c55c76127ea0000000000000018110000587f5ff81287a1c38ec3dedc787100543e948433f0e9e46eb86fb5abe3436fb78b43a736ec32a3420d9ab69663e24e9b0f445fdd6f65c1cc9d5093b2d36441a90681cc6fad7bae2831e6f1564c9ffb7caf6e6f9fa5fbd05d4f1c1b8d4eb45991ca33af8869372e68aecc030c8c43e8", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r7, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r8 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) 178.995818ms ago: executing program 4 (id=3270): lseek(0xffffffffffffffff, 0x7d, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=@newchain={0x238, 0x64, 0x20, 0x6, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0x2, 0x5}, {0xffe0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xb}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x7, 0x2, 0x9, 0x94b}, {0x2, 0x8, 0x9, 0x7}, {0x4ea, 0x3, 0x2, 0x200}, {0x8001, 0x6, 0x4, 0x2}]}}, @TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1a4, 0x2, [@TCA_U32_ACT={0x1a0, 0x7, [@m_simple={0x19c, 0xc, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x2, 0x2, 0xffffff5e}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x9, 0x2, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd5b, 0x9, 0xfffffffffffffffc, 0x7, 0xe05}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x5, 0xa0e7, 0x800000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x80000000, 0x20000000, 0x7ff, 0x400}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x6, 0x4, 0x10, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x3, 0xa0a041ecacdb34e7, 0x1, 0x555}}, @TCA_DEF_DATA={0xa, 0x3, 'kfree\x00'}]}, {0xba, 0x6, "4418d05298b541fc5c466608c7a131d7474412ec2ef21ba67a854bb539b2ed7c330ec83c8c1b5a65486880f37dd21afd5705b398c21e383ac922cf3f26d0a9fd1f2343072c7fe9afca99d4d909642627f3ab5e3d042633158a3da8d2f29d43c78844c89c4da52528e734cbcca1638c8c6c0ba342b11e6fef23e9968bd51a84e4c36f10c864e78ac96efcb0e92249d959f2590a883214a3099461fa26e492852fcccab51aef51eaa810f6fa3194efe3da61ce4d438ada"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0xe, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 74.283689ms ago: executing program 2 (id=3271): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100), 0x4) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001980)='xprtrdma_post_send\x00', r5}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x65f5, 0x1, 0xff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f00000001c0)=r5}, 0x20) r7 = syz_open_dev$vcsn(&(0x7f0000001700), 0x5, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000001900)=ANY=[@ANYBLOB="85100000feffffff180000000000000000000000ffff0000182a0000", @ANYRES32=r2, @ANYBLOB="00000000000026020435decfa63a8a63720836ce000f8865888e0000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000014c0)='GPL\x00', 0x839, 0xfd, &(0x7f0000001600)=""/253, 0x40f00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0x3, 0xfffffff6, 0x9f}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001740)=[r7, r7, r1, r2, r2, r2, r1], &(0x7f0000001780)=[{0x3, 0x3, 0x4, 0x6}, {0x4, 0x4, 0xd, 0x9}, {0x0, 0x2, 0x4, 0x4}, {0x2, 0x1, 0x6, 0x2}, {0x1, 0x4, 0x4, 0x1}, {0x2, 0x2, 0x2, 0x8}], 0x10, 0x5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) sendfile(r1, r1, 0x0, 0x800000009) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r0, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfdef) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x7fe, 0x1, 0x103, 0xd, 0x8001, 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 61.202829ms ago: executing program 4 (id=3273): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.34535ms ago: executing program 1 (id=3274): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 0s ago: executing program 3 (id=3275): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, 0x0, 0x13f, 0x9}}, 0x20) kernel console output (not intermixed with test programs): syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495f3de929 code=0x7ffc0000 [ 174.445646][T17383] loop4: detected capacity change from 0 to 512 [ 174.464858][T17383] EXT4-fs: Ignoring removed nobh option [ 174.471241][ T29] audit: type=1326 audit(2000000054.400:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.2.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f495f3de929 code=0x7ffc0000 [ 174.471563][T17383] EXT4-fs: journaled quota format not specified [ 174.514449][T17399] loop1: detected capacity change from 0 to 256 [ 174.532371][T17399] FAT-fs (loop1): Directory bread(block 64) failed [ 174.539176][T17399] FAT-fs (loop1): Directory bread(block 65) failed [ 174.564559][T17399] FAT-fs (loop1): Directory bread(block 66) failed [ 174.571891][T17399] FAT-fs (loop1): Directory bread(block 67) failed [ 174.578619][T17399] FAT-fs (loop1): Directory bread(block 68) failed [ 174.585878][T17399] FAT-fs (loop1): Directory bread(block 69) failed [ 174.601037][T17405] loop4: detected capacity change from 0 to 512 [ 174.610227][T17405] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2568: iget: bad i_size value: 38620345925642 [ 174.620232][T17408] loop2: detected capacity change from 0 to 256 [ 174.630692][T17405] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2568: couldn't read orphan inode 15 (err -117) [ 174.631349][T17399] FAT-fs (loop1): Directory bread(block 70) failed [ 174.649530][T17399] FAT-fs (loop1): Directory bread(block 71) failed [ 174.656228][T17399] FAT-fs (loop1): Directory bread(block 72) failed [ 174.663676][T17399] FAT-fs (loop1): Directory bread(block 73) failed [ 174.666782][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2569'. [ 174.679763][T17408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2569'. [ 174.691912][T17405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.713125][T17399] syz.1.2566: attempt to access beyond end of device [ 174.713125][T17399] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 174.766966][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.878078][T12356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.898529][T17421] loop4: detected capacity change from 0 to 1024 [ 174.923885][T17421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 174.952429][T17421] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.997677][T17430] loop5: detected capacity change from 0 to 512 [ 175.014734][T17421] lo speed is unknown, defaulting to 1000 [ 175.024813][T17430] EXT4-fs: Ignoring removed nobh option [ 175.036249][T17430] EXT4-fs: journaled quota format not specified [ 175.053434][T17435] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 175.072911][T17435] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2570'. [ 175.220976][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.433853][T17470] loop4: detected capacity change from 0 to 512 [ 175.451734][T17470] EXT4-fs: Ignoring removed nobh option [ 175.459009][T17470] EXT4-fs: journaled quota format not specified [ 175.708368][T17482] loop1: detected capacity change from 0 to 4096 [ 175.845792][T17482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.306488][T17500] loop5: detected capacity change from 0 to 512 [ 176.334982][T17500] EXT4-fs: Ignoring removed nobh option [ 176.357782][T17500] EXT4-fs: journaled quota format not specified [ 176.437577][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.498095][T17507] loop1: detected capacity change from 0 to 512 [ 176.511804][T17507] EXT4-fs: Ignoring removed nobh option [ 176.523493][T17514] loop4: detected capacity change from 0 to 512 [ 176.530596][T17507] EXT4-fs: journaled quota format not specified [ 176.538814][T17514] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2589: iget: bad i_size value: 38620345925642 [ 176.553087][T17514] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2589: couldn't read orphan inode 15 (err -117) [ 176.564126][T17511] loop5: detected capacity change from 0 to 512 [ 176.568073][T17514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.575322][T17511] EXT4-fs: Ignoring removed nobh option [ 176.594527][T17511] EXT4-fs: journaled quota format not specified [ 176.635887][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.707336][T17527] loop1: detected capacity change from 0 to 512 [ 176.714488][T17527] EXT4-fs: Ignoring removed nobh option [ 176.724811][T17527] EXT4-fs: journaled quota format not specified [ 176.743687][T17543] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2595'. [ 176.743710][T17535] loop4: detected capacity change from 0 to 512 [ 176.746176][T17535] EXT4-fs: Ignoring removed nobh option [ 176.773473][T17533] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2595'. [ 176.781080][T17535] EXT4-fs: journaled quota format not specified [ 176.847058][T17555] loop4: detected capacity change from 0 to 256 [ 176.875644][T17555] FAT-fs (loop4): Directory bread(block 64) failed [ 176.887227][T17555] FAT-fs (loop4): Directory bread(block 65) failed [ 176.901210][T17555] FAT-fs (loop4): Directory bread(block 66) failed [ 176.912096][T17555] FAT-fs (loop4): Directory bread(block 67) failed [ 176.924259][T17553] loop1: detected capacity change from 0 to 512 [ 176.928961][T17555] FAT-fs (loop4): Directory bread(block 68) failed [ 176.931179][T17553] EXT4-fs: Ignoring removed nobh option [ 176.942833][T17555] FAT-fs (loop4): Directory bread(block 69) failed [ 176.943566][T17553] EXT4-fs: journaled quota format not specified [ 176.956253][T17555] FAT-fs (loop4): Directory bread(block 70) failed [ 176.968413][T17555] FAT-fs (loop4): Directory bread(block 71) failed [ 176.981046][T17555] FAT-fs (loop4): Directory bread(block 72) failed [ 176.998002][T17555] FAT-fs (loop4): Directory bread(block 73) failed [ 177.024716][T17555] syz.4.2602: attempt to access beyond end of device [ 177.024716][T17555] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 177.135944][T17558] loop3: detected capacity change from 0 to 1024 [ 177.147753][T17577] loop4: detected capacity change from 0 to 1024 [ 177.165484][T17558] EXT4-fs (loop3): invalid first ino: 9 [ 177.215759][T17577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 177.231492][T17577] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.295270][T17592] siw: device registration error -23 [ 177.308857][T17577] lo speed is unknown, defaulting to 1000 [ 177.341658][T17597] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 177.363769][T17597] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2607'. [ 177.579008][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.679095][T17623] loop2: detected capacity change from 0 to 1024 [ 177.695761][T17623] EXT4-fs (loop2): invalid first ino: 9 [ 177.742215][T17601] siw: device registration error -23 [ 177.757616][T17633] loop4: detected capacity change from 0 to 512 [ 177.764929][T17633] EXT4-fs: Ignoring removed nobh option [ 177.770849][T17633] EXT4-fs: journaled quota format not specified [ 177.965102][T17659] loop4: detected capacity change from 0 to 256 [ 178.080468][T17659] FAT-fs (loop4): Directory bread(block 64) failed [ 178.087308][T17659] FAT-fs (loop4): Directory bread(block 65) failed [ 178.099212][T17669] loop5: detected capacity change from 0 to 512 [ 178.106291][T17669] EXT4-fs: Ignoring removed nobh option [ 178.111993][T17659] FAT-fs (loop4): Directory bread(block 66) failed [ 178.112311][T17669] EXT4-fs: journaled quota format not specified [ 178.118598][T17659] FAT-fs (loop4): Directory bread(block 67) failed [ 178.118647][T17659] FAT-fs (loop4): Directory bread(block 68) failed [ 178.138784][T17671] loop3: detected capacity change from 0 to 1024 [ 178.146171][T17671] EXT4-fs (loop3): invalid first ino: 9 [ 178.147497][T17675] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2629'. [ 178.151972][T17659] FAT-fs (loop4): Directory bread(block 69) failed [ 178.175662][T17659] FAT-fs (loop4): Directory bread(block 70) failed [ 178.181724][T17666] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2629'. [ 178.193818][T17655] siw: device registration error -23 [ 178.240483][T17659] FAT-fs (loop4): Directory bread(block 71) failed [ 178.255420][T17659] FAT-fs (loop4): Directory bread(block 72) failed [ 178.262548][T17659] FAT-fs (loop4): Directory bread(block 73) failed [ 178.329037][T17691] loop1: detected capacity change from 0 to 1024 [ 178.338261][T17659] syz.4.2626: attempt to access beyond end of device [ 178.338261][T17659] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 178.362160][T17691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 178.374541][T17691] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.408926][T17695] loop3: detected capacity change from 0 to 512 [ 178.416122][T17695] EXT4-fs: Ignoring removed nobh option [ 178.423673][T17691] lo speed is unknown, defaulting to 1000 [ 178.446971][T17695] EXT4-fs: journaled quota format not specified [ 178.493841][T17706] loop5: detected capacity change from 0 to 512 [ 178.502181][T17706] EXT4-fs: Ignoring removed nobh option [ 178.509640][T17706] EXT4-fs: journaled quota format not specified [ 178.533665][T17691] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 178.555101][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 178.638173][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 178.638189][ T29] audit: type=1326 audit(2000000058.650:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17751 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3adf8ce929 code=0x7ffc0000 [ 178.738616][T17766] loop1: detected capacity change from 0 to 512 [ 178.748611][T17768] loop4: detected capacity change from 0 to 1024 [ 178.751442][ T29] audit: type=1326 audit(2000000058.690:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17751 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3adf8ce929 code=0x7ffc0000 [ 178.778662][ T29] audit: type=1326 audit(2000000058.690:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17751 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f3adf8ce929 code=0x7ffc0000 [ 178.781406][T17766] EXT4-fs: Ignoring removed nobh option [ 178.802221][ T29] audit: type=1326 audit(2000000058.690:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17751 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3adf8ce929 code=0x7ffc0000 [ 178.802261][ T29] audit: type=1326 audit(2000000058.690:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17751 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3adf8ce929 code=0x7ffc0000 [ 178.858038][T17766] EXT4-fs: journaled quota format not specified [ 178.865727][T17768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 178.878407][T17775] loop2: detected capacity change from 0 to 512 [ 178.901631][T17775] EXT4-fs: Ignoring removed nobh option [ 178.917651][T17775] EXT4-fs: journaled quota format not specified [ 178.938352][T17768] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.998230][T17768] lo speed is unknown, defaulting to 1000 [ 179.055901][T17810] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 179.106520][T17814] loop1: detected capacity change from 0 to 512 [ 179.123802][T17823] loop3: detected capacity change from 0 to 256 [ 179.133039][T17814] EXT4-fs: Ignoring removed nobh option [ 179.141880][T17814] EXT4-fs: journaled quota format not specified [ 179.167955][T17836] loop2: detected capacity change from 0 to 512 [ 179.188299][T17836] EXT4-fs: Ignoring removed nobh option [ 179.198740][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 179.209274][T17836] EXT4-fs: journaled quota format not specified [ 179.280568][T17855] loop1: detected capacity change from 0 to 512 [ 179.303100][T17855] EXT4-fs: Ignoring removed nobh option [ 179.309003][T17855] EXT4-fs: journaled quota format not specified [ 179.362482][T17866] FAULT_INJECTION: forcing a failure. [ 179.362482][T17866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.375768][T17866] CPU: 0 UID: 0 PID: 17866 Comm: syz.4.2677 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 179.375802][T17866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.375817][T17866] Call Trace: [ 179.375823][T17866] [ 179.375831][T17866] __dump_stack+0x1d/0x30 [ 179.375854][T17866] dump_stack_lvl+0xe8/0x140 [ 179.375948][T17866] dump_stack+0x15/0x1b [ 179.375996][T17866] should_fail_ex+0x265/0x280 [ 179.376033][T17866] should_fail+0xb/0x20 [ 179.376061][T17866] should_fail_usercopy+0x1a/0x20 [ 179.376160][T17866] _copy_to_user+0x20/0xa0 [ 179.376181][T17866] simple_read_from_buffer+0xb5/0x130 [ 179.376216][T17866] proc_fail_nth_read+0x100/0x140 [ 179.376327][T17866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.376363][T17866] vfs_read+0x1a0/0x6f0 [ 179.376431][T17866] ? __rcu_read_unlock+0x4f/0x70 [ 179.376460][T17866] ? __fget_files+0x184/0x1c0 [ 179.376489][T17866] ksys_read+0xda/0x1a0 [ 179.376574][T17866] __x64_sys_read+0x40/0x50 [ 179.376648][T17866] x64_sys_call+0x2d77/0x2fb0 [ 179.376721][T17866] do_syscall_64+0xd2/0x200 [ 179.376743][T17866] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.376777][T17866] ? clear_bhb_loop+0x40/0x90 [ 179.376840][T17866] ? clear_bhb_loop+0x40/0x90 [ 179.376862][T17866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.376926][T17866] RIP: 0033:0x7f8160bfd33c [ 179.376942][T17866] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 179.376995][T17866] RSP: 002b:00007f815f267030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.377013][T17866] RAX: ffffffffffffffda RBX: 00007f8160e25fa0 RCX: 00007f8160bfd33c [ 179.377104][T17866] RDX: 000000000000000f RSI: 00007f815f2670a0 RDI: 0000000000000007 [ 179.377119][T17866] RBP: 00007f815f267090 R08: 0000000000000000 R09: 0000000000000000 [ 179.377134][T17866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.377149][T17866] R13: 0000000000000000 R14: 00007f8160e25fa0 R15: 00007ffe0f0df658 [ 179.377173][T17866] [ 179.616965][T17868] futex_wake_op: syz.1.2678 tries to shift op by 32; fix this program [ 179.636861][T17868] loop1: detected capacity change from 0 to 128 [ 179.671827][T17868] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 179.680020][T17868] FAT-fs (loop1): Filesystem has been set read-only [ 179.686459][T17875] __nla_validate_parse: 13 callbacks suppressed [ 179.686482][T17875] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2679'. [ 179.717070][T17868] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 179.774998][T17859] loop2: detected capacity change from 0 to 1024 [ 179.782613][T17859] EXT4-fs (loop2): invalid first ino: 9 [ 179.788534][T17871] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2679'. [ 179.854186][T17886] loop5: detected capacity change from 0 to 1024 [ 179.877802][T17892] loop4: detected capacity change from 0 to 512 [ 179.886225][T17892] EXT4-fs: Ignoring removed nobh option [ 179.902206][T17877] siw: device registration error -23 [ 179.908303][T17892] EXT4-fs: journaled quota format not specified [ 179.918535][T17886] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.974164][T17886] lo speed is unknown, defaulting to 1000 [ 180.038403][T17906] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 180.060373][T17886] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2684'. [ 180.096321][T17928] loop4: detected capacity change from 0 to 1024 [ 180.123336][T17926] loop1: detected capacity change from 0 to 512 [ 180.127456][T17933] loop5: detected capacity change from 0 to 512 [ 180.130136][T17926] EXT4-fs: Ignoring removed nobh option [ 180.137510][T17933] EXT4-fs: Ignoring removed nobh option [ 180.148085][T17933] EXT4-fs: journaled quota format not specified [ 180.155862][T17928] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.217093][T17926] EXT4-fs: journaled quota format not specified [ 180.224917][ T29] audit: type=1326 audit(2000000060.230:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.5.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 180.249022][ T29] audit: type=1326 audit(2000000060.230:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.5.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 180.272820][ T29] audit: type=1326 audit(2000000060.230:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.5.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 180.296275][ T29] audit: type=1326 audit(2000000060.230:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.5.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 180.299063][T17946] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 180.319863][ T29] audit: type=1326 audit(2000000060.230:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17940 comm="syz.5.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 180.359576][T17928] lo speed is unknown, defaulting to 1000 [ 180.426056][T17945] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2687'. [ 180.507471][T17968] loop3: detected capacity change from 0 to 256 [ 180.536433][T17968] FAT-fs (loop3): Directory bread(block 64) failed [ 180.543573][T17988] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2693'. [ 180.564663][T17968] FAT-fs (loop3): Directory bread(block 65) failed [ 180.573419][T17960] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2693'. [ 180.583184][T17968] FAT-fs (loop3): Directory bread(block 66) failed [ 180.589848][T17968] FAT-fs (loop3): Directory bread(block 67) failed [ 180.609902][T17968] FAT-fs (loop3): Directory bread(block 68) failed [ 180.616817][T17968] FAT-fs (loop3): Directory bread(block 69) failed [ 180.684041][T17996] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2697'. [ 180.697216][T17968] FAT-fs (loop3): Directory bread(block 70) failed [ 180.704041][T17968] FAT-fs (loop3): Directory bread(block 71) failed [ 180.711042][T17990] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2697'. [ 180.772416][T17968] FAT-fs (loop3): Directory bread(block 72) failed [ 180.846208][T17968] FAT-fs (loop3): Directory bread(block 73) failed [ 180.982390][T18002] loop1: detected capacity change from 0 to 4096 [ 180.992137][T17968] syz.3.2698: attempt to access beyond end of device [ 180.992137][T17968] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 181.019460][T18009] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2704'. [ 181.057262][T18005] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2704'. [ 181.199200][T18025] pim6reg: entered allmulticast mode [ 181.206456][T18025] pim6reg: left allmulticast mode [ 181.954606][T18053] loop1: detected capacity change from 0 to 1024 [ 181.981228][T18053] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.032757][T18053] lo speed is unknown, defaulting to 1000 [ 182.063648][T18071] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 182.322842][T18096] loop5: detected capacity change from 0 to 4096 [ 182.654925][T18107] loop3: detected capacity change from 0 to 1024 [ 182.676527][T18107] EXT4-fs (loop3): invalid first ino: 9 [ 182.789794][T18097] Set syz1 is full, maxelem 65536 reached [ 182.806186][T18107] siw: device registration error -23 [ 183.140858][T18128] loop2: detected capacity change from 0 to 512 [ 183.148030][T18128] EXT4-fs: Ignoring removed nobh option [ 183.154062][T18128] EXT4-fs: journaled quota format not specified [ 183.358127][T18143] loop1: detected capacity change from 0 to 256 [ 183.368748][T18140] loop2: detected capacity change from 0 to 1024 [ 183.371327][T18143] FAT-fs (loop1): Directory bread(block 64) failed [ 183.376457][T18140] EXT4-fs (loop2): invalid first ino: 9 [ 183.381977][T18143] FAT-fs (loop1): Directory bread(block 65) failed [ 183.394229][T18143] FAT-fs (loop1): Directory bread(block 66) failed [ 183.403023][T18143] FAT-fs (loop1): Directory bread(block 67) failed [ 183.409805][T18143] FAT-fs (loop1): Directory bread(block 68) failed [ 183.416437][T18143] FAT-fs (loop1): Directory bread(block 69) failed [ 183.423137][T18143] FAT-fs (loop1): Directory bread(block 70) failed [ 183.429737][T18143] FAT-fs (loop1): Directory bread(block 71) failed [ 183.436528][T18143] FAT-fs (loop1): Directory bread(block 72) failed [ 183.443225][T18143] FAT-fs (loop1): Directory bread(block 73) failed [ 183.467117][T18141] siw: device registration error -23 [ 183.480121][T18143] syz.1.2735: attempt to access beyond end of device [ 183.480121][T18143] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 183.538449][T18154] loop1: detected capacity change from 0 to 512 [ 183.545942][T18154] EXT4-fs: Ignoring removed nobh option [ 183.552104][T18154] EXT4-fs: journaled quota format not specified [ 183.862978][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 183.862998][ T29] audit: type=1400 audit(2000000063.880:4038): avc: denied { setopt } for pid=18194 comm="syz.3.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.981789][T18203] netlink: 'syz.3.2754': attribute type 1 has an invalid length. [ 184.010986][T18205] loop5: detected capacity change from 0 to 512 [ 184.032618][T18205] EXT4-fs: Ignoring removed nobh option [ 184.038549][T18205] EXT4-fs: journaled quota format not specified [ 184.040686][T18203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.065353][T18196] bond3 (unregistering): Released all slaves [ 184.251266][ T29] audit: type=1326 audit(2000000064.260:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18194 comm="syz.3.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daa57e929 code=0x7ffc0000 [ 184.316434][T18283] loop2: detected capacity change from 0 to 1024 [ 184.359897][T18280] loop5: detected capacity change from 0 to 4096 [ 184.374351][T18283] EXT4-fs (loop2): invalid first ino: 9 [ 184.458615][ T29] audit: type=1326 audit(2000000064.300:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18194 comm="syz.3.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daa57e929 code=0x7ffc0000 [ 184.482484][ T29] audit: type=1326 audit(2000000064.300:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18194 comm="syz.3.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5daa57e929 code=0x7ffc0000 [ 184.506088][ T29] audit: type=1326 audit(2000000064.300:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18194 comm="syz.3.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daa57e929 code=0x7ffc0000 [ 184.529679][ T29] audit: type=1326 audit(2000000064.300:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18194 comm="syz.3.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daa57e929 code=0x7ffc0000 [ 184.553451][ T29] audit: type=1326 audit(2000000064.300:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18194 comm="syz.3.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5daa57e929 code=0x7ffc0000 [ 184.576813][ T29] audit: type=1326 audit(2000000064.300:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18194 comm="syz.3.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daa57e929 code=0x7ffc0000 [ 184.600411][ T29] audit: type=1326 audit(2000000064.300:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18194 comm="syz.3.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daa57e929 code=0x7ffc0000 [ 184.833357][T18303] __nla_validate_parse: 8 callbacks suppressed [ 184.833379][T18303] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2765'. [ 184.849454][T18283] siw: device registration error -23 [ 184.855799][T18300] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2765'. [ 184.961304][T18316] loop3: detected capacity change from 0 to 512 [ 184.967979][T18316] EXT4-fs: Ignoring removed nobh option [ 184.982128][T18316] EXT4-fs: journaled quota format not specified [ 185.125923][T18332] loop4: detected capacity change from 0 to 512 [ 185.132728][T18332] EXT4-fs: Ignoring removed nobh option [ 185.138696][T18332] EXT4-fs: journaled quota format not specified [ 185.280974][T18338] loop3: detected capacity change from 0 to 512 [ 185.287906][T18338] EXT4-fs: Ignoring removed nobh option [ 185.296905][T18338] EXT4-fs: journaled quota format not specified [ 185.406671][T18355] loop2: detected capacity change from 0 to 256 [ 185.419826][T18355] FAT-fs (loop2): Directory bread(block 64) failed [ 185.426743][T18355] FAT-fs (loop2): Directory bread(block 65) failed [ 185.434768][T18355] FAT-fs (loop2): Directory bread(block 66) failed [ 185.441701][T18355] FAT-fs (loop2): Directory bread(block 67) failed [ 185.448313][T18355] FAT-fs (loop2): Directory bread(block 68) failed [ 185.455316][T18355] FAT-fs (loop2): Directory bread(block 69) failed [ 185.461968][T18355] FAT-fs (loop2): Directory bread(block 70) failed [ 185.472955][T18355] FAT-fs (loop2): Directory bread(block 71) failed [ 185.487403][T18355] FAT-fs (loop2): Directory bread(block 72) failed [ 185.500728][T18355] FAT-fs (loop2): Directory bread(block 73) failed [ 185.535826][T18328] Set syz1 is full, maxelem 65536 reached [ 185.567868][T18355] syz.2.2782: attempt to access beyond end of device [ 185.567868][T18355] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 185.587220][T18363] FAULT_INJECTION: forcing a failure. [ 185.587220][T18363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.600448][T18363] CPU: 1 UID: 0 PID: 18363 Comm: syz.5.2784 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 185.600540][T18363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.600553][T18363] Call Trace: [ 185.600560][T18363] [ 185.600567][T18363] __dump_stack+0x1d/0x30 [ 185.600601][T18363] dump_stack_lvl+0xe8/0x140 [ 185.600666][T18363] dump_stack+0x15/0x1b [ 185.600687][T18363] should_fail_ex+0x265/0x280 [ 185.600727][T18363] should_fail+0xb/0x20 [ 185.600761][T18363] should_fail_usercopy+0x1a/0x20 [ 185.600824][T18363] _copy_from_user+0x1c/0xb0 [ 185.600850][T18363] memdup_user+0x5e/0xd0 [ 185.600881][T18363] strndup_user+0x68/0xb0 [ 185.600968][T18363] __se_sys_mount+0x4d/0x2e0 [ 185.600992][T18363] ? fput+0x8f/0xc0 [ 185.601024][T18363] ? ksys_write+0x192/0x1a0 [ 185.601149][T18363] __x64_sys_mount+0x67/0x80 [ 185.601169][T18363] x64_sys_call+0xd36/0x2fb0 [ 185.601192][T18363] do_syscall_64+0xd2/0x200 [ 185.601212][T18363] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.601254][T18363] ? clear_bhb_loop+0x40/0x90 [ 185.601277][T18363] ? clear_bhb_loop+0x40/0x90 [ 185.601301][T18363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.601324][T18363] RIP: 0033:0x7fab9c4ae929 [ 185.601345][T18363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.601441][T18363] RSP: 002b:00007fab9ab17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.601464][T18363] RAX: ffffffffffffffda RBX: 00007fab9c6d5fa0 RCX: 00007fab9c4ae929 [ 185.601478][T18363] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 00002000000000c0 [ 185.601491][T18363] RBP: 00007fab9ab17090 R08: 0000200000000040 R09: 0000000000000000 [ 185.601504][T18363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.601575][T18363] R13: 0000000000000000 R14: 00007fab9c6d5fa0 R15: 00007fff89a04898 [ 185.601682][T18363] [ 185.815094][T18370] loop2: detected capacity change from 0 to 512 [ 185.823089][T18370] EXT4-fs: Ignoring removed nobh option [ 185.829301][T18370] EXT4-fs: journaled quota format not specified [ 185.942939][T18394] netlink: 'syz.5.2791': attribute type 1 has an invalid length. [ 185.959262][T18394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.972270][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2791'. [ 185.983843][T18394] bond1 (unregistering): Released all slaves [ 186.023772][ T29] audit: type=1326 audit(2000000066.040:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.5.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 186.137404][T18466] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2793'. [ 186.147172][T18465] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2793'. [ 186.184802][T18472] loop5: detected capacity change from 0 to 512 [ 186.191823][T18472] EXT4-fs: Ignoring removed nobh option [ 186.197671][T18472] EXT4-fs: journaled quota format not specified [ 186.589367][T18495] loop5: detected capacity change from 0 to 256 [ 186.603809][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2800'. [ 186.852055][T18502] loop3: detected capacity change from 0 to 512 [ 186.870687][T18502] EXT4-fs: Ignoring removed nobh option [ 186.884320][T18502] EXT4-fs: journaled quota format not specified [ 186.920391][T18510] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2803'. [ 186.930424][T18506] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2803'. [ 187.227830][T18522] loop3: detected capacity change from 0 to 1024 [ 187.237116][T18522] EXT4-fs (loop3): invalid first ino: 9 [ 187.306519][T18534] siw: device registration error -23 [ 187.513644][T18553] loop5: detected capacity change from 0 to 256 [ 187.528580][T18553] FAT-fs (loop5): Directory bread(block 64) failed [ 187.537041][T18553] FAT-fs (loop5): Directory bread(block 65) failed [ 187.544225][T18553] FAT-fs (loop5): Directory bread(block 66) failed [ 187.551141][T18553] FAT-fs (loop5): Directory bread(block 67) failed [ 187.557865][T18553] FAT-fs (loop5): Directory bread(block 68) failed [ 187.564602][T18553] FAT-fs (loop5): Directory bread(block 69) failed [ 187.572284][T18553] FAT-fs (loop5): Directory bread(block 70) failed [ 187.578982][T18553] FAT-fs (loop5): Directory bread(block 71) failed [ 187.585669][T18553] FAT-fs (loop5): Directory bread(block 72) failed [ 187.594656][T18553] FAT-fs (loop5): Directory bread(block 73) failed [ 187.623056][ T376] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.642114][T18549] lo speed is unknown, defaulting to 1000 [ 187.650393][T18553] syz.5.2815: attempt to access beyond end of device [ 187.650393][T18553] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 187.693368][ T376] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.749630][ T376] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.767190][T18549] chnl_net:caif_netlink_parms(): no params data found [ 187.778215][T18669] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2816'. [ 187.795969][T18585] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2816'. [ 187.832837][T18693] 9pnet_fd: Insufficient options for proto=fd [ 187.842372][ T376] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.870747][T18700] loop5: detected capacity change from 0 to 1024 [ 187.914112][T18700] EXT4-fs: Ignoring removed nobh option [ 187.924705][T18700] EXT4-fs: Ignoring removed oldalloc option [ 187.930843][T18700] EXT4-fs: Ignoring removed bh option [ 187.946109][T18700] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c119, mo2=0102] [ 187.955003][T18700] System zones: 0-1, 3-12 [ 187.962286][T18549] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.969416][T18549] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.980163][T18713] loop1: detected capacity change from 0 to 512 [ 188.006656][T18729] loop2: detected capacity change from 0 to 4096 [ 188.014715][T18713] EXT4-fs: Ignoring removed nobh option [ 188.020771][T18549] bridge_slave_0: entered allmulticast mode [ 188.027003][T18713] EXT4-fs: journaled quota format not specified [ 188.027847][T18549] bridge_slave_0: entered promiscuous mode [ 188.069299][T18549] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.076584][T18549] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.103843][T18549] bridge_slave_1: entered allmulticast mode [ 188.110637][T18549] bridge_slave_1: entered promiscuous mode [ 188.117932][ T376] bridge_slave_1: left allmulticast mode [ 188.123715][ T376] bridge_slave_1: left promiscuous mode [ 188.129412][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.170753][ T376] bridge_slave_0: left allmulticast mode [ 188.176575][ T376] bridge_slave_0: left promiscuous mode [ 188.182499][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.263757][ T376] team0: Port device geneve1 removed [ 188.307538][ T376] bond0 (unregistering): left promiscuous mode [ 188.313812][ T376] bond_slave_0: left promiscuous mode [ 188.319298][ T376] bond_slave_1: left promiscuous mode [ 188.325591][ T376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.334298][ T376] bond_slave_0: left allmulticast mode [ 188.340798][ T376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.349690][ T376] bond_slave_1: left allmulticast mode [ 188.356052][ T376] bond0 (unregistering): Released all slaves [ 188.365308][ T376] bond1 (unregistering): Released all slaves [ 188.374374][ T376] bond2 (unregistering): Released all slaves [ 188.384042][ T376] bond3 (unregistering): Released all slaves [ 188.393559][ T376] bond4 (unregistering): Released all slaves [ 188.422704][T18549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.433198][T18549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.456837][T18549] team0: Port device team_slave_0 added [ 188.463733][T18549] team0: Port device team_slave_1 added [ 188.484567][ T376] dummy0: left promiscuous mode [ 188.491774][ T376] hsr_slave_0: left promiscuous mode [ 188.497509][ T376] hsr_slave_1: left promiscuous mode [ 188.509271][ T376] veth1_macvtap: left promiscuous mode [ 188.515410][ T376] veth0_macvtap: left promiscuous mode [ 188.521072][ T376] veth1_vlan: left promiscuous mode [ 188.526513][ T376] veth0_vlan: left promiscuous mode [ 188.609856][ T376] team0 (unregistering): Port device team_slave_1 removed [ 188.632884][ T376] team0 (unregistering): Port device team_slave_0 removed [ 188.698228][T18549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.705364][T18549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.731546][T18549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.742598][ T3415] lo speed is unknown, defaulting to 1000 [ 188.748394][ T3415] infiniband syz0: ib_query_port failed (-19) [ 188.748550][T18863] loop3: detected capacity change from 0 to 512 [ 188.755340][T18549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.767856][T18549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.774681][T18863] EXT4-fs: Ignoring removed nobh option [ 188.793888][T18549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.801502][T18863] EXT4-fs: journaled quota format not specified [ 188.834827][T18549] hsr_slave_0: entered promiscuous mode [ 188.841010][T18549] hsr_slave_1: entered promiscuous mode [ 189.206692][T18549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.216307][T18549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.225613][T18549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.235701][T18549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.248638][ T29] kauditd_printk_skb: 1834 callbacks suppressed [ 189.248662][ T29] audit: type=1326 audit(2000000069.260:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18989 comm="syz.5.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 189.278807][ T29] audit: type=1326 audit(2000000069.260:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18989 comm="syz.5.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 189.302464][ T29] audit: type=1326 audit(2000000069.260:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18989 comm="syz.5.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 189.316836][T18549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.326134][ T29] audit: type=1326 audit(2000000069.260:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18989 comm="syz.5.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 189.340809][T18549] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.356329][ T29] audit: type=1326 audit(2000000069.260:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18989 comm="syz.5.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 189.395036][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.402210][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.422204][T18549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.432705][T18549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.448478][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.457005][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.523280][T18549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.599591][ T29] audit: type=1326 audit(2000000069.610:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.2.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495f3de929 code=0x7ffc0000 [ 189.626047][ T29] audit: type=1326 audit(2000000069.640:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.2.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f495f3de929 code=0x7ffc0000 [ 189.649954][ T29] audit: type=1326 audit(2000000069.640:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.2.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495f3de929 code=0x7ffc0000 [ 189.673630][ T29] audit: type=1326 audit(2000000069.640:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.2.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495f3de929 code=0x7ffc0000 [ 189.697391][ T29] audit: type=1326 audit(2000000069.640:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.2.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f495f3de929 code=0x7ffc0000 [ 189.704841][T19022] loop2: detected capacity change from 0 to 512 [ 189.729777][T19022] /dev/loop2: Can't open blockdev [ 189.747960][T19032] loop1: detected capacity change from 0 to 256 [ 189.763201][T19032] FAT-fs (loop1): Directory bread(block 64) failed [ 189.774323][T19032] FAT-fs (loop1): Directory bread(block 65) failed [ 189.781576][T19032] FAT-fs (loop1): Directory bread(block 66) failed [ 189.788906][T19032] FAT-fs (loop1): Directory bread(block 67) failed [ 189.796007][T18549] veth0_vlan: entered promiscuous mode [ 189.824622][T18549] veth1_vlan: entered promiscuous mode [ 189.839259][T19032] FAT-fs (loop1): Directory bread(block 68) failed [ 189.853373][T18549] veth0_macvtap: entered promiscuous mode [ 189.860589][T19032] FAT-fs (loop1): Directory bread(block 69) failed [ 189.870296][T18549] veth1_macvtap: entered promiscuous mode [ 189.875731][T19032] FAT-fs (loop1): Directory bread(block 70) failed [ 189.889715][T18549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.893204][T19032] FAT-fs (loop1): Directory bread(block 71) failed [ 189.903792][T18549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.916657][T18549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.924370][T19032] FAT-fs (loop1): Directory bread(block 72) failed [ 189.925606][T18549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.941050][T18549] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.949825][T18549] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.958686][T19032] FAT-fs (loop1): Directory bread(block 73) failed [ 189.977456][T19032] syz.1.2847: attempt to access beyond end of device [ 189.977456][T19032] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 189.991844][T19044] loop3: detected capacity change from 0 to 256 [ 190.052198][T19052] loop1: detected capacity change from 0 to 1024 [ 190.059137][T19052] EXT4-fs: Ignoring removed nobh option [ 190.065824][T19052] EXT4-fs: Ignoring removed oldalloc option [ 190.072072][T19052] EXT4-fs: Ignoring removed bh option [ 190.082562][T19052] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c119, mo2=0102] [ 190.090784][T19052] System zones: 0-1, 3-12 [ 190.135867][T19062] loop4: detected capacity change from 0 to 4096 [ 190.152877][T19065] loop2: detected capacity change from 0 to 512 [ 190.159777][T19065] EXT4-fs: Ignoring removed nobh option [ 190.176443][T19065] EXT4-fs: journaled quota format not specified [ 190.395477][T19078] __nla_validate_parse: 2 callbacks suppressed [ 190.395495][T19078] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2857'. [ 190.412059][T19077] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2857'. [ 190.669570][T19094] loop3: detected capacity change from 0 to 256 [ 190.683736][T19094] FAT-fs (loop3): Directory bread(block 64) failed [ 190.690383][T19094] FAT-fs (loop3): Directory bread(block 65) failed [ 190.700164][T19094] FAT-fs (loop3): Directory bread(block 66) failed [ 190.708872][T19094] FAT-fs (loop3): Directory bread(block 67) failed [ 190.716013][T19094] FAT-fs (loop3): Directory bread(block 68) failed [ 190.722818][T19094] FAT-fs (loop3): Directory bread(block 69) failed [ 190.729455][T19094] FAT-fs (loop3): Directory bread(block 70) failed [ 190.736348][T19094] FAT-fs (loop3): Directory bread(block 71) failed [ 190.743308][T19094] FAT-fs (loop3): Directory bread(block 72) failed [ 190.749862][T19094] FAT-fs (loop3): Directory bread(block 73) failed [ 190.773546][T19102] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2862'. [ 190.784274][T19097] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2862'. [ 190.795250][T19094] syz.3.2861: attempt to access beyond end of device [ 190.795250][T19094] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 190.841360][T19107] loop4: detected capacity change from 0 to 512 [ 190.848377][T19107] EXT4-fs: Ignoring removed nobh option [ 190.861908][T19107] EXT4-fs: journaled quota format not specified [ 190.892455][T19116] loop5: detected capacity change from 0 to 512 [ 190.913652][T19116] EXT4-fs: Ignoring removed nobh option [ 190.931179][T19116] EXT4-fs: journaled quota format not specified [ 190.944287][T19126] loop4: detected capacity change from 0 to 256 [ 191.041549][T19134] loop3: detected capacity change from 0 to 512 [ 191.054532][T19134] EXT4-fs: Ignoring removed nobh option [ 191.062839][T19134] EXT4-fs: journaled quota format not specified [ 191.101543][T19146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2875'. [ 191.144999][T19151] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2876'. [ 191.161414][T19150] loop3: detected capacity change from 0 to 512 [ 191.171374][T19142] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2876'. [ 191.181296][T19150] EXT4-fs: Ignoring removed nobh option [ 191.187981][T19150] EXT4-fs: journaled quota format not specified [ 191.214101][T19158] loop5: detected capacity change from 0 to 256 [ 191.240039][T19158] FAT-fs (loop5): Directory bread(block 64) failed [ 191.265890][T19158] FAT-fs (loop5): Directory bread(block 65) failed [ 191.274215][T19158] FAT-fs (loop5): Directory bread(block 66) failed [ 191.291039][T19158] FAT-fs (loop5): Directory bread(block 67) failed [ 191.297955][T19158] FAT-fs (loop5): Directory bread(block 68) failed [ 191.309830][T19158] FAT-fs (loop5): Directory bread(block 69) failed [ 191.317340][T19158] FAT-fs (loop5): Directory bread(block 70) failed [ 191.324438][T19158] FAT-fs (loop5): Directory bread(block 71) failed [ 191.331525][T19158] FAT-fs (loop5): Directory bread(block 72) failed [ 191.338274][T19158] FAT-fs (loop5): Directory bread(block 73) failed [ 191.353506][T19158] syz.5.2879: attempt to access beyond end of device [ 191.353506][T19158] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 191.404296][T19165] FAULT_INJECTION: forcing a failure. [ 191.404296][T19165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.417430][T19165] CPU: 1 UID: 0 PID: 19165 Comm: syz.3.2882 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 191.417505][T19165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.417517][T19165] Call Trace: [ 191.417524][T19165] [ 191.417531][T19165] __dump_stack+0x1d/0x30 [ 191.417552][T19165] dump_stack_lvl+0xe8/0x140 [ 191.417574][T19165] dump_stack+0x15/0x1b [ 191.417619][T19165] should_fail_ex+0x265/0x280 [ 191.417660][T19165] should_fail+0xb/0x20 [ 191.417695][T19165] should_fail_usercopy+0x1a/0x20 [ 191.417754][T19165] _copy_to_user+0x20/0xa0 [ 191.417776][T19165] simple_read_from_buffer+0xb5/0x130 [ 191.417852][T19165] proc_fail_nth_read+0x100/0x140 [ 191.417939][T19165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.417978][T19165] vfs_read+0x1a0/0x6f0 [ 191.418016][T19165] ? __rcu_read_unlock+0x4f/0x70 [ 191.418119][T19165] ? __rcu_read_unlock+0x4f/0x70 [ 191.418140][T19165] ? __fget_files+0x184/0x1c0 [ 191.418161][T19165] ksys_read+0xda/0x1a0 [ 191.418228][T19165] __x64_sys_read+0x40/0x50 [ 191.418297][T19165] x64_sys_call+0x2d77/0x2fb0 [ 191.418323][T19165] do_syscall_64+0xd2/0x200 [ 191.418341][T19165] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 191.418374][T19165] ? clear_bhb_loop+0x40/0x90 [ 191.418441][T19165] ? clear_bhb_loop+0x40/0x90 [ 191.418464][T19165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.418489][T19165] RIP: 0033:0x7f5daa57d33c [ 191.418508][T19165] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 191.418531][T19165] RSP: 002b:00007f5da8be7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.418551][T19165] RAX: ffffffffffffffda RBX: 00007f5daa7a5fa0 RCX: 00007f5daa57d33c [ 191.418606][T19165] RDX: 000000000000000f RSI: 00007f5da8be70a0 RDI: 0000000000000005 [ 191.418621][T19165] RBP: 00007f5da8be7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.418636][T19165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.418705][T19165] R13: 0000000000000000 R14: 00007f5daa7a5fa0 R15: 00007ffcc1b81158 [ 191.418729][T19165] [ 191.779776][T19184] loop3: detected capacity change from 0 to 512 [ 191.787141][T19184] EXT4-fs: Ignoring removed nobh option [ 191.794374][T19184] EXT4-fs: journaled quota format not specified [ 191.859877][T19191] loop2: detected capacity change from 0 to 512 [ 191.866708][T19191] EXT4-fs: Ignoring removed nobh option [ 191.873764][T19191] EXT4-fs: journaled quota format not specified [ 191.887909][T19201] FAULT_INJECTION: forcing a failure. [ 191.887909][T19201] name failslab, interval 1, probability 0, space 0, times 0 [ 191.900701][T19201] CPU: 1 UID: 0 PID: 19201 Comm: syz.3.2890 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 191.900734][T19201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.900804][T19201] Call Trace: [ 191.900812][T19201] [ 191.900822][T19201] __dump_stack+0x1d/0x30 [ 191.900849][T19201] dump_stack_lvl+0xe8/0x140 [ 191.900869][T19201] dump_stack+0x15/0x1b [ 191.900916][T19201] should_fail_ex+0x265/0x280 [ 191.900957][T19201] should_failslab+0x8c/0xb0 [ 191.900986][T19201] __kvmalloc_node_noprof+0x123/0x4e0 [ 191.901026][T19201] ? xt_alloc_table_info+0x3b/0x80 [ 191.901066][T19201] ? should_fail_ex+0xdb/0x280 [ 191.901100][T19201] xt_alloc_table_info+0x3b/0x80 [ 191.901164][T19201] do_ip6t_set_ctl+0x5a5/0x840 [ 191.901197][T19201] ? kstrtoull+0x111/0x140 [ 191.901225][T19201] ? __rcu_read_unlock+0x4f/0x70 [ 191.901334][T19201] nf_setsockopt+0x196/0x1b0 [ 191.901363][T19201] ipv6_setsockopt+0x11a/0x130 [ 191.901389][T19201] tcp_setsockopt+0x98/0xb0 [ 191.901482][T19201] sock_common_setsockopt+0x66/0x80 [ 191.901517][T19201] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 191.901553][T19201] __sys_setsockopt+0x181/0x200 [ 191.901681][T19201] __x64_sys_setsockopt+0x64/0x80 [ 191.901745][T19201] x64_sys_call+0x2bd5/0x2fb0 [ 191.901775][T19201] do_syscall_64+0xd2/0x200 [ 191.901795][T19201] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 191.901885][T19201] ? clear_bhb_loop+0x40/0x90 [ 191.901910][T19201] ? clear_bhb_loop+0x40/0x90 [ 191.901941][T19201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.901967][T19201] RIP: 0033:0x7f5daa57e929 [ 191.901982][T19201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.902003][T19201] RSP: 002b:00007f5da8be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.902027][T19201] RAX: ffffffffffffffda RBX: 00007f5daa7a5fa0 RCX: 00007f5daa57e929 [ 191.902062][T19201] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 191.902074][T19201] RBP: 00007f5da8be7090 R08: 0000000000000638 R09: 0000000000000000 [ 191.902090][T19201] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000001 [ 191.902105][T19201] R13: 0000000000000000 R14: 00007f5daa7a5fa0 R15: 00007ffcc1b81158 [ 191.902187][T19201] [ 192.198771][T19209] loop3: detected capacity change from 0 to 4096 [ 192.209232][T19209] EXT4-fs mount: 20 callbacks suppressed [ 192.209252][T19209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.234264][T19219] netlink: 'syz.2.2898': attribute type 1 has an invalid length. [ 192.249645][T19219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.259616][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2898'. [ 192.272033][T19219] bond4 (unregistering): Released all slaves [ 192.341297][T19294] 9pnet_fd: Insufficient options for proto=fd [ 192.371615][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2903'. [ 192.383561][T19298] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.394379][T19298] bridge_slave_0 (unregistering): left allmulticast mode [ 192.401516][T19298] bridge_slave_0 (unregistering): left promiscuous mode [ 192.408570][T19298] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.747366][T19306] loop5: detected capacity change from 0 to 512 [ 192.754356][T19306] EXT4-fs: Ignoring removed nobh option [ 192.760313][T19306] EXT4-fs: journaled quota format not specified [ 192.779043][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.073091][T19322] loop5: detected capacity change from 0 to 512 [ 193.079911][T19322] EXT4-fs: Ignoring removed nobh option [ 193.085943][T19322] EXT4-fs: journaled quota format not specified [ 193.131278][T19327] loop5: detected capacity change from 0 to 1024 [ 193.138229][T19327] EXT4-fs: Ignoring removed nobh option [ 193.144176][T19327] EXT4-fs: Ignoring removed oldalloc option [ 193.150258][T19327] EXT4-fs: Ignoring removed bh option [ 193.162016][T19327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c119, mo2=0102] [ 193.170233][T19327] System zones: 0-1, 3-12 [ 193.175670][T19327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 193.222105][T12356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 193.248647][T19339] netlink: 'syz.5.2913': attribute type 1 has an invalid length. [ 193.265359][T19339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.275099][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2913'. [ 193.286623][T19339] bond1 (unregistering): Released all slaves [ 193.560097][T19426] loop1: detected capacity change from 0 to 512 [ 193.567378][T19426] EXT4-fs: Ignoring removed nobh option [ 193.573422][T19426] EXT4-fs: journaled quota format not specified [ 193.705765][T19437] loop1: detected capacity change from 0 to 512 [ 193.712877][T19437] EXT4-fs: Ignoring removed nobh option [ 193.718741][T19437] EXT4-fs: journaled quota format not specified [ 193.835089][T19424] Set syz1 is full, maxelem 65536 reached [ 193.859815][T19446] loop3: detected capacity change from 0 to 256 [ 193.868921][T19448] loop1: detected capacity change from 0 to 1024 [ 193.873843][T19446] FAT-fs (loop3): Directory bread(block 64) failed [ 193.875731][T19448] EXT4-fs: Ignoring removed nobh option [ 193.882468][T19446] FAT-fs (loop3): Directory bread(block 65) failed [ 193.887582][T19448] EXT4-fs: Ignoring removed oldalloc option [ 193.894535][T19446] FAT-fs (loop3): Directory bread(block 66) failed [ 193.900130][T19448] EXT4-fs: Ignoring removed bh option [ 193.907062][T19446] FAT-fs (loop3): Directory bread(block 67) failed [ 193.918835][T19446] FAT-fs (loop3): Directory bread(block 68) failed [ 193.925502][T19446] FAT-fs (loop3): Directory bread(block 69) failed [ 193.932083][T19448] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c119, mo2=0102] [ 193.932110][T19448] System zones: 0-1, 3-12 [ 193.932734][T19448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 193.940343][T19446] FAT-fs (loop3): Directory bread(block 70) failed [ 193.963325][T19446] FAT-fs (loop3): Directory bread(block 71) failed [ 193.969931][T19446] FAT-fs (loop3): Directory bread(block 72) failed [ 193.976773][T19446] FAT-fs (loop3): Directory bread(block 73) failed [ 193.992089][T19446] syz.3.2924: attempt to access beyond end of device [ 193.992089][T19446] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 194.016785][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 194.098775][T19468] loop3: detected capacity change from 0 to 512 [ 194.105623][T19468] EXT4-fs: Ignoring removed nobh option [ 194.111913][T19468] EXT4-fs: journaled quota format not specified [ 194.160791][T19474] loop1: detected capacity change from 0 to 512 [ 194.167715][T19474] EXT4-fs: Ignoring removed nobh option [ 194.173713][T19474] EXT4-fs: journaled quota format not specified [ 194.276041][T19493] loop1: detected capacity change from 0 to 256 [ 194.287301][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 194.287315][ T29] audit: type=1326 audit(2000000074.300:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19489 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 194.294064][T19488] loop2: detected capacity change from 0 to 1024 [ 194.317199][ T29] audit: type=1326 audit(2000000074.300:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19489 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 194.334172][T19488] EXT4-fs: Ignoring removed nobh option [ 194.347018][ T29] audit: type=1326 audit(2000000074.300:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19489 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 194.347056][ T29] audit: type=1326 audit(2000000074.300:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19489 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 194.347095][ T29] audit: type=1326 audit(2000000074.300:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19489 comm="syz.5.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 194.383998][T19493] FAT-fs (loop1): Directory bread(block 64) failed [ 194.417845][T19488] EXT4-fs: Ignoring removed oldalloc option [ 194.423722][T19493] FAT-fs (loop1): Directory bread(block 65) failed [ 194.443276][T19488] EXT4-fs: Ignoring removed bh option [ 194.449772][T19493] FAT-fs (loop1): Directory bread(block 66) failed [ 194.457339][T19493] FAT-fs (loop1): Directory bread(block 67) failed [ 194.464645][T19493] FAT-fs (loop1): Directory bread(block 68) failed [ 194.471505][T19493] FAT-fs (loop1): Directory bread(block 69) failed [ 194.473814][T19488] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c119, mo2=0102] [ 194.478317][T19493] FAT-fs (loop1): Directory bread(block 70) failed [ 194.488002][T19488] System zones: 0-1, 3-12 [ 194.492894][T19493] FAT-fs (loop1): Directory bread(block 71) failed [ 194.497897][T19488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 194.503861][T19493] FAT-fs (loop1): Directory bread(block 72) failed [ 194.522621][T19493] FAT-fs (loop1): Directory bread(block 73) failed [ 194.541529][T19493] syz.1.2938: attempt to access beyond end of device [ 194.541529][T19493] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 194.562343][T19505] loop4: detected capacity change from 0 to 512 [ 194.573627][T19505] EXT4-fs: Ignoring removed nobh option [ 194.592507][ T29] audit: type=1326 audit(2000000074.600:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19507 comm="syz.5.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 194.593457][T19505] EXT4-fs: journaled quota format not specified [ 194.616219][ T29] audit: type=1326 audit(2000000074.600:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19507 comm="syz.5.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 194.646373][ T29] audit: type=1326 audit(2000000074.670:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19507 comm="syz.5.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 194.675586][T19518] loop1: detected capacity change from 0 to 164 [ 194.684099][T19518] iso9660: Unknown parameter '' [ 194.692998][T19508] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 194.700825][ T29] audit: type=1326 audit(2000000074.670:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19507 comm="syz.5.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 194.724561][ T29] audit: type=1326 audit(2000000074.670:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19507 comm="syz.5.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 194.779247][T19519] 9pnet_fd: Insufficient options for proto=fd [ 194.817850][T19531] loop1: detected capacity change from 0 to 512 [ 194.824754][T19531] EXT4-fs: Ignoring removed nobh option [ 194.845127][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 194.854781][T19531] EXT4-fs: journaled quota format not specified [ 194.953089][T19551] loop5: detected capacity change from 0 to 256 [ 195.043383][T19551] FAT-fs (loop5): Directory bread(block 64) failed [ 195.053513][T19551] FAT-fs (loop5): Directory bread(block 65) failed [ 195.068932][T19551] FAT-fs (loop5): Directory bread(block 66) failed [ 195.094561][T19551] FAT-fs (loop5): Directory bread(block 67) failed [ 195.101183][T19551] FAT-fs (loop5): Directory bread(block 68) failed [ 195.107792][T19551] FAT-fs (loop5): Directory bread(block 69) failed [ 195.109560][T19559] loop1: detected capacity change from 0 to 512 [ 195.114358][T19551] FAT-fs (loop5): Directory bread(block 70) failed [ 195.123990][T19559] EXT4-fs: Ignoring removed nobh option [ 195.127580][T19551] FAT-fs (loop5): Directory bread(block 71) failed [ 195.139317][T19551] FAT-fs (loop5): Directory bread(block 72) failed [ 195.146055][T19551] FAT-fs (loop5): Directory bread(block 73) failed [ 195.168917][T19551] syz.5.2956: attempt to access beyond end of device [ 195.168917][T19551] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 195.175213][T19559] EXT4-fs: journaled quota format not specified [ 195.304606][T19570] netlink: 'syz.5.2958': attribute type 1 has an invalid length. [ 195.323281][T19570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.360623][T19569] loop3: detected capacity change from 0 to 512 [ 195.367559][T19569] EXT4-fs: Ignoring removed nobh option [ 195.376815][T19569] EXT4-fs: journaled quota format not specified [ 195.495228][T19566] bond1 (unregistering): Released all slaves [ 195.948541][T19646] 9pnet_fd: Insufficient options for proto=fd [ 196.002064][T19650] loop1: detected capacity change from 0 to 1024 [ 196.021412][T19650] EXT4-fs: Ignoring removed nobh option [ 196.027114][T19650] EXT4-fs: Ignoring removed oldalloc option [ 196.033175][T19650] EXT4-fs: Ignoring removed bh option [ 196.050303][T19649] loop3: detected capacity change from 0 to 512 [ 196.062339][T19649] EXT4-fs: Ignoring removed nobh option [ 196.079467][T19649] EXT4-fs: journaled quota format not specified [ 196.123937][T19650] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c119, mo2=0102] [ 196.141199][T19650] System zones: 0-1, 3-12 [ 196.146253][T19650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 196.211929][T19537] Set syz1 is full, maxelem 65536 reached [ 196.344640][T19671] netlink: 'syz.4.2971': attribute type 10 has an invalid length. [ 196.379355][T19556] Set syz1 is full, maxelem 65536 reached [ 196.389688][T19671] team0 (unregistering): Port device team_slave_0 removed [ 196.399733][T19671] team0 (unregistering): Port device team_slave_1 removed [ 196.423083][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 196.427419][T19709] __nla_validate_parse: 7 callbacks suppressed [ 196.427441][T19709] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2972'. [ 196.448397][T19673] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2972'. [ 196.463337][T19713] loop1: detected capacity change from 0 to 256 [ 196.822057][T19729] chnl_net:caif_netlink_parms(): no params data found [ 196.857219][ T376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.964252][T19729] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.971558][T19729] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.987950][T19729] bridge_slave_0: entered allmulticast mode [ 196.994964][T19729] bridge_slave_0: entered promiscuous mode [ 197.004535][ T376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.022991][T19729] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.030294][T19729] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.043510][T19729] bridge_slave_1: entered allmulticast mode [ 197.498760][T19922] netlink: 'syz.5.2987': attribute type 10 has an invalid length. [ 197.507816][T19729] bridge_slave_1: entered promiscuous mode [ 197.524929][ T376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.537971][T19920] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2985'. [ 197.554247][T19922] team0 (unregistering): Port device team_slave_0 removed [ 197.563472][T19922] team0 (unregistering): Port device team_slave_1 removed [ 197.581968][T19917] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2985'. [ 197.595334][ T376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.616917][T19729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.641940][T19729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.675728][T19729] team0: Port device team_slave_0 added [ 197.690431][T19729] team0: Port device team_slave_1 added [ 197.723095][T19729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.730199][T19729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.756301][T19729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.768680][T19729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.775719][T19729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.802106][T19729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.850867][T19996] loop1: detected capacity change from 0 to 1024 [ 197.858974][T19996] EXT4-fs (loop1): invalid first ino: 9 [ 197.890633][T20046] netlink: 'syz.2.2991': attribute type 1 has an invalid length. [ 197.891621][ T376] bridge_slave_1: left allmulticast mode [ 197.904114][ T376] bridge_slave_1: left promiscuous mode [ 197.909802][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.932509][ T376] bridge_slave_0: left allmulticast mode [ 197.938218][ T376] bridge_slave_0: left promiscuous mode [ 197.941379][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2991'. [ 197.944244][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.959937][T20058] loop5: detected capacity change from 0 to 512 [ 197.967703][T20058] EXT4-fs: Ignoring removed nobh option [ 197.993156][T20058] EXT4-fs: journaled quota format not specified [ 198.065954][ T376] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 198.094237][T20070] loop5: detected capacity change from 0 to 512 [ 198.101199][T20070] EXT4-fs: Ignoring removed nobh option [ 198.107151][T20070] EXT4-fs: journaled quota format not specified [ 198.117108][ T376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.127535][ T376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.137889][ T376] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 198.147195][ T376] bond0 (unregistering): Released all slaves [ 198.156698][ T376] bond1 (unregistering): Released all slaves [ 198.166795][ T376] bond2 (unregistering): Released all slaves [ 198.185751][T20046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.195674][T20047] lo speed is unknown, defaulting to 1000 [ 198.209270][T20062] bond4 (unregistering): Released all slaves [ 198.234386][T20047] lo speed is unknown, defaulting to 1000 [ 198.259928][T20047] lo speed is unknown, defaulting to 1000 [ 198.271280][T20047] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 198.274750][T19729] hsr_slave_0: entered promiscuous mode [ 198.291592][T19729] hsr_slave_1: entered promiscuous mode [ 198.298253][T19729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.306513][T19729] Cannot create hsr debugfs directory [ 198.314471][ T376] hsr_slave_0: left promiscuous mode [ 198.320447][ T376] hsr_slave_1: left promiscuous mode [ 198.328885][ T376] veth1_macvtap: left promiscuous mode [ 198.334585][ T376] veth0_macvtap: left promiscuous mode [ 198.340301][ T376] veth1_vlan: left promiscuous mode [ 198.345655][ T376] veth0_vlan: left promiscuous mode [ 198.405325][ T376] team0 (unregistering): Port device team_slave_1 removed [ 198.415746][ T376] team0 (unregistering): Port device team_slave_0 removed [ 198.447373][T20047] lo speed is unknown, defaulting to 1000 [ 198.458980][T20047] lo speed is unknown, defaulting to 1000 [ 198.466838][T20047] lo speed is unknown, defaulting to 1000 [ 198.479364][T20047] lo speed is unknown, defaulting to 1000 [ 198.489050][T20047] lo speed is unknown, defaulting to 1000 [ 198.618363][T20256] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2998'. [ 198.628200][T20248] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2998'. [ 198.743251][T20276] netlink: 'syz.5.3007': attribute type 10 has an invalid length. [ 198.784732][T20278] loop5: detected capacity change from 0 to 4096 [ 198.792573][T19729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.794039][T20278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.814036][T19729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.829652][T19729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.839412][T19729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.880010][T19729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.893182][T19729] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.903512][T12117] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.910779][T12117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.923124][T12117] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.930261][T12117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.947729][T19729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.958246][T19729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.015219][T19729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.090641][T19729] veth0_vlan: entered promiscuous mode [ 199.098555][T19729] veth1_vlan: entered promiscuous mode [ 199.114086][T19729] veth0_macvtap: entered promiscuous mode [ 199.121872][T19729] veth1_macvtap: entered promiscuous mode [ 199.132822][T19729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.145352][T19729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.159550][T19729] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.168381][T19729] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.177204][T19729] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.185969][T19729] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.248476][T20333] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3016'. [ 199.273590][T20327] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3016'. [ 199.396395][T12356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.437368][T20349] netlink: 'syz.5.3021': attribute type 10 has an invalid length. [ 199.741716][T20337] Set syz1 is full, maxelem 65536 reached [ 200.082559][T20352] Set syz1 is full, maxelem 65536 reached [ 200.611601][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 200.611617][ T29] audit: type=1326 audit(2000000080.620:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20391 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfab9e929 code=0x7ffc0000 [ 200.641507][ T29] audit: type=1326 audit(2000000080.620:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20391 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfab9e929 code=0x7ffc0000 [ 200.665052][ T29] audit: type=1326 audit(2000000080.620:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20391 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f3bfab9e929 code=0x7ffc0000 [ 200.688627][ T29] audit: type=1326 audit(2000000080.630:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20391 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfab9e929 code=0x7ffc0000 [ 200.840435][T20388] netlink: 'syz.5.3035': attribute type 1 has an invalid length. [ 200.898079][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3035'. [ 201.018072][T20388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.040579][ T29] audit: type=1326 audit(2000000080.730:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20391 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfab9e929 code=0x7ffc0000 [ 201.068890][T20393] bond1 (unregistering): Released all slaves [ 201.209790][T20396] lo speed is unknown, defaulting to 1000 [ 201.247807][T20522] loop3: detected capacity change from 0 to 512 [ 201.256897][T20522] EXT4-fs: Ignoring removed nobh option [ 201.264155][T20522] EXT4-fs: journaled quota format not specified [ 201.273689][T12117] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.324582][T12117] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.346814][T20396] chnl_net:caif_netlink_parms(): no params data found [ 201.379075][T12117] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.393987][T20606] netlink: 'syz.1.3047': attribute type 10 has an invalid length. [ 201.415132][T20606] geneve1: entered promiscuous mode [ 201.427351][T20606] geneve1: entered allmulticast mode [ 201.434300][T20606] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 201.445340][ T29] audit: type=1400 audit(2000000081.460:6275): avc: denied { write } for pid=20636 comm="syz.3.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.468752][T12117] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.503190][T20396] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.510302][T20396] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.522087][T20396] bridge_slave_0: entered allmulticast mode [ 201.531871][T20396] bridge_slave_0: entered promiscuous mode [ 201.538802][T20396] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.545980][T20396] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.553759][T20396] bridge_slave_1: entered allmulticast mode [ 201.560255][T20396] bridge_slave_1: entered promiscuous mode [ 201.579522][T20669] loop3: detected capacity change from 0 to 128 [ 201.588045][T20396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.608097][T20669] vfat: Unknown parameter ' ' [ 201.608490][T20396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.622276][T20607] loop5: detected capacity change from 0 to 1024 [ 201.643153][T20607] EXT4-fs (loop5): invalid first ino: 9 [ 201.681284][T20396] team0: Port device team_slave_0 added [ 201.794589][T12117] bond0 (unregistering): Released all slaves [ 201.803982][T12117] bond1 (unregistering): Released all slaves [ 201.813333][T12117] bond2 (unregistering): Released all slaves [ 201.820568][T20652] siw: device registration error -23 [ 201.829717][T12117] bond3 (unregistering): Released all slaves [ 201.859162][T20396] team0: Port device team_slave_1 added [ 201.926828][T20396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.933914][T20396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.960299][T20396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.988445][T20396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.995471][T20396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.021648][T20396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.036931][T12117] hsr_slave_0: left promiscuous mode [ 202.097325][T12117] hsr_slave_1: left promiscuous mode [ 202.105661][T12117] veth1_macvtap: left promiscuous mode [ 202.114487][T12117] veth0_macvtap: left promiscuous mode [ 202.120032][T12117] veth1_vlan: left promiscuous mode [ 202.127124][T12117] veth0_vlan: left promiscuous mode [ 202.335758][T20783] netlink: 'syz.5.3058': attribute type 1 has an invalid length. [ 202.399246][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3058'. [ 202.750965][T20748] Set syz1 is full, maxelem 65536 reached [ 202.765413][T20783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.788048][T20785] bond1 (unregistering): Released all slaves [ 202.852133][ T29] audit: type=1326 audit(2000000082.860:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.3.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22aa1e929 code=0x7ffc0000 [ 202.875809][ T29] audit: type=1326 audit(2000000082.860:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.3.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fb22aa1e929 code=0x7ffc0000 [ 202.899503][ T29] audit: type=1326 audit(2000000082.860:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20864 comm="syz.3.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22aa1e929 code=0x7ffc0000 [ 202.938319][T20396] hsr_slave_0: entered promiscuous mode [ 202.946063][T20396] hsr_slave_1: entered promiscuous mode [ 202.952215][T20396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.959853][T20396] Cannot create hsr debugfs directory [ 202.965475][T20867] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3059'. [ 202.978233][T20836] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3059'. [ 202.978518][T20891] loop3: detected capacity change from 0 to 128 [ 203.041448][T20926] 9pnet_fd: Insufficient options for proto=fd [ 203.069758][T20936] loop4: detected capacity change from 0 to 512 [ 203.091603][T20936] EXT4-fs: Ignoring removed nobh option [ 203.098716][T20936] EXT4-fs: journaled quota format not specified [ 203.150345][T20976] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3068'. [ 203.178054][T20950] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3068'. [ 203.204115][T20978] loop4: detected capacity change from 0 to 4096 [ 203.223427][T20978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.315923][T21006] loop3: detected capacity change from 0 to 512 [ 203.322736][T21006] EXT4-fs: Ignoring removed nobh option [ 203.328751][T21006] EXT4-fs: journaled quota format not specified [ 203.346442][T20396] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.355120][T20396] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.364813][T20396] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.374748][T20396] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.410744][T20396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.422686][T20396] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.432550][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.439653][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.449424][T21030] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3077'. [ 203.459184][T21023] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3077'. [ 203.473072][T12117] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.480177][T12117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.498790][T20396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.509395][T20396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.529340][T21034] loop3: detected capacity change from 0 to 512 [ 203.537102][T21034] EXT4-fs: Ignoring removed nobh option [ 203.543123][T21034] EXT4-fs: journaled quota format not specified [ 203.573734][T20396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.644246][T20396] veth0_vlan: entered promiscuous mode [ 203.654268][T20396] veth1_vlan: entered promiscuous mode [ 203.671506][T20396] veth0_macvtap: entered promiscuous mode [ 203.679745][T20396] veth1_macvtap: entered promiscuous mode [ 203.693320][T20396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.700655][T21057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.708129][T21057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.716188][T21057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.723851][T21057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.739001][T20396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.748741][T20396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.757562][T20396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.766359][T20396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.775157][T20396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.804392][T18549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.836599][T21067] loop4: detected capacity change from 0 to 256 [ 203.957878][T21075] loop3: detected capacity change from 0 to 256 [ 203.990422][ T29] audit: type=1326 audit(2000000083.970:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 204.139709][T21082] lo speed is unknown, defaulting to 1000 [ 204.370697][T21115] loop5: detected capacity change from 0 to 512 [ 204.377551][T21115] EXT4-fs: Ignoring removed nobh option [ 204.390954][T21115] EXT4-fs: journaled quota format not specified [ 204.414919][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.534959][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.606345][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.626541][T21090] lo speed is unknown, defaulting to 1000 [ 204.668600][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.767493][T21142] loop5: detected capacity change from 0 to 4096 [ 204.792679][ T37] bridge_slave_1: left allmulticast mode [ 204.798443][ T37] bridge_slave_1: left promiscuous mode [ 204.804235][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.821355][ T37] bridge_slave_0: left allmulticast mode [ 204.827085][ T37] bridge_slave_0: left promiscuous mode [ 204.832926][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.852933][T21142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.875104][ T37] bond_slave_0: left promiscuous mode [ 204.880628][ T37] bond_slave_1: left promiscuous mode [ 204.886145][ T37] dummy0: left promiscuous mode [ 204.984441][ T37] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 204.999805][ T37] geneve1 (unregistering): left allmulticast mode [ 205.074652][ T37] bond0 (unregistering): left allmulticast mode [ 205.081039][ T37] bond_slave_0: left allmulticast mode [ 205.086594][ T37] bond_slave_1: left allmulticast mode [ 205.102309][ T37] dummy0: left allmulticast mode [ 205.121232][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.137292][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.152411][ T37] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 205.172673][ T37] bond0 (unregistering): Released all slaves [ 205.192836][ T37] bond1 (unregistering): Released all slaves [ 205.202067][ T37] bond2 (unregistering): Released all slaves [ 205.211871][ T37] bond3 (unregistering): Released all slaves [ 205.220653][ T37] bond4 (unregistering): Released all slaves [ 205.235743][T21090] chnl_net:caif_netlink_parms(): no params data found [ 205.253373][T21250] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3093'. [ 205.273015][T21249] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3093'. [ 205.374430][T21298] usb usb7: usbfs: process 21298 (syz.4.3096) did not claim interface 0 before use [ 205.391886][ T37] hsr_slave_0: left promiscuous mode [ 205.401706][ T37] hsr_slave_1: left promiscuous mode [ 205.421571][ T37] veth1_macvtap: left promiscuous mode [ 205.427189][ T37] veth0_macvtap: left promiscuous mode [ 205.441062][ T37] veth1_vlan: left promiscuous mode [ 205.454660][ T37] veth0_vlan: left promiscuous mode [ 205.463898][T12356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.482194][T21317] loop3: detected capacity change from 0 to 256 [ 205.533207][T21324] loop2: detected capacity change from 0 to 512 [ 205.540379][T21324] EXT4-fs: Ignoring removed nobh option [ 205.566293][T21324] EXT4-fs: journaled quota format not specified [ 205.572897][ T37] team0 (unregistering): Port device team_slave_1 removed [ 205.583268][ T37] team0 (unregistering): Port device team_slave_0 removed [ 205.626521][T21344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3103'. [ 205.639163][T21090] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.646392][T21090] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.654286][T21090] bridge_slave_0: entered allmulticast mode [ 205.661312][T21090] bridge_slave_0: entered promiscuous mode [ 205.669389][ T10] lo speed is unknown, defaulting to 1000 [ 205.675272][ T10] infiniband syz0: ib_query_port failed (-19) [ 205.682696][T21090] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.689810][T21090] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.697318][T21090] bridge_slave_1: entered allmulticast mode [ 205.697897][T21344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21344 comm=syz.2.3103 [ 205.705260][T21090] bridge_slave_1: entered promiscuous mode [ 205.745801][T21090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.768488][T21090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.878435][T21344] loop2: detected capacity change from 0 to 512 [ 205.892678][T21344] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.899231][T21344] EXT4-fs: Ignoring removed bh option [ 205.908182][T21090] team0: Port device team_slave_0 added [ 205.916600][T21090] team0: Port device team_slave_1 added [ 205.922646][T21344] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.950468][T21090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.957528][T21090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.983555][T21090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.996776][T21344] EXT4-fs (loop2): 1 truncate cleaned up [ 205.997621][T21090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.005593][T21344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.009488][T21090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.047999][T21090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.103009][T21090] hsr_slave_0: entered promiscuous mode [ 206.113282][T21090] hsr_slave_1: entered promiscuous mode [ 206.129441][T21090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.138582][T21090] Cannot create hsr debugfs directory [ 206.147934][T20396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.306982][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 206.307001][ T29] audit: type=1400 audit(2000000086.320:6310): avc: denied { write } for pid=21518 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 206.333058][ T29] audit: type=1400 audit(2000000086.340:6311): avc: denied { view } for pid=21518 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 206.371676][ T29] audit: type=1326 audit(2000000086.390:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22aa1e929 code=0x7ffc0000 [ 206.395567][ T29] audit: type=1326 audit(2000000086.390:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb22aa1e929 code=0x7ffc0000 [ 206.419104][ T29] audit: type=1326 audit(2000000086.390:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb22aa1e929 code=0x7ffc0000 [ 206.442776][ T29] audit: type=1326 audit(2000000086.390:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb22aa20847 code=0x7ffc0000 [ 206.466282][ T29] audit: type=1326 audit(2000000086.390:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb22aa207bc code=0x7ffc0000 [ 206.491070][ T29] audit: type=1326 audit(2000000086.390:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb22aa206f4 code=0x7ffc0000 [ 206.514586][ T29] audit: type=1326 audit(2000000086.390:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb22aa206f4 code=0x7ffc0000 [ 206.538163][ T29] audit: type=1326 audit(2000000086.390:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb22aa1d58a code=0x7ffc0000 [ 206.570302][T21532] loop2: detected capacity change from 0 to 512 [ 206.602154][T21532] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 206.611190][T21532] EXT4-fs (loop2): orphan cleanup on readonly fs [ 206.619670][T21532] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3108: corrupted inode contents [ 206.632169][T21532] EXT4-fs (loop2): Remounting filesystem read-only [ 206.638794][T21532] EXT4-fs (loop2): 1 truncate cleaned up [ 206.644748][ T782] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 206.655526][ T782] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 206.669182][ T782] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 206.680231][T21532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.717886][T21090] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.743075][T21090] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.758694][T21567] FAULT_INJECTION: forcing a failure. [ 206.758694][T21567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.771818][T21567] CPU: 0 UID: 0 PID: 21567 Comm: syz.3.3114 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 206.771859][T21567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.771876][T21567] Call Trace: [ 206.771885][T21567] [ 206.771943][T21567] __dump_stack+0x1d/0x30 [ 206.771966][T21567] dump_stack_lvl+0xe8/0x140 [ 206.771986][T21567] dump_stack+0x15/0x1b [ 206.772002][T21567] should_fail_ex+0x265/0x280 [ 206.772038][T21567] should_fail+0xb/0x20 [ 206.772079][T21567] should_fail_usercopy+0x1a/0x20 [ 206.772134][T21567] _copy_to_user+0x20/0xa0 [ 206.772155][T21567] simple_read_from_buffer+0xb5/0x130 [ 206.772193][T21567] proc_fail_nth_read+0x100/0x140 [ 206.772248][T21567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.772283][T21567] vfs_read+0x1a0/0x6f0 [ 206.772345][T21567] ? __rcu_read_unlock+0x4f/0x70 [ 206.772374][T21567] ? __fget_files+0x184/0x1c0 [ 206.772402][T21567] ksys_read+0xda/0x1a0 [ 206.772449][T21567] __x64_sys_read+0x40/0x50 [ 206.772491][T21567] x64_sys_call+0x2d77/0x2fb0 [ 206.772520][T21567] do_syscall_64+0xd2/0x200 [ 206.772539][T21567] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.772565][T21567] ? clear_bhb_loop+0x40/0x90 [ 206.772601][T21567] ? clear_bhb_loop+0x40/0x90 [ 206.772623][T21567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.772751][T21567] RIP: 0033:0x7fb22aa1d33c [ 206.772771][T21567] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.772794][T21567] RSP: 002b:00007fb229087030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.772818][T21567] RAX: ffffffffffffffda RBX: 00007fb22ac45fa0 RCX: 00007fb22aa1d33c [ 206.772832][T21567] RDX: 000000000000000f RSI: 00007fb2290870a0 RDI: 0000000000000007 [ 206.772844][T21567] RBP: 00007fb229087090 R08: 0000000000000000 R09: 0000000000000000 [ 206.772855][T21567] R10: 0000000000000401 R11: 0000000000000246 R12: 0000000000000001 [ 206.772928][T21567] R13: 0000000000000000 R14: 00007fb22ac45fa0 R15: 00007fff27f1ba38 [ 206.772953][T21567] [ 207.005960][T20396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.020957][T21090] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.036274][T21090] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.164504][T21090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.180020][T21090] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.190525][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.197713][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.226784][T21090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.237330][T21090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.319847][ T1724] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.327037][ T1724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.399363][T21090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.486449][T21090] veth0_vlan: entered promiscuous mode [ 207.496610][T21090] veth1_vlan: entered promiscuous mode [ 207.514504][T21090] veth0_macvtap: entered promiscuous mode [ 207.536016][T21090] veth1_macvtap: entered promiscuous mode [ 207.569884][T21090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.581981][T21606] loop5: detected capacity change from 0 to 512 [ 207.590629][T21090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.599316][T21606] EXT4-fs: Ignoring removed nobh option [ 207.607070][T21090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.616159][T21090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.624918][T21090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.633673][T21090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.643692][T21606] EXT4-fs: journaled quota format not specified [ 207.704497][T21587] Set syz1 is full, maxelem 65536 reached [ 207.752625][T21616] usb usb7: usbfs: process 21616 (syz.5.3120) did not claim interface 0 before use [ 207.800199][T21616] FAULT_INJECTION: forcing a failure. [ 207.800199][T21616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.813565][T21616] CPU: 1 UID: 0 PID: 21616 Comm: syz.5.3120 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 207.813649][T21616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.813665][T21616] Call Trace: [ 207.813673][T21616] [ 207.813718][T21616] __dump_stack+0x1d/0x30 [ 207.813745][T21616] dump_stack_lvl+0xe8/0x140 [ 207.813788][T21616] dump_stack+0x15/0x1b [ 207.813805][T21616] should_fail_ex+0x265/0x280 [ 207.813845][T21616] should_fail+0xb/0x20 [ 207.813882][T21616] should_fail_usercopy+0x1a/0x20 [ 207.813986][T21616] _copy_to_user+0x20/0xa0 [ 207.814136][T21616] simple_read_from_buffer+0xb5/0x130 [ 207.814177][T21616] proc_fail_nth_read+0x100/0x140 [ 207.814365][T21616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.814471][T21616] vfs_read+0x1a0/0x6f0 [ 207.814575][T21616] ? __rcu_read_unlock+0x4f/0x70 [ 207.814599][T21616] ? __fget_files+0x184/0x1c0 [ 207.814619][T21616] ? finish_task_switch+0xad/0x2b0 [ 207.814643][T21616] ksys_read+0xda/0x1a0 [ 207.814733][T21616] __x64_sys_read+0x40/0x50 [ 207.814774][T21616] x64_sys_call+0x2d77/0x2fb0 [ 207.814802][T21616] do_syscall_64+0xd2/0x200 [ 207.814827][T21616] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 207.814860][T21616] ? clear_bhb_loop+0x40/0x90 [ 207.814921][T21616] ? clear_bhb_loop+0x40/0x90 [ 207.814948][T21616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.814970][T21616] RIP: 0033:0x7fab9c4ad33c [ 207.815066][T21616] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 207.815090][T21616] RSP: 002b:00007fab9ab17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.815190][T21616] RAX: ffffffffffffffda RBX: 00007fab9c6d5fa0 RCX: 00007fab9c4ad33c [ 207.815202][T21616] RDX: 000000000000000f RSI: 00007fab9ab170a0 RDI: 0000000000000004 [ 207.815289][T21616] RBP: 00007fab9ab17090 R08: 0000000000000000 R09: 0000000000000000 [ 207.815306][T21616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.815322][T21616] R13: 0000000000000000 R14: 00007fab9c6d5fa0 R15: 00007fff89a04898 [ 207.815347][T21616] [ 208.036273][T21619] loop4: detected capacity change from 0 to 256 [ 208.045415][T21614] loop1: detected capacity change from 0 to 1024 [ 208.057171][T21614] EXT4-fs (loop1): invalid first ino: 9 [ 208.166799][T21617] lo speed is unknown, defaulting to 1000 [ 208.172946][T21617] lo speed is unknown, defaulting to 1000 [ 208.178969][T21617] lo speed is unknown, defaulting to 1000 [ 208.185698][T21617] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 208.220246][T21617] lo speed is unknown, defaulting to 1000 [ 208.254495][T21617] lo speed is unknown, defaulting to 1000 [ 208.262491][T21632] loop2: detected capacity change from 0 to 512 [ 208.279851][T21632] EXT4-fs: Ignoring removed nobh option [ 208.289814][T21617] lo speed is unknown, defaulting to 1000 [ 208.299908][T21632] EXT4-fs: journaled quota format not specified [ 208.762853][T21617] lo speed is unknown, defaulting to 1000 [ 208.769023][T21617] lo speed is unknown, defaulting to 1000 [ 208.775508][T21647] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3126'. [ 208.785347][T21644] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3126'. [ 208.890546][T21653] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3127'. [ 208.902404][T21650] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3127'. [ 209.001034][T21657] loop1: detected capacity change from 0 to 512 [ 209.008089][T21657] EXT4-fs: Ignoring removed nobh option [ 209.014155][T21657] EXT4-fs: journaled quota format not specified [ 209.204630][T21682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.212260][T21682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.220145][T21682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.227869][T21682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.239274][T21685] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3138'. [ 209.249213][T21679] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3138'. [ 209.274323][T21689] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3140'. [ 209.287845][T21684] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3140'. [ 209.342390][T21700] loop1: detected capacity change from 0 to 256 [ 209.352322][T21697] netlink: 'syz.5.3144': attribute type 10 has an invalid length. [ 209.352571][T21700] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3145'. [ 209.713260][T21718] loop2: detected capacity change from 0 to 512 [ 209.720068][T21718] EXT4-fs: Ignoring removed nobh option [ 209.726383][T21718] EXT4-fs: journaled quota format not specified [ 209.841574][T21726] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3152'. [ 209.993245][T21740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.000707][T21740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.008869][T21740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.016529][T21740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.400365][T21750] xt_cgroup: xt_cgroup: no path or classid specified [ 210.539081][T21750] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3160' sets config #1 [ 210.573617][T21751] wireguard0: entered promiscuous mode [ 210.579159][T21751] wireguard0: entered allmulticast mode [ 210.611985][T21744] Set syz1 is full, maxelem 65536 reached [ 210.619079][T21760] loop4: detected capacity change from 0 to 512 [ 210.626209][T21760] EXT4-fs: Ignoring removed nobh option [ 210.653467][T21760] EXT4-fs: journaled quota format not specified [ 210.708809][T21769] netlink: 'syz.3.3165': attribute type 10 has an invalid length. [ 210.722684][T21769] team0 (unregistering): Port device team_slave_0 removed [ 210.731886][T21769] team0 (unregistering): Port device team_slave_1 removed [ 210.770507][T21805] FAULT_INJECTION: forcing a failure. [ 210.770507][T21805] name failslab, interval 1, probability 0, space 0, times 0 [ 210.783297][T21805] CPU: 0 UID: 0 PID: 21805 Comm: syz.5.3167 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 210.783364][T21805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.783381][T21805] Call Trace: [ 210.783388][T21805] [ 210.783398][T21805] __dump_stack+0x1d/0x30 [ 210.783423][T21805] dump_stack_lvl+0xe8/0x140 [ 210.783445][T21805] dump_stack+0x15/0x1b [ 210.783466][T21805] should_fail_ex+0x265/0x280 [ 210.783554][T21805] ? inet6_rtm_newroute+0x5af/0x1020 [ 210.783640][T21805] should_failslab+0x8c/0xb0 [ 210.783694][T21805] __kmalloc_cache_noprof+0x4c/0x320 [ 210.783733][T21805] inet6_rtm_newroute+0x5af/0x1020 [ 210.783773][T21805] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 210.783815][T21805] ? __memcg_slab_free_hook+0x135/0x230 [ 210.783929][T21805] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 210.784043][T21805] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 210.784078][T21805] netlink_rcv_skb+0x120/0x220 [ 210.784201][T21805] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.784237][T21805] rtnetlink_rcv+0x1c/0x30 [ 210.784297][T21805] netlink_unicast+0x59e/0x670 [ 210.784335][T21805] netlink_sendmsg+0x58b/0x6b0 [ 210.784355][T21805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.784372][T21805] __sock_sendmsg+0x145/0x180 [ 210.784411][T21805] ____sys_sendmsg+0x345/0x4e0 [ 210.784450][T21805] ___sys_sendmsg+0x17b/0x1d0 [ 210.784492][T21805] __sys_sendmmsg+0x178/0x300 [ 210.784582][T21805] __x64_sys_sendmmsg+0x57/0x70 [ 210.784599][T21805] x64_sys_call+0x2f2f/0x2fb0 [ 210.784659][T21805] do_syscall_64+0xd2/0x200 [ 210.784682][T21805] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.784716][T21805] ? clear_bhb_loop+0x40/0x90 [ 210.784773][T21805] ? clear_bhb_loop+0x40/0x90 [ 210.784864][T21805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.784886][T21805] RIP: 0033:0x7fab9c4ae929 [ 210.784901][T21805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.784921][T21805] RSP: 002b:00007fab9ab17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 210.784946][T21805] RAX: ffffffffffffffda RBX: 00007fab9c6d5fa0 RCX: 00007fab9c4ae929 [ 210.784958][T21805] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 210.785037][T21805] RBP: 00007fab9ab17090 R08: 0000000000000000 R09: 0000000000000000 [ 210.785048][T21805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.785059][T21805] R13: 0000000000000000 R14: 00007fab9c6d5fa0 R15: 00007fff89a04898 [ 210.785076][T21805] [ 211.058047][T21810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.065342][T21810] IPv6: NLM_F_CREATE should be set when creating new route [ 211.137794][T21824] xt_cgroup: xt_cgroup: no path or classid specified [ 211.147402][T21826] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43823 sclass=netlink_audit_socket pid=21826 comm=syz.3.3175 [ 211.165536][T21825] loop3: detected capacity change from 0 to 1024 [ 211.172567][T21825] EXT4-fs: dax option not supported [ 211.210434][T21824] wireguard0: entered promiscuous mode [ 211.217557][T21824] wireguard0: entered allmulticast mode [ 211.230861][T21833] bridge0: entered promiscuous mode [ 211.241410][T21824] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3174' sets config #1 [ 211.251495][T21833] macvlan2: entered promiscuous mode [ 211.257980][T21833] bridge0: port 3(macvlan2) entered blocking state [ 211.264602][T21833] bridge0: port 3(macvlan2) entered disabled state [ 211.271464][T21833] macvlan2: entered allmulticast mode [ 211.276970][T21833] bridge0: entered allmulticast mode [ 211.290028][T21833] macvlan2: left allmulticast mode [ 211.295358][T21833] bridge0: left allmulticast mode [ 211.319000][T21833] bridge0: left promiscuous mode [ 211.336258][T21841] loop2: detected capacity change from 0 to 512 [ 211.348016][T21841] EXT4-fs: Ignoring removed nobh option [ 211.354304][T21841] EXT4-fs: journaled quota format not specified [ 211.506616][T21850] loop3: detected capacity change from 0 to 4096 [ 211.554601][T21850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.926410][T21856] bridge0: entered promiscuous mode [ 211.932786][T21851] Set syz1 is full, maxelem 65536 reached [ 211.938695][T21856] macvlan2: entered promiscuous mode [ 211.944989][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 211.945004][ T29] audit: type=1400 audit(2000000091.960:6368): avc: denied { relabelfrom } for pid=21859 comm="syz.4.3181" name="NETLINK" dev="sockfs" ino=36075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 211.956535][T21856] bridge0: port 3(macvlan2) entered blocking state [ 211.975495][T21860] SELinux: Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped). [ 211.981966][T21856] bridge0: port 3(macvlan2) entered disabled state [ 211.998178][ T29] audit: type=1400 audit(2000000092.010:6369): avc: denied { relabelto } for pid=21859 comm="syz.4.3181" name="NETLINK" dev="sockfs" ino=36075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0" [ 211.999350][T21856] macvlan2: entered allmulticast mode [ 212.032565][T21856] bridge0: entered allmulticast mode [ 212.032816][T21861] FAULT_INJECTION: forcing a failure. [ 212.032816][T21861] name failslab, interval 1, probability 0, space 0, times 0 [ 212.050782][T21861] CPU: 1 UID: 0 PID: 21861 Comm: syz.5.3180 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 212.050816][T21861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.050831][T21861] Call Trace: [ 212.050838][T21861] [ 212.050846][T21861] __dump_stack+0x1d/0x30 [ 212.050898][T21861] dump_stack_lvl+0xe8/0x140 [ 212.050923][T21861] dump_stack+0x15/0x1b [ 212.050995][T21861] should_fail_ex+0x265/0x280 [ 212.051068][T21861] ? alloc_pipe_info+0xae/0x350 [ 212.051090][T21861] should_failslab+0x8c/0xb0 [ 212.051110][T21861] __kmalloc_cache_noprof+0x4c/0x320 [ 212.051136][T21861] alloc_pipe_info+0xae/0x350 [ 212.051159][T21861] splice_direct_to_actor+0x592/0x680 [ 212.051229][T21861] ? __pfx_direct_splice_actor+0x10/0x10 [ 212.051258][T21861] ? selinux_file_permission+0x2f0/0x320 [ 212.051295][T21861] do_splice_direct+0xda/0x150 [ 212.051381][T21861] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 212.051412][T21861] do_sendfile+0x380/0x650 [ 212.051497][T21861] __x64_sys_sendfile64+0x105/0x150 [ 212.051520][T21861] x64_sys_call+0xb39/0x2fb0 [ 212.051539][T21861] do_syscall_64+0xd2/0x200 [ 212.051555][T21861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.051579][T21861] ? clear_bhb_loop+0x40/0x90 [ 212.051740][T21861] ? clear_bhb_loop+0x40/0x90 [ 212.051812][T21861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.051830][T21861] RIP: 0033:0x7fab9c4ae929 [ 212.051846][T21861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.051862][T21861] RSP: 002b:00007fab9aaf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 212.051878][T21861] RAX: ffffffffffffffda RBX: 00007fab9c6d6080 RCX: 00007fab9c4ae929 [ 212.051889][T21861] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a [ 212.051899][T21861] RBP: 00007fab9aaf6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.051909][T21861] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 212.051969][T21861] R13: 0000000000000000 R14: 00007fab9c6d6080 R15: 00007fff89a04898 [ 212.051986][T21861] [ 212.052261][T21856] macvlan2: left allmulticast mode [ 212.265976][T21856] bridge0: left allmulticast mode [ 212.272101][T21856] bridge0: left promiscuous mode [ 212.274083][T19729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.420626][T21871] FAULT_INJECTION: forcing a failure. [ 212.420626][T21871] name failslab, interval 1, probability 0, space 0, times 0 [ 212.433487][T21871] CPU: 0 UID: 0 PID: 21871 Comm: syz.4.3184 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 212.433519][T21871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.433532][T21871] Call Trace: [ 212.433538][T21871] [ 212.433544][T21871] __dump_stack+0x1d/0x30 [ 212.433567][T21871] dump_stack_lvl+0xe8/0x140 [ 212.433596][T21871] dump_stack+0x15/0x1b [ 212.433618][T21871] should_fail_ex+0x265/0x280 [ 212.433659][T21871] should_failslab+0x8c/0xb0 [ 212.433749][T21871] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 212.433782][T21871] ? nf_lwtunnel_net_init+0x30/0xd0 [ 212.433880][T21871] kmemdup_noprof+0x2b/0x70 [ 212.433912][T21871] nf_lwtunnel_net_init+0x30/0xd0 [ 212.433940][T21871] ops_init+0x22a/0x2e0 [ 212.433971][T21871] setup_net+0x124/0x2e0 [ 212.434074][T21871] copy_net_ns+0x55c/0x690 [ 212.434099][T21871] create_new_namespaces+0x20e/0x3d0 [ 212.434141][T21871] unshare_nsproxy_namespaces+0xe8/0x120 [ 212.434202][T21871] ksys_unshare+0x3d0/0x6d0 [ 212.434233][T21871] ? ksys_write+0x15f/0x1a0 [ 212.434278][T21871] __x64_sys_unshare+0x1f/0x30 [ 212.434330][T21871] x64_sys_call+0x2d4b/0x2fb0 [ 212.434353][T21871] do_syscall_64+0xd2/0x200 [ 212.434440][T21871] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.434468][T21871] ? clear_bhb_loop+0x40/0x90 [ 212.434490][T21871] ? clear_bhb_loop+0x40/0x90 [ 212.434513][T21871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.434536][T21871] RIP: 0033:0x7f3bfab9e929 [ 212.434551][T21871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.434604][T21871] RSP: 002b:00007f3bf9207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 212.434624][T21871] RAX: ffffffffffffffda RBX: 00007f3bfadc5fa0 RCX: 00007f3bfab9e929 [ 212.434636][T21871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000480 [ 212.434649][T21871] RBP: 00007f3bf9207090 R08: 0000000000000000 R09: 0000000000000000 [ 212.434662][T21871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.434674][T21871] R13: 0000000000000000 R14: 00007f3bfadc5fa0 R15: 00007ffcac112338 [ 212.434726][T21871] [ 212.755636][T21881] netlink: 'syz.3.3186': attribute type 10 has an invalid length. [ 212.881158][ T29] audit: type=1326 audit(2000000092.860:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.5.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 212.904726][ T29] audit: type=1326 audit(2000000092.860:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.5.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 212.928394][ T29] audit: type=1326 audit(2000000092.870:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.5.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 212.951971][ T29] audit: type=1326 audit(2000000092.870:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.5.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 212.975492][ T29] audit: type=1326 audit(2000000092.870:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.5.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 212.999419][ T29] audit: type=1326 audit(2000000092.870:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.5.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 213.022843][ T29] audit: type=1326 audit(2000000092.870:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.5.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 213.046362][ T29] audit: type=1326 audit(2000000092.870:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21887 comm="syz.5.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9c4ae929 code=0x7ffc0000 [ 213.288801][T21912] loop3: detected capacity change from 0 to 256 [ 214.161805][T21960] __nla_validate_parse: 11 callbacks suppressed [ 214.161829][T21960] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3203'. [ 214.178241][T21955] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3203'. [ 214.189265][T21961] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3204'. [ 214.206022][T21959] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3204'. [ 214.222116][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3201'. [ 214.304503][T21972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.312129][T21972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.329247][T21972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.336767][T21972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.367735][T21983] loop3: detected capacity change from 0 to 256 [ 214.377790][T21983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3210'. [ 214.518109][T21987] loop4: detected capacity change from 0 to 512 [ 214.524891][T21987] EXT4-fs: Ignoring removed nobh option [ 214.531194][T21987] EXT4-fs: journaled quota format not specified [ 214.645805][T21995] loop1: detected capacity change from 0 to 512 [ 214.668149][T21995] EXT4-fs: Ignoring removed nobh option [ 214.686043][T21995] EXT4-fs: journaled quota format not specified [ 214.735846][T22014] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3216'. [ 214.755304][T22004] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3216'. [ 215.393911][T22064] loop3: detected capacity change from 0 to 512 [ 215.401562][T22064] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.421008][T22064] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 215.436136][T22064] EXT4-fs (loop3): 1 truncate cleaned up [ 215.442538][T22064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.457711][T22064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3232'. [ 215.492464][T19729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.728182][T22075] loop3: detected capacity change from 0 to 4096 [ 215.738233][T22075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.978898][T22088] loop5: detected capacity change from 0 to 512 [ 215.995929][T22088] EXT4-fs: Ignoring removed nobh option [ 216.005902][T22088] EXT4-fs: journaled quota format not specified [ 216.168097][T22100] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3239'. [ 216.227219][T22114] FAULT_INJECTION: forcing a failure. [ 216.227219][T22114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.240474][T22114] CPU: 0 UID: 0 PID: 22114 Comm: syz.1.3249 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 216.240511][T22114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.240527][T22114] Call Trace: [ 216.240535][T22114] [ 216.240619][T22114] __dump_stack+0x1d/0x30 [ 216.240647][T22114] dump_stack_lvl+0xe8/0x140 [ 216.240672][T22114] dump_stack+0x15/0x1b [ 216.240692][T22114] should_fail_ex+0x265/0x280 [ 216.240798][T22114] should_fail+0xb/0x20 [ 216.240870][T22114] should_fail_usercopy+0x1a/0x20 [ 216.240918][T22114] _copy_from_user+0x1c/0xb0 [ 216.240945][T22114] xfrm_user_policy+0x19b/0x540 [ 216.241052][T22114] do_ipv6_setsockopt+0x13c5/0x22e0 [ 216.241084][T22114] ? kstrtoull+0x111/0x140 [ 216.241118][T22114] ? __rcu_read_unlock+0x4f/0x70 [ 216.241146][T22114] ? avc_has_perm_noaudit+0x1b1/0x200 [ 216.241297][T22114] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 216.241388][T22114] ipv6_setsockopt+0x59/0x130 [ 216.241465][T22114] rawv6_setsockopt+0x1d2/0x420 [ 216.241499][T22114] sock_common_setsockopt+0x66/0x80 [ 216.241578][T22114] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 216.241610][T22114] __sys_setsockopt+0x181/0x200 [ 216.241691][T22114] __x64_sys_setsockopt+0x64/0x80 [ 216.241727][T22114] x64_sys_call+0x2bd5/0x2fb0 [ 216.241761][T22114] do_syscall_64+0xd2/0x200 [ 216.241784][T22114] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 216.241841][T22114] ? clear_bhb_loop+0x40/0x90 [ 216.241874][T22114] ? clear_bhb_loop+0x40/0x90 [ 216.241919][T22114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.241940][T22114] RIP: 0033:0x7f95308ae929 [ 216.241955][T22114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.241974][T22114] RSP: 002b:00007f952ef17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.241997][T22114] RAX: ffffffffffffffda RBX: 00007f9530ad5fa0 RCX: 00007f95308ae929 [ 216.242012][T22114] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000003 [ 216.242028][T22114] RBP: 00007f952ef17090 R08: 000000000000005c R09: 0000000000000000 [ 216.242061][T22114] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.242089][T22114] R13: 0000000000000000 R14: 00007f9530ad5fa0 R15: 00007ffea4814b38 [ 216.242125][T22114] [ 216.481925][T22116] loop2: detected capacity change from 0 to 512 [ 216.488692][T22116] EXT4-fs: Ignoring removed nobh option [ 216.494941][T22116] EXT4-fs: journaled quota format not specified [ 216.514125][T19729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.080320][T22160] loop4: detected capacity change from 0 to 4096 [ 217.092169][T22160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.163857][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 217.163875][ T29] audit: type=1326 audit(2000000097.180:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22156 comm="syz.1.3262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95308ae929 code=0x0 [ 217.184543][T22168] loop5: detected capacity change from 0 to 1024 [ 217.200528][T22168] EXT4-fs (loop5): invalid first ino: 9 [ 217.267922][T22168] siw: device registration error -23 [ 217.536345][T22179] loop9: detected capacity change from 0 to 7 [ 217.543222][T22179] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.555172][T22179] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.563202][T22179] loop9: unable to read partition table [ 217.569138][T22179] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 217.569138][T22179] ) failed (rc=-5) [ 217.649004][T18549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.655276][T22190] loop2: detected capacity change from 0 to 512 [ 217.665527][T22190] EXT4-fs: Ignoring removed nobh option [ 217.672362][T22190] EXT4-fs: journaled quota format not specified [ 217.703917][T22198] netlink: 'syz.4.3268': attribute type 10 has an invalid length. [ 217.742011][ T29] audit: type=1107 audit(2000000097.760:6445): pid=22199 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 217.806697][ T29] audit: type=1400 audit(2000000097.820:6446): avc: denied { mount } for pid=22187 comm="syz.5.3266" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 217.906939][ T51] ================================================================== [ 217.915083][ T51] BUG: KCSAN: data-race in ppp_asynctty_receive / tty_set_termios [ 217.922945][ T51] [ 217.925291][ T51] write to 0xffff888104560d08 of 44 bytes by task 22210 on cpu 0: [ 217.933105][ T51] tty_set_termios+0xc0/0x8c0 [ 217.937807][ T51] set_termios+0x496/0x4e0 [ 217.942244][ T51] tty_mode_ioctl+0x379/0x5c0 [ 217.946940][ T51] ppp_asynctty_ioctl+0x13f/0x2d0 [ 217.951988][ T51] tty_ioctl+0x845/0xb80 [ 217.956261][ T51] __se_sys_ioctl+0xce/0x140 [ 217.960874][ T51] __x64_sys_ioctl+0x43/0x50 [ 217.965498][ T51] x64_sys_call+0x19a8/0x2fb0 [ 217.970210][ T51] do_syscall_64+0xd2/0x200 [ 217.974734][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.980646][ T51] [ 217.982993][ T51] read to 0xffff888104560d08 of 4 bytes by task 51 on cpu 1: [ 217.990385][ T51] ppp_asynctty_receive+0x75c/0xd40 [ 217.995610][ T51] tty_ldisc_receive_buf+0xbf/0xf0 [ 218.000762][ T51] tty_port_default_receive_buf+0x59/0x90 [ 218.006511][ T51] flush_to_ldisc+0x141/0x360 [ 218.011219][ T51] process_scheduled_works+0x4cb/0x9d0 [ 218.016701][ T51] worker_thread+0x582/0x770 [ 218.021319][ T51] kthread+0x489/0x510 [ 218.025407][ T51] ret_from_fork+0xda/0x150 [ 218.029924][ T51] ret_from_fork_asm+0x1a/0x30 [ 218.034710][ T51] [ 218.037040][ T51] value changed: 0x00000500 -> 0x00038000 [ 218.042768][ T51] [ 218.045102][ T51] Reported by Kernel Concurrency Sanitizer on: [ 218.051269][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 218.061958][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.072125][ T51] Workqueue: events_unbound flush_to_ldisc [ 218.077970][ T51] ================================================================== [ 218.155229][ T29] audit: type=1326 audit(2000000098.140:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22205 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e9cde929 code=0x7ffc0000 [ 218.178955][ T29] audit: type=1326 audit(2000000098.150:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22205 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f10e9cde929 code=0x7ffc0000 [ 218.202581][ T29] audit: type=1326 audit(2000000098.150:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22205 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e9cde929 code=0x7ffc0000 [ 218.225565][ T29] audit: type=1326 audit(2000000098.150:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22205 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e9cde929 code=0x7ffc0000 [ 218.248634][ T29] audit: type=1326 audit(2000000098.150:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22205 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e9cde929 code=0x7ffc0000 [ 218.271629][ T29] audit: type=1326 audit(2000000098.150:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22205 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e9cde929 code=0x7ffc0000 [ 218.294710][ T29] audit: type=1326 audit(2000000098.150:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22205 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e9cde929 code=0x7ffc0000 [ 218.380030][T22215] loop4: detected capacity change from 0 to 1024 [ 218.387421][T22215] EXT4-fs (loop4): invalid first ino: 9