last executing test programs: 1m20.898192846s ago: executing program 2 (id=1073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) setgid(0x0) kexec_load(0x6, 0x6, &(0x7f00000013c0)=[{&(0x7f0000001080)="3b13178dba5ab6e1f7e0d9044fdb576fcdff6ff8e666c3e27572f5cebb7b2858c651fada68d4367c5d", 0x29, 0x0, 0x5a4}, {&(0x7f00000010c0)="146b4b2ece4eb9112e7046d2b0c108df2fe79a2ca53b36c50c7c6f1db7b13d0a9a682a28aa632398524dc257e7b6d3bd033529d7568e973ad0912e4d513acfe6506f8c4f57779074e0866fa415130e4b7d73aa3a3d0ccee6772bdcbcd3ae02ff0b4c9c9ef9733378de404726e76250869e3a74ffe9613a6507aa6aa65930f3f5aad0b1d8e1cefdb2245b7429ce2584225fb9293a07f94adbb501b04949a068324d86168a55fe85e5fe815d7dca71", 0xae, 0x7ff, 0x5}, {&(0x7f0000001180)="f2926eaa8ae0f85c1faffe818d6562be128bc97d1dc6a208d36826a43e647c09688c456b9e9fb4081958c331d4a624b8eee40f3624d00d0dbef5bd8c7eb27473fae5b0d1fd1a95ad04d2e0a748dbd53fdf4f89c8827ea98103be0e2c49d7e63b71d5a276015f6c32eaf9af10cfd9af37e40bfb0e71a1843a357ccd4b517a5751ddc1d41c2bc0923513bd5d55ee28d6865254e7ba12", 0x95, 0xfff, 0x8}, {&(0x7f0000001240)="12f27076203baa6c6531c4e3c511b3da3dcf4885d081d93637af39b0f7cd906899810f99407b82d15e2311bf3f4b8699afdd84f87eca3c6d398fcf17d858cfa37c2afaad7b1e15fdaa035f3423256fd3e4e35d9f2bbb", 0x56, 0x1, 0x2}, {&(0x7f00000012c0)="971157e6dbba08cf90fcf4fd0e73effe0e080669a885f9b45c9469ab4b568336d5c9a2e35fa68fc31ec18104ff0a786a2105aa30f0239c6d463a518f1d8eed8f7874ccbb5f2b8ce31cba3a3570e4b369a00d0508435290fc5dcd", 0x5a, 0x5, 0x4}, {&(0x7f0000001340)="08f0f8f5a317cc522c45950a9889f2848cd8ec263c382706a99b8b95ce7da010c5472676ee4bca7a21185ff12157114de0e5a32a3d4153e3c964174869b1aff82c3d5acf0187734fb4473b568545c218d2106999f4a3ed8d9dc169952df485cd22b3fdae7056867c6ee3b2c8a76e58b55c22cb907b8a10dff9", 0x79, 0x5, 0xfffffffffffffffd}], 0x150000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) flock(r3, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1m20.792004355s ago: executing program 2 (id=1076): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60010182, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 1m20.674189174s ago: executing program 2 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) utime(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b501000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc40806d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb775505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d36c62785f32ecc294a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fcd097728955cf04fec692b01fadfc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab61a19"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m20.582215032s ago: executing program 2 (id=1079): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@nojournal_checksum}], [{@seclabel}]}, 0x1, 0x45f, &(0x7f0000000c80)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x4}]}}]}, 0x38}}, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) 1m19.742953289s ago: executing program 2 (id=1090): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000980)={0x0, 0x79a8, 0x8, 0x1, 0x29a}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x400}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m18.905772727s ago: executing program 2 (id=1103): creat(&(0x7f0000000080)='./file0\x00', 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290900000000000000250faa22000800030016b0e5d50b65c31bba3f74158d40abdd896e7c975059d286957594e0303076bc481a035bde7015ca7e1a3da7f4ad584c924d4d850f4bfbb072a23da0ba0b453bf95c7ea22b715b23e5c914db804556f3923294f1c570c2ca47ebad0a1dc28fae7889a75342386de7d97e3c461beabbdd44e499c03348a8044f215d75c03d4f11dc0c406a2a93c0c58242928a27bacdf13e0e263058f8e39dc215f735b42982d87a49c20621c431563252c3d264bc0dab1bf1469480e0ed7fb46dfb32c53febbe1efc86d5598e2fbd15b92b19", @ANYRES32=r5, @ANYBLOB="05002d000000000008002c0009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x447}, 0x18) kexec_load(0x1, 0x0, 0x0, 0x30000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000001680)=ANY=[@ANYBLOB="1805000000000000000000000000000000000000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e65766530000000000000000000140001"], 0x110}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) mbind(&(0x7f000053e000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1e000000090000000500000008000000c0000000", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="01000000050000000200b81114b2a989dfa6de25782400000700000403e5dbd4e401136e46601dc8ee97981f6a811d6deb9be56460a1e7bac8f33969ef70e762198121a5318e80952e0b7d1d0c9b64ec000084e7f058b87493bc90d24294b12f4048d7b0b1eb13779c007a1174dc9ec42571a3c9ffa93d576576db88d90d765c2fb7307eeb679c68f8ecfae7100913e6d0ca4e3580648ab4ecfd48789f4e431b66b7963757cf00939325da5d43"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b0000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000040), 0x10) 1m18.905493747s ago: executing program 32 (id=1103): creat(&(0x7f0000000080)='./file0\x00', 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290900000000000000250faa22000800030016b0e5d50b65c31bba3f74158d40abdd896e7c975059d286957594e0303076bc481a035bde7015ca7e1a3da7f4ad584c924d4d850f4bfbb072a23da0ba0b453bf95c7ea22b715b23e5c914db804556f3923294f1c570c2ca47ebad0a1dc28fae7889a75342386de7d97e3c461beabbdd44e499c03348a8044f215d75c03d4f11dc0c406a2a93c0c58242928a27bacdf13e0e263058f8e39dc215f735b42982d87a49c20621c431563252c3d264bc0dab1bf1469480e0ed7fb46dfb32c53febbe1efc86d5598e2fbd15b92b19", @ANYRES32=r5, @ANYBLOB="05002d000000000008002c0009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x447}, 0x18) kexec_load(0x1, 0x0, 0x0, 0x30000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000001680)=ANY=[@ANYBLOB="1805000000000000000000000000000000000000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e65766530000000000000000000140001"], 0x110}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) mbind(&(0x7f000053e000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1e000000090000000500000008000000c0000000", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="01000000050000000200b81114b2a989dfa6de25782400000700000403e5dbd4e401136e46601dc8ee97981f6a811d6deb9be56460a1e7bac8f33969ef70e762198121a5318e80952e0b7d1d0c9b64ec000084e7f058b87493bc90d24294b12f4048d7b0b1eb13779c007a1174dc9ec42571a3c9ffa93d576576db88d90d765c2fb7307eeb679c68f8ecfae7100913e6d0ca4e3580648ab4ecfd48789f4e431b66b7963757cf00939325da5d43"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b0000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000040), 0x10) 31.484009563s ago: executing program 4 (id=1839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) 31.447793296s ago: executing program 4 (id=1840): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 30.66293523s ago: executing program 4 (id=1852): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) read(r0, &(0x7f00000034c0)=""/4074, 0xfea) 30.607136674s ago: executing program 4 (id=1855): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 30.361592504s ago: executing program 4 (id=1859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xd, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x5, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000ac1414aa000000000000000000000000ac1e0001000000000000000000000000fffc000000000000c07fcd6d4533b259", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000b00"/112], 0xb8}}, 0x0) 29.990312074s ago: executing program 4 (id=1864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) 29.979346305s ago: executing program 33 (id=1864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) 16.43500107s ago: executing program 6 (id=2078): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (fail_nth: 7) 15.989638347s ago: executing program 6 (id=2083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/26], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7c0, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000080735af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) rmdir(&(0x7f0000000040)='./control\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="a774384bd57221bc000000000000", 0x0, 0x43b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x100}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a00000200"/15], 0x10}}, 0x0) 15.537167003s ago: executing program 6 (id=2094): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = semget$private(0x0, 0x3, 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) 15.437900431s ago: executing program 6 (id=2098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, 0x0, 0xfffffffffffffffd, 0x2, &(0x7f0000002600)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006d167e9a18010000202500000000002020207b1af8ff00000000bfa100000000000007ecfffff7ffffffb702000008000000b7030000040000008500000006000000850000005000000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) waitid(0x0, 0x0, 0xfffffffffffffffd, 0x2, &(0x7f0000002600)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006d167e9a18010000202500000000002020207b1af8ff00000000bfa100000000000007ecfffff7ffffffb702000008000000b7030000040000008500000006000000850000005000000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) (async) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) (async) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") (async) 15.388991255s ago: executing program 6 (id=2100): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x140f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) 14.554180703s ago: executing program 6 (id=2113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) inotify_init1(0x800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000010300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x8000003}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004041}, 0x20004091) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r4, 0x0, 0x0, 0x400000000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file2\x00', 0x0, 0x10, r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r9, 0x0) 14.540024494s ago: executing program 34 (id=2113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) inotify_init1(0x800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000010300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x8000003}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004041}, 0x20004091) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r4, 0x0, 0x0, 0x400000000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file2\x00', 0x0, 0x10, r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r9, 0x0) 1.950454832s ago: executing program 1 (id=2270): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf8, 0x587, &(0x7f0000002100)="$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") write$selinux_load(0xffffffffffffffff, 0x0, 0xd2) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x90000, &(0x7f0000000b40)={[{@bsdgroups}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffff8}}, {@grpjquota}, {@sb={'sb', 0x3d, 0x64}}, {@orlov}, {@quota}, {@data_err_abort}, {@nomblk_io_submit}]}, 0x66, 0x516, &(0x7f0000001180)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004"], 0x1c}}, 0x804) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xb6f8000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlockall(0x7) r1 = open(&(0x7f0000000180)='./file1\x00', 0x400, 0x42) fcntl$notify(r1, 0x402, 0x5) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000a851c38c2998af59f49665904c29efd5be94fc657db8fba183a59432d724f1abb560d760e588d1284d8555e4441de2db6514e05a77058cb1e08816df9fca442a0891885a101d8751e228bd82081ba4c9d5a9910bafbfb07bfcd908b588be71f96f7e319dc27b5b76a22392c9b622da687d18bac7e5f9562507f040d78b", @ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8200}, 0x94) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$PPPIOCDISCONN(r5, 0x7439) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) 1.678118294s ago: executing program 0 (id=2280): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1.410333906s ago: executing program 1 (id=2281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x140f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) 1.246990519s ago: executing program 1 (id=2284): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 1.23054624s ago: executing program 0 (id=2285): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) syslog(0x2, &(0x7f0000002300)=""/99, 0x63) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xdf0a, 0x100, 0x2, 0x26d}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.174098575s ago: executing program 1 (id=2286): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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") setresgid(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) r4 = epoll_create(0x8) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x70) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc5}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_lifetime={0x4, 0x4, 0xcc81, 0x8, 0x1, 0x6}]}, 0x98}, 0x1, 0x7}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x490, &(0x7f00000000c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000020101020000000000000000010000070c00198008"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) io_submit(r7, 0x1, &(0x7f0000001880)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x5, r6, 0x0, 0x0, 0x8}]) 1.070779053s ago: executing program 3 (id=2289): r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getcwd(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_gettime(r3, &(0x7f00000001c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000002", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf251f0000000800010079000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$FITHAW(r4, 0xc0045878) r5 = accept4$llc(r0, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000280)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x6, 0xfff3}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000001}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_list_modules(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000980)={0x7, 0x1, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/55, 0x37}, {&(0x7f0000000500)=""/2, 0x2}, {&(0x7f0000000640)=""/160, 0xa0}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000840)=""/63, 0x3f}, {&(0x7f0000000880)=""/59, 0x3b}], &(0x7f0000000940)=[0x266c, 0x7f, 0x4]}, 0x20) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f00000000c0)={0x42c, 0xa, 0x1}) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030e000002000700000000000004000900a800000053bb467d04f14562c5f463273ef4a720564f485af200000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002000000ac1414000000400000000000"], 0x70}, 0x1, 0x7}, 0x0) 1.029429297s ago: executing program 3 (id=2290): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000380)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0xd17, 0x0, 0x0, 0x1}}, 0x120) 973.886651ms ago: executing program 0 (id=2292): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffe, 0x6, 0xfe, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000cc0)="525b03fb204c", 0x0, 0x1, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) r3 = socket$l2tp(0x2, 0x2, 0x73) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) fchdir(r4) mkdir(&(0x7f0000000080)='./file1\x00', 0x100) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000008000d000c0000000200000001000000", @ANYRES32=0x1, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28, @ANYRES16=r8], 0x50) r9 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f00000000c0)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r10, 0x0, 0xf, &(0x7f0000000180)=0x8, 0x4) bind$inet(r10, &(0x7f00000006c0)={0x2, 0x4e24, @remote}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 949.160073ms ago: executing program 5 (id=2293): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) ftruncate(r1, 0x2007ffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="747261a34369b9a41db57ee2f9383731e5ae6e733d72646d612c706f72743d307830301c303030303030303030303030302c70726976706f72742c00"]) 926.192945ms ago: executing program 3 (id=2294): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000001e80), 0x0, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0xd0, 0xffffffff80000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000004c0)={0xfffffffffffffe15, 0x4d, 0x6}, 0x7395a0d2) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14d5be, 0x21) fallocate(r5, 0x1, 0x0, 0x1001f0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0}]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x88, 0x1, [@m_mirred={0x84, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x35, 0xa, "7c2fc5e9c7f08fdb62ad142d2782e0652b2e22e77b26aaaa9080f617a47f70ad889eb8bdcd56cc12d5eec8ad7b80a1c9a6"}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x2004e004) (fail_nth: 5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 880.969929ms ago: executing program 0 (id=2295): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x100b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x3, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000080)=0x80000001, 0x4) bind$inet(r6, &(0x7f0000000600)={0x2, 0x0, @local}, 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000040)="8f78c0e8b122c99d431db6ab0cc587ff79a24e3ad68dc34803e8", 0xffffff30}], 0x2}, 0x90) 880.318709ms ago: executing program 7 (id=2296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 876.768719ms ago: executing program 5 (id=2297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 852.037261ms ago: executing program 7 (id=2298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(0x0, 0x0, 0xfffaffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r5 = fsopen(&(0x7f0000001500)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x8, 0x1, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000cc0)="cd99a0036a5c", 0x6}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="100000000000000007000000"], 0x10}, 0x24008004) close(r4) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 792.844106ms ago: executing program 1 (id=2299): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x40040) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x1, 0x1}, 0xc) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=0x0) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f00000037c0)="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", 0xc00}, {&(0x7f0000000580)="426bf2937e0e30567821697d9b5dbcc3204b51f4174e00e11799efcf89f6b01c779720bb94018ca59b15c596f6d5dddffe887c729e2bf0259ef647d3aab3d7a5bb1a0e3c", 0x44}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) creat(&(0x7f0000000c00)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1dc) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef409000000b466f7108ea142f8cc89bca3611fb791643a5ee4b116027ba10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd68493e4edef3d93452a92307f00000e970300000000", 0xd8}], 0x1}, 0x48002) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70002a000000000000000000242d344febeef083080016400000000d54000d80140900000080000000000000000000000000003c14000400fe80000000000000000000db60b340466c599348faafc30ad202000000aa14000500fe80000000000000000000000000001a14000500200100001c0000000000000000000002b1052fe5f7b5a9999f5ecfa4a64a72fc65678f00"/161], 0x70}, 0x1, 0x0, 0x0, 0x4042015}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 792.546936ms ago: executing program 5 (id=2300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x4084) 787.788826ms ago: executing program 5 (id=2301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x140f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) 745.71309ms ago: executing program 5 (id=2302): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1c}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 439.019875ms ago: executing program 5 (id=2303): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x40040) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x1, 0x1}, 0xc) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=0x0) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f00000037c0)="caa0dfd7b6b427d5b4faba87700e718b790c6f155819ac4b5720754178766670ae5292f4fb3e52f96069c2702b524054f756e2b72b33a70d39e3eb7429c1a2f7b5cfcfd7ed49fa029f29a3c2e20217a68032ac78bbe61ee494f0c6ea18f8d5da51740e90bacd480828274b1e5f0c7088c14240f1b38feafc916c3a41e8d89bb186fa499b75d1be992bee3d4a76c8057c1256e384f16780bcddcaaebc423d829cfdf5e028a8fd9cb188266b223a6410da30a02c49805736e4988c0abc1682d3490e914a56deaafd1be5c9ccdfe40b594698d78d265f02b43522bd6683de43c74ef5e8ddb4ba9b49c0fe224db03eff97dc6aac48316560aaf979cef1d0aec20eee475dd5245bb7f263e51bca89640766d2738635b464468c179fd07e8a3822ef824fbd3852be8cdd106c78e80232d6b444a5934f30f259707a825e68d088f3994f9cf3ba7f80fed0c475ffedeff065d8587aa6f98a450dfcd9162ef02833e4046ba74b282e1c94fd48c7b2612c47f751aff1801353f959d0b17b7fca826aaa87b65b7f8707c265d419e28822e4da87366b562d44403e20352cd15d4c104a501bcc6a727f95eb57cf108d33887e8c0f9c43c19580f9938ab9a38ea3b52df3b3f5f4bb64db9446c3319d710bd8b973240d4271fb24b2d0dc06b044492834803aff1103d6b0970b97b8ee601d49e715db455e0a1505aa8f1a4f8a066b7be0f938af5be63c44d864bc7d0b699f20c90905692dda7a18d5d09b2c268524a36f87c5361fd1cb3420e1d3260adc5af667fede68d0cb5d81cacb6e90f243fe5fd2072ff63a92a7269d6e425633047db50d990a77ca10d1c3f7eb39d9ee53f5b7d4ca5b44a2f9597db03f6ce2b0d3d0b56036a56f7d7817618148c8e055683cf3daa2ad68000184740e914b52311b3eeff6d5aafe7f0c3d36b23a6a720dfdcdfd4ba57d7fec3a250432893823d55675202e1261f79bfe16ea3b7b0a3b6300541da17761eaedb8cf263bc6db92e1cadac21439643bb636fb558e2330c0c309ab4dc1910ed6943dbb979a838f75329f81949ffd86b61167e65ba1fe8b5495b80ed98b2597774254ea3daea72cccd7b1718eb5450912e0fb1385c52f9aa01698745b364bdd4e77be24d0f77fceb712ef5104887ae00bcef65ef19323960948c742ddd4aac52d5eb8a9113b66152e8f1590ae9dd29e0b60e6dad98bfe183bcf01f64d63cfa7f9be27e6f51eafde9cbf091e7e1cdb302db7282f0de2f7cc848280525aed832527bf3bb16a1f0e25d84ccd503f26b057f20e9351b4676701c5d490830e77e96ffa9b73c7bcb7b00b2ee80deabdeeb17ed6fa9234b04a3f85113903479d531317cc9fe7274406cf7953021561806498c810dc6dcb221f95978d0e60955d2cbfc01b9636bd0218f3f749a24c2c8f2849c87a2cc181fbd5bbb8bc468feb92deef18522084e77c47f8ce9ce2c9418d659bc1db39d8d5e4d13861cf5b7a679f81693afdcd44d6a7cb8861381122702dcf5b591fc073e3d7a1d4867efb5c188684c27af10fa5a6f5fd2bdb846965112af2b0f0243873be53a155b5a035fb9071a7d581faf29d2bb23d487b23a56e22bf576839d5d33940bcc5badc0421e3ad8d05e11250ff825d50efb51dd660dc77b959ccecf6f31cbc7c368e9f181b4a2d234656a79184b5b9ef22a9bd35ca524591a782613a0b6c36bea8f089f982ddc4be8849f520d0530fe5efb72236e50ab9a8d4f8839445b648a98ccfafcfbb3e093c231200c81260e2dab46be7c9a84d4f8c33d7be4028d46c703d8266054670497835a5c9b4b451c6b4850dde8e12bcaf1aa540e7b451376e22f85234319c36e6e204c786af9308ff11abadcb429a353d7bd8e6a4f134c99a65cafc482442bd6f31bfdd31ed5d7c0a7d5a3049b91d7df0b7830b798c59f60048f4897f713d783f9d4f8a28337923b16dfbcd228d52a78946b6b1e861f50523f0e2d8e892bc1aca580b34b7b194f80a373c9372eff473e83608e5ede0465d74f17385be659ea3ba4c631ffa4baf9c2df7e24cbc2f2dacf9cbf5e56108785e8e45ed3be58d37c1a0a9614f7b2062f262556d868d4903a05be09ab977ad49ff61f2dcbc3ba4b73764a72bf92042d0f62168b7b2a8fb9d0c7e30ec7a040f5c64154941b531bb592b5cc775a3d259b3ef91242048b04e13302e3829b37bc346e90211f30a1f18915959032ebc0c869b797b75f271a53647feb64b7acdd7621d5e2b1fa6433adaa23093693b99023b27f2ccb358c246eb706e4c977b88585dafde77df3813ec90480910cfa69b5e991040724741c225613a7e05a4381165610b4f0882a55c9d7d07b9460baff1afb5a6ccacef794410f9b42c4899b46554782477cfab0bc2126e4b0cf96df882d7fc85ed53721c4f0a28cbb0cdadfc544433be6df0cf4d98ecf22abe1da1a176df53a5a311cb8d695f8bfc5981f7119a254e59a2ae2810498bae2db12e61c2ac097630a74f50a8f9939b812ef0bd7418f0135f8d7257f657cbc446ca2fc586940b89c4155338f3ffebfb0d9ebd0449d7ddddc5e9ad3915aa42332bd7efb6811fd44b1656cef2c8164104224a022dfbb151523de4220845a2406075503ad95e7b96eac3ff38e08a8d0ce227f2bcc641f9d92a0f94620a35bfc88d5bbae6823d443c0caf7693fced17a2ff4cf824b50f8d4fafd07f626a9975f4c19821600a6bbec0f86a0b60b330719e37b344351ef254e2e37f413177ebc26952b6245e0777e553b1f42ef52adb557b30ec3cc37d78720e30f2853648fb9cc047a00a4d1d372587bd5670daeb9c70253f99b304d45289d7d559c994f3a375fb1ba5c7b28c2cc94bb94663daeabc82397f2215e73647b08d4fd4a598c3d6665f323e3c7a54dd6e639faf8d8555a4b386f870409624aae89c84e7525b4073d88d22bdad471e53c4f73fcf283f1bbfa2f346d387b88a6ff8cc1e4b7748aaae03bbf83c87f12e271bf421485e4cdabbed9edd6df3812754628af24ed9497a96bc49650e84b9326913528c19a0b98353e60ddbbe8af20f35b80783f6b18787070c303359a6fb52711c14eb284cf454db3eac3bc04e6ddbd84321dd57962a07f66a4c416747ae70b7f48f0ad64cf48a3a31addac003bbd98fcf4202906b0e2d3ec8e6c439fc0c6a18d60b1f7164cd770b20fefbc6a6af852e9d86930d5ef3804839ee2df8dfbfb4c5023f7ea206b80e38b46faf47ed6066f181417030150ee5adcef1848b1c82e0b91eac123d2817b512e18f2ae20cea77a821a1220d9f5cd3ed91a5b0b78ee1379b8a3b4227f91ee9a9d263897b3ea559b8781250e17e504f654a5120f702e97b37796ffdc59bc8f0a4429f3d272c456546172f54aebbb6423186b2e4a89cb807bb60ec4f08a1113d7a81b85704cb88030947f11876c7d9ce2d961a39b3ad40742f09041dd9c4a34f9d4910527e5bd3f704c36e51cf4b553af61c9f218cfa28cb576e2de4dd9076b594024d7434240ef069911e9f9f38562a4903be0994a785f81dccdcf2782368fb45e0c833bd5db21bf76886dc9ed4cf67edffe2961d27b01a44ef96f19e6d1223f2e771a1722dfeb109a8e5bebfd47da4d0a10626d3a6f4d84b4532369f2540ea3b29feddc14f99fb52c84f9f9873701352d32930342f2a219c2fdff893e78bf94313d03e64bb6234c17360950bbcedc15fa4ed09502dcbd123043259b4bc680cd29eca7336df39302bc5c843a35e5e9e570374de79a28122d4aab7dee134105af5b87f22243ec163ef57e4d3a164e2841607a375054ceadbc70086c140b5e3997021dcedc16b38b06cfb285095226f525358414cda7089fb12f9e4b7af1b25102895fa0c150e217c2ee2607cbd270b0c71de685bf8ee567704bc1d384058bba91157de7d9387b7bbb1254fd2a300ab7008751321d9b8b024380c53ae299329aba6993ba3e58a03885e65cced87c974088e3e29d9e8209eb6a598b3bb0bb45eb8d67e7bc72a8f7f84a78e47c3a2ad537eb321ed38dacdb9b1d15de7c10466ea7c3451ceefd6e3b558bf22c3ec578668d3333140c91e2370283600f1029bc3cb2576cf5435f6b193bd526574626fc2a115dac423558fb8bff24fd7d7056bba14707fe72d57ea64192a4376cdc47e3d07feeb9b6836b106765ced2b990ccdbf4d8c577a911fb3aaa5a354da50683f910549e4c141d4f0aae77029dbf9edeb5d131394f296697920d6d013424d9372655e5796da79a2a8ce16dcdc1a31691ecf64858d2a356c2780f15fbff5d493001a26e93f2b91912bd4fbe6c5b6432997474f48b918c8927dadb0b4e7a75d22fa7ecd20c745bac89d0e555af78c4aaa7efe7f090bdbb35dfdf7110747c43852f461dea8bb9487106eaf889d508480c0e70aa9985e7b55aa968ce8b119583a8595d3cdd77c16e8ec1687fefa485514615969aa5bbba4d3b2f71cd479d01cbfb0d619679bc67cf528dbeb89df02859b1388afaddd3ed9a1e4a528b311ba9e777079dcce6743a81762871486b55a236f61ac0a364a11bbd9cdf2133a37cf4dc1a4c8ba81ad304583e14c7f7cc9a786330524a89dd8e8ae3477b329da1235f21f9c4c49fc6b1709d00f0bfb42aa7bca202ec783bf540f16fd9ee16a310534c1eed2cd00547a8d319f3ab8115cb85f46b71549e4b3960a1c1952fd638468e2ed06d84b0799a2a1fb65a20206a9c3adcc5e0c3e1f8ef5b5c252d0d7bf8b843c580808d1890bf1e77336ab4b536e15c364fd78aab00bef0099121b97256b3ac39f5724c1927ab10e729d2f6346b021bd6d076319be7e7370b8bacd761a105c6014429b2ace72389ae47ebcd395d27a1284d8ca6435d13d19414420b75b70316d4a493dc1dc2e61ff2c127cb25eda856fa25f7bd7635802b81298ed453c6d45d81d0fc6e815dd6a7b5284f7f0623b7037c0505c6894dff77c857a7a93e03ccf2e1ce9a3c8c6be789c0b04c430731b29ea0df88b5761ba7c524460bb7324268621488e9f6cce81abef784caea457c61f31cdcdbb921b8cabf41e5053e45eb4b092b0aff6a64f2d98584cf009fce4d4ae44dbdbf2365f1b2e953764dfc2d9d7bc05fa60d0729c7625d02e65fb9eed9c679e6dc126d7350f981b1ddf5e2b3cb32e0a98f8fe92d1994a1b912b3def930c30f006c9ee6b10db34cad6051adc14fa97c81a8f01e1e7de46b92b8157dccc7407e9aabfc19aaad87d134d417cb3e49c193f4ad6cc2b43de8dd2a151b2d040f9c0b5ee0b31486b758cdc54d7a8089b0ff4ddaa28f54fa43bd519a1ffaf754437b59aec7f68309270980e4f047b14c5dc0c8cf7712776d02fa57472ad56661dc03e55c92f725375a4fc523ef0a9ece485d6c8617e716725c8fe2569a7e7d0f9da80a990a93aa9a3199366c9453ec2df8f956df372967514c8bdf178009dd261275c37c6b5d49f442715468dc4a432d7f709a16478283c33ca323765476fdb058452862629275432f0863bcdcd4665d0f3d0298c408f262bb09ccaba57986f88f51274c1ad42e24567a36734e329a074fcee1ef7df15f605b37c2f3078072085d7a8642627cd2070dc94090bfb58176750b160f1b2904ba59bc0f04af88dd022f95f7e3cc2817c3733df27e4bce9d83b7abd600d12ccc3c21c83ff79833befb9bccd61e50d41b4ce18ac8dd36e75c985a197cadd88aa37a2cb0a7d8d0bd710e63fee9065c1d65c480d49e7b89265b2d64e2d889e07f14f81d6a32964baa208c669f47928dd55d5c0278111be57ed243d3fb39eb857914f870d95e5ebc035a1fe50c656be4fda2a", 0x1000}, {&(0x7f0000000580)="426bf2937e0e30567821697d9b5dbcc3204b51f4174e00e11799efcf89f6b01c779720bb94018ca59b15c596f6d5dddffe887c729e2bf0259ef647d3aab3d7a5bb1a0e3c", 0x44}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) creat(&(0x7f0000000c00)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1dc) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef409000000b466f7108ea1", 0x6c}], 0x1}, 0x48002) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70002a000000000000000000242d344febeef083080016400000000d54000d80140900000080000000000000000000000000003c14000400fe80000000000000000000db60b340466c599348faafc30ad202000000aa14000500fe80000000000000000000000000001a14000500200100001c0000000000000000000002b1052fe5f7b5a9999f5ecfa4a64a72fc65678f00"/161], 0x70}, 0x1, 0x0, 0x0, 0x4042015}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 421.031816ms ago: executing program 7 (id=2304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000040)=""/39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) 366.26479ms ago: executing program 7 (id=2305): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/26], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7c0, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000080735af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) rmdir(&(0x7f0000000040)='./control\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="a774384bd57221bc000000000000", 0x0, 0x43b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0x100}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a00000200"/15], 0x10}}, 0x0) 365.94922ms ago: executing program 3 (id=2306): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18028000000000000000856238446d2a953d8cdc0862652f289e306af95d864210cbbd70a0c868e28b8d63df00ca34e29a882b785f2c52769d3aeda765cb374097dd27a7edc5259f1c2cacef70733959972a5ee95ee37b3a1a6633f7de0419e86e92150460b65836154b"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x8, 0x10, 0xe000000000000000, 0xb82}, &(0x7f0000000400)=0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x0) preadv2(r3, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000200)) creat(0x0, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') pipe(0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000efff"], 0x50) 226.839251ms ago: executing program 3 (id=2307): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) ftruncate(r1, 0x2007ffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="747261a34369b9a41db57ee2f9383731e5ae6e733d72646d612c706f72743d307830301c303030303030303030303030302c70726976706f72742c00"]) 195.813214ms ago: executing program 7 (id=2308): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60010182, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 185.971215ms ago: executing program 3 (id=2309): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000001e80), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@getchain={0x6c, 0x66, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff7, 0xfff2}, {0x10, 0xfff2}, {0xc, 0xfff1}}, [{0x8, 0xb, 0x200}, {0x8, 0xb, 0x10000005}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xae}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r7, 0xcc, 0xffffffff7fbffffd) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r6, @ANYRES8=r6], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000004c0)={0xfffffffffffffe15, 0x4d, 0x6}, 0x7395a0d2) r10 = open(&(0x7f00000001c0)='./file1\x00', 0x14d5be, 0x21) fallocate(r10, 0x1, 0x0, 0x1001f0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r12, 0x0) r13 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x2c, &(0x7f00000001c0)=0x563d, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") 89.717333ms ago: executing program 7 (id=2310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)={0x2e8, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x62, 0x3, "8aa1e675c3b332958a1bc56f3426e3a343fd361e986e7f832112db1c4b8191c432b1603eabd2481481d7cf53beaec3ec962f6a3a2a304d50c7373fee922a33a81448ba67a1bb707d3e238426d3816e7ed12108945a567eff4b16413c1b01"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "1dd872aaec46962f492b47bc389893fcc1466d4db7e2387655055b96b1703ecaaa5401"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5103c7b4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4b}]}, @TIPC_NLA_MEDIA={0x158, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d4e4375}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffd9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3678210a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xbc}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10af}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x1}, 0x85) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x150, 0x150, 0x260, 0xf8010000, 0x3b8, 0x238, 0x238, 0x3b8, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'virt_wifi0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, 0x0, 0x20000840) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000180)={[{@grpquota}, {@block_validity}, {@grpid}, {@oldalloc}]}, 0x1, 0x504, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep07W3gSS2FH8+UijeW/erL/vbXbei7/Z+AUwtu5ExEFETEbEuxExl19P8iPe6hzpfZ8cPl49Ony8mkS7/c7fk6w9vRY9fyZ1O3/NUkR871sRP0yejNvc299cqdWqO3l9oVXfXmju7d/fqK+sV9erW5XK8tLy4hsPXq9c2lhfqk/mpS9+/LuDr/047dZsfqV3HJepM/TicZzURER85yqCjcCtfDyTo+4I/5dCRDwfES9nz/9c3Mq+mgDATdZuz0V7rrd+LDlZBQBuikKWA0sK5TwXMBuFQrncyeG9EDOFWqPZuveosbu11smVzUex8GijVl3Mc4XzUUzS+lJW/rReOVV/EBHPRcTPpqazenm1UVsb5Tc+ADDGbp9a//811Vn/AYAbrjTqDgAAQ2f9B4DxY/0HgPFj/QeA8dNZ/6dH3Q0AYIi8/weA8WP9B4Cx8t23306P9lH++ddr7+3tbjbeu79WbW6W67ur5dXGznZ5vdFYzz6zp37W69Uaje2l12L3/fmvbzdbC829/Yf1xu5W62H2ud4Pq8XsroMhjAwAGOS5lz76Y5KuyG9OZ0f07OVQHGnPgKtWGHUHgJG5NeoOACNjty8YXxd4j1+M+KkUAdwAfbboPaHU7xeE2u12++q6BFyxu5+T/4dx1ZP/97+AYczI/8P4kv+H8dVuJ+fd5D/OeyMAcL3J8QMDfv7/fH7+df7DgR+snb7jw6vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxv3f1/y/le4LNRKJTLEc9ExHwUk0cbtepiRDwbEX+YKk6l9aUR9xkAuKjCX5J8/6+7c6/Onmh68fZxcTIifvSLd37+/kqrtfP7iMnkH1Pd660P8+uV4fceADhbd53Ozj1v5D85fLzaPYbZn79+MyJKnfhHh5NxdBx/IiaycymKETHzzySvdyQ9uYuLOPggIj7bb/xJzGY5kM7Op6fjp7GfGWr8won4haytc07/Lj5zCX2BcfNROv+81e/5K8Sd7Nz/+S9lM9TF5fNf+lKrR9kc+Gn87vx3a8D8d+e8MV777bc7pekn2z6I+PxERDf2Uc/8042fDIj/6jnj/+kLL748qK39y4i70T9+b6yFVn17obm3f3+jvrJeXa9uVSrLS8uLbzx4vbKQ5agXBq8Gf3vz3rOD2tLxzwyIXzpj/F8+5/h/9Z93v/+lp8T/6iv94hfihafET9fEr5wz/srMb0qD2tL4awPGf9bX/94543/85/0ntg0HAEanube/uVKrVXcUFK5/If0new260bfwjWHFmoz+TT95pfNMn2rqfu//P8YaNGNcRtYNuA6OH/qI+PeoOwMAAAAAAAAAAAAAAPQ1jN9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLn+GwAA//+hm8cd") sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000034000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) (async) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r9, 0xffffffffffffffff, 0x2f}, 0x20) 2.1618ms ago: executing program 0 (id=2311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x4084) 1.9264ms ago: executing program 0 (id=2312): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (fail_nth: 3) 0s ago: executing program 1 (id=2313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(0x0, 0x0, 0xfffaffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r5 = fsopen(&(0x7f0000001500)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x8, 0x1, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000cc0)="cd99a0036a5c", 0x6}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="100000000000000007000000"], 0x10}, 0x24008004) close(r4) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): :856kB writeback:0kB shmem:5084kB kernel_stack:4672kB pagetables:5564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 140.684865][ T9400] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.713972][ T9400] lowmem_reserve[]: 0 2883 7862 7862 [ 140.719433][ T9400] Node 0 DMA32 free:2949316kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952848kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 140.750311][ T9400] lowmem_reserve[]: 0 0 4978 4978 [ 140.755567][ T9400] Node 0 Normal free:4535120kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36052kB inactive_anon:0kB active_file:89088kB inactive_file:9936kB unevictable:4096kB writepending:832kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:7100kB local_pcp:4932kB free_cma:0kB [ 140.764781][ T9405] loop5: detected capacity change from 0 to 2048 [ 140.788276][ T9400] lowmem_reserve[]: 0 0 0 0 [ 140.799397][ T9400] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.813020][ T9400] Node 0 DMA32: 5*4kB (M) 4*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949316kB [ 140.829346][ T9400] Node 0 Normal: 389*4kB (UME) 814*8kB (UM) 534*16kB (UME) 427*32kB (UME) 223*64kB (UME) 131*128kB (UME) 112*256kB (UME) 116*512kB (UME) 81*1024kB (UME) 30*2048kB (UME) 1035*4096kB (UM) = 4533124kB [ 140.849360][ T9400] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 140.856816][ T9405] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.858771][ T9400] 26227 total pagecache pages [ 140.875499][ T9400] 0 pages in swap cache [ 140.879759][ T9400] Free swap = 124996kB [ 140.884014][ T9400] Total swap = 124996kB [ 140.888221][ T9400] 2097051 pages RAM [ 140.892128][ T9400] 0 pages HighMem/MovableOnly [ 140.892883][ T9405] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1805: bg 0: block 120: padding at end of block bitmap is not set [ 140.897205][ T9400] 80439 pages reserved [ 141.025451][ T29] audit: type=1326 audit(2000000048.170:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.1.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae72aebe9 code=0x7ffc0000 [ 141.049125][ T29] audit: type=1326 audit(2000000048.180:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.1.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f8ae72aebe9 code=0x7ffc0000 [ 141.081215][ T9416] netlink: zone id is out of range [ 141.088662][ T9416] netlink: zone id is out of range [ 141.093943][ T9416] netlink: zone id is out of range [ 141.099301][ T9416] netlink: zone id is out of range [ 141.101545][ T9424] FAULT_INJECTION: forcing a failure. [ 141.101545][ T9424] name failslab, interval 1, probability 0, space 0, times 0 [ 141.117405][ T9424] CPU: 0 UID: 0 PID: 9424 Comm: syz.1.1812 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 141.117435][ T9424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.117448][ T9424] Call Trace: [ 141.117455][ T9424] [ 141.117463][ T9424] __dump_stack+0x1d/0x30 [ 141.117589][ T9424] dump_stack_lvl+0xe8/0x140 [ 141.117691][ T9424] dump_stack+0x15/0x1b [ 141.117712][ T9424] should_fail_ex+0x265/0x280 [ 141.117736][ T9424] ? __pfx_ip6_dst_gc+0x10/0x10 [ 141.117779][ T9424] should_failslab+0x8c/0xb0 [ 141.117865][ T9424] kmem_cache_alloc_noprof+0x50/0x310 [ 141.117897][ T9424] ? dst_alloc+0xbd/0x100 [ 141.117920][ T9424] ? __pfx_ip6_dst_gc+0x10/0x10 [ 141.117946][ T9424] dst_alloc+0xbd/0x100 [ 141.117968][ T9424] ip6_pol_route+0x6bf/0xb40 [ 141.118071][ T9424] ? ip6_pol_route+0x389/0xb40 [ 141.118141][ T9424] ip6_pol_route_output+0x40/0x50 [ 141.118245][ T9424] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 141.118347][ T9424] fib6_rule_lookup+0x112/0x470 [ 141.118367][ T9424] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 141.118397][ T9424] ip6_route_output_flags+0x1e0/0x2c0 [ 141.118476][ T9424] ip6_dst_lookup_tail+0xb6/0xab0 [ 141.118512][ T9424] ? __account_obj_stock+0x211/0x350 [ 141.118539][ T9424] ? refill_obj_stock+0x254/0x2e0 [ 141.118572][ T9424] ? __rcu_read_unlock+0x4f/0x70 [ 141.118595][ T9424] ip6_sk_dst_lookup_flow+0x47d/0x580 [ 141.118681][ T9424] ? xas_load+0x413/0x430 [ 141.118706][ T9424] ? __rcu_read_unlock+0x4f/0x70 [ 141.118728][ T9424] udpv6_sendmsg+0x1109/0x1590 [ 141.118753][ T9424] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 141.118800][ T9424] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 141.118854][ T9424] inet6_sendmsg+0xac/0xd0 [ 141.118880][ T9424] __sock_sendmsg+0x8b/0x180 [ 141.118932][ T9424] ____sys_sendmsg+0x345/0x4e0 [ 141.118957][ T9424] ___sys_sendmsg+0x17b/0x1d0 [ 141.118995][ T9424] __sys_sendmmsg+0x178/0x300 [ 141.119023][ T9424] __x64_sys_sendmmsg+0x57/0x70 [ 141.119066][ T9424] x64_sys_call+0x1c4a/0x2ff0 [ 141.119090][ T9424] do_syscall_64+0xd2/0x200 [ 141.119115][ T9424] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 141.119198][ T9424] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 141.119308][ T9424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.119342][ T9424] RIP: 0033:0x7f8ae72aebe9 [ 141.119360][ T9424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.119378][ T9424] RSP: 002b:00007f8ae5d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.119476][ T9424] RAX: ffffffffffffffda RBX: 00007f8ae74d5fa0 RCX: 00007f8ae72aebe9 [ 141.119488][ T9424] RDX: 0000000000000002 RSI: 0000200000000940 RDI: 0000000000000003 [ 141.119500][ T9424] RBP: 00007f8ae5d17090 R08: 0000000000000000 R09: 0000000000000000 [ 141.119511][ T9424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.119522][ T9424] R13: 00007f8ae74d6038 R14: 00007f8ae74d5fa0 R15: 00007fff0b3b57e8 [ 141.119620][ T9424] [ 141.131033][ T29] audit: type=1326 audit(2000000048.220:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.1.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae72aebe9 code=0x7ffc0000 [ 141.443771][ T29] audit: type=1326 audit(2000000048.220:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9420 comm="syz.1.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae72aebe9 code=0x7ffc0000 [ 141.468483][ T6962] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 141.571822][ T9438] loop1: detected capacity change from 0 to 512 [ 141.598256][ T9438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.613523][ T9438] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.668960][ T23] hid-generic 0000:0D17:0000.0007: item fetching failed at offset 0/2 [ 141.677732][ T23] hid-generic 0000:0D17:0000.0007: probe with driver hid-generic failed with error -22 [ 141.708291][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.799936][ T9450] loop0: detected capacity change from 0 to 128 [ 141.807524][ T9450] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.825329][ T9450] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.875585][ T9289] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.006112][ T9447] loop3: detected capacity change from 0 to 512 [ 142.012981][ T9447] EXT4-fs: Ignoring removed nobh option [ 142.018615][ T9447] EXT4-fs: Ignoring removed oldalloc option [ 142.024655][ T9447] ext2: Unknown parameter 'smackfsfloor' [ 142.103573][ T9467] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 142.122469][ T9468] IPv6: Can't replace route, no match found [ 142.153524][ T9471] loop3: detected capacity change from 0 to 512 [ 142.160554][ T9471] /dev/loop3: Can't open blockdev [ 142.165542][ T9467] loop4: detected capacity change from 0 to 8192 [ 142.172690][ T9467] vfat: Unknown parameter '‡±¿í§¾XfÙ…C ê' [ 142.220152][ T9474] loop4: detected capacity change from 0 to 1024 [ 142.244644][ T9474] ext4: Unknown parameter 'fsuuid' [ 142.278564][ T9479] loop0: detected capacity change from 0 to 2048 [ 142.314647][ T3961] loop0: p1 < > p4 [ 142.321092][ T3961] loop0: p4 size 8388608 extends beyond EOD, truncated [ 142.339669][ T9479] loop0: p1 < > p4 [ 142.345502][ T9479] loop0: p4 size 8388608 extends beyond EOD, truncated [ 142.455273][ T9489] wireguard0: entered promiscuous mode [ 142.972043][ T48] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 142.982991][ T9507] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 143.183527][ T9507] loop1: detected capacity change from 0 to 8192 [ 143.196076][ T9507] vfat: Unknown parameter '‡±¿í§¾XfÙ…C ê' [ 143.220850][ T9519] net_ratelimit: 7 callbacks suppressed [ 143.220869][ T9519] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 143.247782][ T9521] FAULT_INJECTION: forcing a failure. [ 143.247782][ T9521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.261116][ T9521] CPU: 0 UID: 0 PID: 9521 Comm: syz.3.1845 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 143.261227][ T9521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.261243][ T9521] Call Trace: [ 143.261250][ T9521] [ 143.261259][ T9521] __dump_stack+0x1d/0x30 [ 143.261283][ T9521] dump_stack_lvl+0xe8/0x140 [ 143.261301][ T9521] dump_stack+0x15/0x1b [ 143.261317][ T9521] should_fail_ex+0x265/0x280 [ 143.261335][ T9521] should_fail+0xb/0x20 [ 143.261428][ T9521] should_fail_usercopy+0x1a/0x20 [ 143.261451][ T9521] _copy_from_user+0x1c/0xb0 [ 143.261484][ T9521] ___sys_sendmsg+0xc1/0x1d0 [ 143.261536][ T9521] __x64_sys_sendmsg+0xd4/0x160 [ 143.261672][ T9521] x64_sys_call+0x191e/0x2ff0 [ 143.261692][ T9521] do_syscall_64+0xd2/0x200 [ 143.261717][ T9521] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.261740][ T9521] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 143.261798][ T9521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.261820][ T9521] RIP: 0033:0x7f5019c5ebe9 [ 143.261835][ T9521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.261865][ T9521] RSP: 002b:00007f50186a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.261960][ T9521] RAX: ffffffffffffffda RBX: 00007f5019e86090 RCX: 00007f5019c5ebe9 [ 143.261974][ T9521] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000005 [ 143.261986][ T9521] RBP: 00007f50186a6090 R08: 0000000000000000 R09: 0000000000000000 [ 143.261997][ T9521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.262009][ T9521] R13: 00007f5019e86128 R14: 00007f5019e86090 R15: 00007ffd3bab3718 [ 143.262027][ T9521] [ 143.262411][ T9519] lo speed is unknown, defaulting to 1000 [ 143.263421][ T3474] hid-generic 0000:0D17:0000.0008: unknown main item tag 0x0 [ 143.285200][ T9519] lo speed is unknown, defaulting to 1000 [ 143.381201][ T9519] lo speed is unknown, defaulting to 1000 [ 143.385350][ T3474] hid-generic 0000:0D17:0000.0008: unknown main item tag 0x0 [ 143.483467][ T3474] hid-generic 0000:0D17:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 143.493318][ T9531] loop3: detected capacity change from 0 to 2048 [ 143.604143][ T9531] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.616916][ T9534] fido_id[9534]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.636121][ T9544] loop5: detected capacity change from 0 to 2048 [ 143.647161][ T9548] loop4: detected capacity change from 0 to 2048 [ 143.656842][ T9531] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1848: bg 0: block 120: padding at end of block bitmap is not set [ 143.689860][ T9544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.706030][ T9548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.738418][ T9544] netlink: 'syz.5.1854': attribute type 32 has an invalid length. [ 143.746344][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1854'. [ 143.758410][ T9549] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1851'. [ 143.778828][ T9544] (unnamed net_device) (uninitialized): option coupled_control: invalid value (110) [ 143.804042][ T449] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 143.815208][ T9557] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 143.836168][ T3305] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 143.876184][ T9544] lo speed is unknown, defaulting to 1000 [ 143.897726][ T9544] lo speed is unknown, defaulting to 1000 [ 143.904461][ T9546] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 143.944408][ T9557] loop0: detected capacity change from 0 to 8192 [ 143.946362][ T4789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.991984][ T9544] lo speed is unknown, defaulting to 1000 [ 144.001369][ T9557] vfat: Unknown parameter '‡±¿í§¾XfÙ…C ê' [ 144.068193][ T36] hid-generic 0000:0D17:0000.0009: unknown main item tag 0x0 [ 144.075879][ T36] hid-generic 0000:0D17:0000.0009: unknown main item tag 0x0 [ 144.097958][ T36] hid-generic 0000:0D17:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 144.141016][ T9585] fido_id[9585]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.208201][ T9364] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.233818][ T9592] netlink: 'syz.0.1863': attribute type 21 has an invalid length. [ 144.334112][ T6962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.366541][ T9364] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.437554][ T9364] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.525966][ T9364] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.662540][ T9607] FAULT_INJECTION: forcing a failure. [ 144.662540][ T9607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.676133][ T9607] CPU: 0 UID: 0 PID: 9607 Comm: syz.1.1868 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 144.676165][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.676177][ T9607] Call Trace: [ 144.676183][ T9607] [ 144.676229][ T9607] __dump_stack+0x1d/0x30 [ 144.676250][ T9607] dump_stack_lvl+0xe8/0x140 [ 144.676268][ T9607] dump_stack+0x15/0x1b [ 144.676283][ T9607] should_fail_ex+0x265/0x280 [ 144.676304][ T9607] should_fail+0xb/0x20 [ 144.676335][ T9607] should_fail_usercopy+0x1a/0x20 [ 144.676362][ T9607] _copy_from_user+0x1c/0xb0 [ 144.676395][ T9607] ___sys_sendmsg+0xc1/0x1d0 [ 144.676433][ T9607] __x64_sys_sendmsg+0xd4/0x160 [ 144.676513][ T9607] x64_sys_call+0x191e/0x2ff0 [ 144.676533][ T9607] do_syscall_64+0xd2/0x200 [ 144.676556][ T9607] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 144.676579][ T9607] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 144.676660][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.676685][ T9607] RIP: 0033:0x7f8ae72aebe9 [ 144.676701][ T9607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.676718][ T9607] RSP: 002b:00007f8ae5d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.676738][ T9607] RAX: ffffffffffffffda RBX: 00007f8ae74d5fa0 RCX: 00007f8ae72aebe9 [ 144.676771][ T9607] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 144.676785][ T9607] RBP: 00007f8ae5d17090 R08: 0000000000000000 R09: 0000000000000000 [ 144.676800][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.676824][ T9607] R13: 00007f8ae74d6038 R14: 00007f8ae74d5fa0 R15: 00007fff0b3b57e8 [ 144.676858][ T9607] [ 144.861889][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 144.861907][ T29] audit: type=1326 audit(2000000052.010:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.5.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 144.987597][ T9617] loop3: detected capacity change from 0 to 2048 [ 144.999725][ T29] audit: type=1326 audit(2000000052.120:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.5.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 145.023505][ T29] audit: type=1326 audit(2000000052.120:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.5.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 145.046992][ T29] audit: type=1326 audit(2000000052.130:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.5.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 145.071078][ T29] audit: type=1326 audit(2000000052.130:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.5.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 145.095127][ T29] audit: type=1326 audit(2000000052.130:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.5.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 145.118788][ T29] audit: type=1326 audit(2000000052.130:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.5.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 145.142639][ T29] audit: type=1326 audit(2000000052.130:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.5.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 145.166337][ T29] audit: type=1326 audit(2000000052.130:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.5.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 145.190105][ T29] audit: type=1326 audit(2000000052.130:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.5.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 145.217545][ T9617] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.270460][ T9617] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1869: bg 0: block 120: padding at end of block bitmap is not set [ 145.321424][ T9364] bond0 (unregistering): Released all slaves [ 145.337165][ T9631] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 145.395740][ T9364] tipc: Left network mode [ 145.441775][ T9641] netlink: 'syz.1.1873': attribute type 10 has an invalid length. [ 145.453606][ T9641] netlink: 'syz.1.1873': attribute type 10 has an invalid length. [ 145.462373][ T9631] loop5: detected capacity change from 0 to 8192 [ 145.474522][ T9641] team0: Port device dummy0 removed [ 145.484568][ T9631] vfat: Unknown parameter '‡±¿í§¾XfÙ…C ê' [ 145.520343][ T3305] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 145.536558][ T9364] hsr_slave_0: left promiscuous mode [ 145.551509][ T9364] hsr_slave_1: left promiscuous mode [ 145.569546][ T9364] veth1_macvtap: left promiscuous mode [ 145.576403][ T9654] FAULT_INJECTION: forcing a failure. [ 145.576403][ T9654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.589761][ T9654] CPU: 0 UID: 0 PID: 9654 Comm: syz.1.1876 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 145.589795][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.589809][ T9654] Call Trace: [ 145.589815][ T9654] [ 145.589823][ T9654] __dump_stack+0x1d/0x30 [ 145.589847][ T9654] dump_stack_lvl+0xe8/0x140 [ 145.589868][ T9654] dump_stack+0x15/0x1b [ 145.589924][ T9654] should_fail_ex+0x265/0x280 [ 145.589947][ T9654] should_fail+0xb/0x20 [ 145.589967][ T9654] should_fail_usercopy+0x1a/0x20 [ 145.589991][ T9654] _copy_from_user+0x1c/0xb0 [ 145.590022][ T9654] ___sys_sendmsg+0xc1/0x1d0 [ 145.590137][ T9654] __x64_sys_sendmsg+0xd4/0x160 [ 145.590165][ T9654] x64_sys_call+0x191e/0x2ff0 [ 145.590189][ T9654] do_syscall_64+0xd2/0x200 [ 145.590236][ T9654] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.590344][ T9654] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.590371][ T9654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.590410][ T9654] RIP: 0033:0x7f8ae72aebe9 [ 145.590455][ T9654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.590475][ T9654] RSP: 002b:00007f8ae5d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.590504][ T9654] RAX: ffffffffffffffda RBX: 00007f8ae74d5fa0 RCX: 00007f8ae72aebe9 [ 145.590518][ T9654] RDX: 0000000000008040 RSI: 0000200000000280 RDI: 0000000000000006 [ 145.590532][ T9654] RBP: 00007f8ae5d17090 R08: 0000000000000000 R09: 0000000000000000 [ 145.590545][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.590633][ T9654] R13: 00007f8ae74d6038 R14: 00007f8ae74d5fa0 R15: 00007fff0b3b57e8 [ 145.590654][ T9654] [ 145.591129][ T9364] veth0_macvtap: left promiscuous mode [ 145.783577][ T9677] FAULT_INJECTION: forcing a failure. [ 145.783577][ T9677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.790176][ T9675] hub 9-0:1.0: USB hub found [ 145.796886][ T9677] CPU: 0 UID: 0 PID: 9677 Comm: syz.0.1880 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 145.796917][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.796929][ T9677] Call Trace: [ 145.796936][ T9677] [ 145.796945][ T9677] __dump_stack+0x1d/0x30 [ 145.796968][ T9677] dump_stack_lvl+0xe8/0x140 [ 145.796994][ T9677] dump_stack+0x15/0x1b [ 145.797010][ T9677] should_fail_ex+0x265/0x280 [ 145.797032][ T9677] should_fail+0xb/0x20 [ 145.797050][ T9677] should_fail_usercopy+0x1a/0x20 [ 145.797083][ T9677] _copy_to_user+0x20/0xa0 [ 145.797177][ T9677] simple_read_from_buffer+0xb5/0x130 [ 145.797200][ T9677] proc_fail_nth_read+0x10e/0x150 [ 145.797282][ T9677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.797308][ T9677] vfs_read+0x1a8/0x770 [ 145.797328][ T9677] ? __rcu_read_unlock+0x4f/0x70 [ 145.797428][ T9677] ? __fget_files+0x184/0x1c0 [ 145.797454][ T9677] ksys_read+0xda/0x1a0 [ 145.797477][ T9677] __x64_sys_read+0x40/0x50 [ 145.797566][ T9677] x64_sys_call+0x27bc/0x2ff0 [ 145.797587][ T9677] do_syscall_64+0xd2/0x200 [ 145.797612][ T9677] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.797773][ T9677] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.797798][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.797820][ T9677] RIP: 0033:0x7fa06668d5fc [ 145.797836][ T9677] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.797951][ T9677] RSP: 002b:00007fa0650f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.797972][ T9677] RAX: ffffffffffffffda RBX: 00007fa0668b5fa0 RCX: 00007fa06668d5fc [ 145.797985][ T9677] RDX: 000000000000000f RSI: 00007fa0650f70a0 RDI: 0000000000000004 [ 145.797998][ T9677] RBP: 00007fa0650f7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.798010][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.798022][ T9677] R13: 00007fa0668b6038 R14: 00007fa0668b5fa0 R15: 00007ffc7fe73148 [ 145.798042][ T9677] [ 145.962395][ T9364] veth1_vlan: left promiscuous mode [ 145.995326][ T9675] hub 9-0:1.0: 8 ports detected [ 146.003234][ T9364] veth0_vlan: left promiscuous mode [ 146.103964][ T9699] loop5: detected capacity change from 0 to 2048 [ 146.113397][ T9701] netlink: 'syz.1.1886': attribute type 10 has an invalid length. [ 146.133359][ T9699] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.149636][ T9699] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1885: bg 0: block 120: padding at end of block bitmap is not set [ 146.173561][ T9707] netlink: 'syz.1.1886': attribute type 10 has an invalid length. [ 146.251715][ T9701] team0: Port device dummy0 added [ 146.259907][ T3469] lo speed is unknown, defaulting to 1000 [ 146.265863][ T3469] infiniband syz0: ib_query_port failed (-19) [ 146.278286][ T9707] team0: Port device dummy0 removed [ 146.321039][ T9719] loop3: detected capacity change from 0 to 128 [ 146.335161][ T6962] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 146.352336][ T9604] lo speed is unknown, defaulting to 1000 [ 146.372185][ T9719] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 146.380100][ T9719] FAT-fs (loop3): Filesystem has been set read-only [ 146.427729][ T9604] lo speed is unknown, defaulting to 1000 [ 146.440159][ T9719] syz.3.1887: attempt to access beyond end of device [ 146.440159][ T9719] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 146.482266][ T9719] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 146.490268][ T9719] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 146.520495][ T3469] hid-generic 0000:0D17:0000.000A: item fetching failed at offset 0/2 [ 146.522175][ T9719] syz.3.1887: attempt to access beyond end of device [ 146.522175][ T9719] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.530755][ T3469] hid-generic 0000:0D17:0000.000A: probe with driver hid-generic failed with error -22 [ 146.546622][ T9741] IPv6: Can't replace route, no match found [ 146.556754][ T9364] IPVS: stop unused estimator thread 0... [ 146.565911][ T9719] syz.3.1887: attempt to access beyond end of device [ 146.565911][ T9719] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.586818][ T9719] syz.3.1887: attempt to access beyond end of device [ 146.586818][ T9719] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.607377][ T9719] syz.3.1887: attempt to access beyond end of device [ 146.607377][ T9719] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.621123][ T9719] syz.3.1887: attempt to access beyond end of device [ 146.621123][ T9719] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.643521][ T9719] syz.3.1887: attempt to access beyond end of device [ 146.643521][ T9719] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.659856][ T9604] chnl_net:caif_netlink_parms(): no params data found [ 146.664422][ T9719] syz.3.1887: attempt to access beyond end of device [ 146.664422][ T9719] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.684440][ T9719] syz.3.1887: attempt to access beyond end of device [ 146.684440][ T9719] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.697880][ T9719] syz.3.1887: attempt to access beyond end of device [ 146.697880][ T9719] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.761570][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.768992][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.794449][ T9604] bridge_slave_0: entered allmulticast mode [ 146.796803][ T9758] loop1: detected capacity change from 0 to 2048 [ 146.801083][ T9604] bridge_slave_0: entered promiscuous mode [ 146.812351][ T9760] netlink: 'syz.0.1895': attribute type 10 has an invalid length. [ 146.824552][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.831698][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.852451][ T9758] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 146.859517][ T9604] bridge_slave_1: entered allmulticast mode [ 146.865768][ T9764] netlink: 'syz.0.1895': attribute type 10 has an invalid length. [ 146.874924][ T9604] bridge_slave_1: entered promiscuous mode [ 146.893462][ T9760] bond0: (slave dummy0): Releasing backup interface [ 146.920515][ T9760] team0: Port device dummy0 added [ 146.936851][ T9764] team0: Port device dummy0 removed [ 146.943719][ T9764] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 146.990614][ T9604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.027492][ T9776] loop0: detected capacity change from 0 to 512 [ 147.036247][ T9776] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.059182][ T9776] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.070814][ T9758] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 147.091696][ T9776] EXT4-fs (loop0): 1 truncate cleaned up [ 147.106089][ T9776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.119703][ T9604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.166096][ T9604] team0: Port device team_slave_0 added [ 147.173257][ T9604] team0: Port device team_slave_1 added [ 147.208654][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.215810][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.242138][ T9604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.281610][ T9783] loop1: detected capacity change from 0 to 2048 [ 147.340783][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.345973][ T9783] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.347948][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.386117][ T9604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.461648][ T9783] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1897: bg 0: block 120: padding at end of block bitmap is not set [ 147.500566][ T9604] hsr_slave_0: entered promiscuous mode [ 147.507006][ T9604] hsr_slave_1: entered promiscuous mode [ 147.513504][ T9604] debugfs: 'hsr0' already exists in 'hsr' [ 147.519571][ T9604] Cannot create hsr debugfs directory [ 147.617497][ T9804] netlink: 'syz.3.1900': attribute type 10 has an invalid length. [ 147.633305][ T9799] loop5: detected capacity change from 0 to 2048 [ 147.658052][ T9804] team0: Port device dummy0 added [ 147.665022][ T9804] netlink: 'syz.3.1900': attribute type 10 has an invalid length. [ 147.685395][ T9799] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 147.701412][ T3302] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 147.713967][ T9804] team0: Port device dummy0 removed [ 147.809901][ T9799] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 147.828736][ T9604] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 147.839593][ T3474] lo speed is unknown, defaulting to 1000 [ 147.849160][ T9604] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 147.866550][ T9604] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.882505][ T9604] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.933987][ T9776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.959388][ T9835] IPv6: Can't replace route, no match found [ 147.963252][ T9833] loop3: detected capacity change from 0 to 512 [ 147.995433][ T9604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.019479][ T9604] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.031660][ T9844] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1908'. [ 148.059703][ T9289] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.067098][ T9289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.078861][ T3469] hid-generic 0000:0D17:0000.000B: item fetching failed at offset 0/2 [ 148.080640][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.094257][ T9289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.103855][ T3469] hid-generic 0000:0D17:0000.000B: probe with driver hid-generic failed with error -22 [ 148.174069][ T9859] loop3: detected capacity change from 0 to 128 [ 148.189302][ T9859] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 148.197401][ T9859] FAT-fs (loop3): Filesystem has been set read-only [ 148.206000][ T9859] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 148.213867][ T9859] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 148.258182][ T9604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.499254][ T9604] veth0_vlan: entered promiscuous mode [ 148.509090][ T9604] veth1_vlan: entered promiscuous mode [ 148.531705][ T9604] veth0_macvtap: entered promiscuous mode [ 148.547213][ T9604] veth1_macvtap: entered promiscuous mode [ 148.564861][ T9604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.580672][ T9604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.595684][ T9289] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.612812][ T9289] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.650042][ T9289] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.680097][ T9289] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.777306][ T9916] loop6: detected capacity change from 0 to 2048 [ 148.790911][ T9916] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 148.875918][ T9916] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 148.963180][ T9933] hub 9-0:1.0: USB hub found [ 148.972371][ T9933] hub 9-0:1.0: 8 ports detected [ 149.085301][ T9946] netlink: 'syz.0.1922': attribute type 10 has an invalid length. [ 149.098831][ T9946] bond0: (slave dummy0): Releasing backup interface [ 149.116183][ T9946] team0: Port device dummy0 added [ 149.126106][ T9947] loop1: detected capacity change from 0 to 2048 [ 149.143547][ T9956] netlink: 'syz.0.1922': attribute type 10 has an invalid length. [ 149.155019][ T9956] team0: Port device dummy0 removed [ 149.161676][ T9956] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.173168][ T9947] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 149.186388][ T9957] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 149.238022][ T9960] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1926'. [ 149.269587][ T9957] lo speed is unknown, defaulting to 1000 [ 149.302682][ T9947] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 149.322654][ T9960] bond0: (slave dummy0): Releasing backup interface [ 149.334140][ T9960] bridge_slave_0: left promiscuous mode [ 149.340397][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.377859][ T9960] bridge_slave_1: left allmulticast mode [ 149.383646][ T9960] bridge_slave_1: left promiscuous mode [ 149.389566][ T9960] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.450552][ T9980] loop5: detected capacity change from 0 to 2048 [ 149.457636][ T9960] bond0: (slave bond_slave_0): Releasing backup interface [ 149.477790][ T9960] bond0: (slave bond_slave_1): Releasing backup interface [ 149.501226][ T9960] team0: Port device team_slave_0 removed [ 149.513118][ T9960] team0: Port device team_slave_1 removed [ 149.513126][ T9980] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.513958][ T9980] FAULT_INJECTION: forcing a failure. [ 149.513958][ T9980] name failslab, interval 1, probability 0, space 0, times 0 [ 149.534421][ T9960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.543887][ T9980] CPU: 0 UID: 0 PID: 9980 Comm: syz.5.1928 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 149.543919][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.543932][ T9980] Call Trace: [ 149.543970][ T9980] [ 149.543978][ T9980] __dump_stack+0x1d/0x30 [ 149.544001][ T9980] dump_stack_lvl+0xe8/0x140 [ 149.544021][ T9980] dump_stack+0x15/0x1b [ 149.544038][ T9980] should_fail_ex+0x265/0x280 [ 149.544060][ T9980] ? ext4_dir_open+0x31/0x70 [ 149.544079][ T9980] should_failslab+0x8c/0xb0 [ 149.544132][ T9980] __kmalloc_cache_noprof+0x4c/0x320 [ 149.544221][ T9980] ext4_dir_open+0x31/0x70 [ 149.544240][ T9980] do_dentry_open+0x646/0xa20 [ 149.544379][ T9980] ? __pfx_ext4_dir_open+0x10/0x10 [ 149.544400][ T9980] vfs_open+0x37/0x1e0 [ 149.544480][ T9980] path_openat+0x1c5e/0x2170 [ 149.544505][ T9980] ? getname_kernel+0x3c/0x1f0 [ 149.544535][ T9980] do_file_open_root+0x1d0/0x3f0 [ 149.544614][ T9980] file_open_root+0xfd/0x130 [ 149.544647][ T9980] do_handle_open+0x629/0x6b0 [ 149.544675][ T9980] __x64_sys_open_by_handle_at+0x44/0x50 [ 149.544782][ T9980] x64_sys_call+0x279b/0x2ff0 [ 149.544804][ T9980] do_syscall_64+0xd2/0x200 [ 149.544829][ T9980] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.544854][ T9980] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.544894][ T9980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.544915][ T9980] RIP: 0033:0x7f389cd7ebe9 [ 149.544932][ T9980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.544995][ T9980] RSP: 002b:00007f389b7df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 149.545015][ T9980] RAX: ffffffffffffffda RBX: 00007f389cfa5fa0 RCX: 00007f389cd7ebe9 [ 149.545029][ T9980] RDX: 0200000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 149.545042][ T9980] RBP: 00007f389b7df090 R08: 0000000000000000 R09: 0000000000000000 [ 149.545055][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.545083][ T9980] R13: 00007f389cfa6038 R14: 00007f389cfa5fa0 R15: 00007fff626b7be8 [ 149.545178][ T9980] [ 149.764924][ T6962] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 149.765201][ T9960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.796302][ T9957] lo speed is unknown, defaulting to 1000 [ 149.819277][ T9989] loop5: detected capacity change from 0 to 2048 [ 149.844998][ T9989] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 149.961912][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 149.961928][ T29] audit: type=1400 audit(2000000057.110:3831): avc: denied { bind } for pid=9999 comm="syz.1.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.022424][ T29] audit: type=1400 audit(2000000057.150:3832): avc: denied { setopt } for pid=9999 comm="syz.1.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.049168][ T9989] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 150.096296][T10005] hub 9-0:1.0: USB hub found [ 150.113680][T10005] hub 9-0:1.0: 8 ports detected [ 150.191468][T10015] loop6: detected capacity change from 0 to 128 [ 150.216985][ T29] audit: type=1326 audit(2000000057.370:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 150.218350][ T3390] hid-generic 0000:0D17:0000.000C: item fetching failed at offset 0/2 [ 150.240751][ T29] audit: type=1326 audit(2000000057.370:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 150.264687][T10015] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 150.280594][T10015] FAT-fs (loop6): Filesystem has been set read-only [ 150.295229][ T3390] hid-generic 0000:0D17:0000.000C: probe with driver hid-generic failed with error -22 [ 150.315764][T10015] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 150.323837][T10015] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 150.340906][ T29] audit: type=1326 audit(2000000057.370:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 150.365030][ T29] audit: type=1326 audit(2000000057.370:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 150.388745][ T29] audit: type=1326 audit(2000000057.370:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 150.412359][ T29] audit: type=1326 audit(2000000057.400:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 150.436260][ T29] audit: type=1326 audit(2000000057.450:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06668ebe9 code=0x7ffc0000 [ 150.459874][ T29] audit: type=1326 audit(2000000057.450:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06668ebe9 code=0x7ffc0000 [ 150.497279][T10029] loop3: detected capacity change from 0 to 2048 [ 150.559018][T10029] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.578130][T10029] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1939: bg 0: block 120: padding at end of block bitmap is not set [ 150.763603][T10041] FAULT_INJECTION: forcing a failure. [ 150.763603][T10041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.777113][T10041] CPU: 1 UID: 0 PID: 10041 Comm: syz.1.1943 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 150.777234][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.777256][T10041] Call Trace: [ 150.777275][T10041] [ 150.777285][T10041] __dump_stack+0x1d/0x30 [ 150.777311][T10041] dump_stack_lvl+0xe8/0x140 [ 150.777380][T10041] dump_stack+0x15/0x1b [ 150.777398][T10041] should_fail_ex+0x265/0x280 [ 150.777440][T10041] should_fail+0xb/0x20 [ 150.777461][T10041] should_fail_usercopy+0x1a/0x20 [ 150.777533][T10041] _copy_from_user+0x1c/0xb0 [ 150.777562][T10041] ___sys_sendmsg+0xc1/0x1d0 [ 150.777600][T10041] __x64_sys_sendmsg+0xd4/0x160 [ 150.777690][T10041] x64_sys_call+0x191e/0x2ff0 [ 150.777740][T10041] do_syscall_64+0xd2/0x200 [ 150.777771][T10041] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.777799][T10041] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 150.777897][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.777918][T10041] RIP: 0033:0x7f8ae72aebe9 [ 150.777933][T10041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.777951][T10041] RSP: 002b:00007f8ae5d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.777977][T10041] RAX: ffffffffffffffda RBX: 00007f8ae74d5fa0 RCX: 00007f8ae72aebe9 [ 150.777990][T10041] RDX: 0000000000004000 RSI: 0000200000006040 RDI: 0000000000000007 [ 150.778002][T10041] RBP: 00007f8ae5d17090 R08: 0000000000000000 R09: 0000000000000000 [ 150.778019][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.778034][T10041] R13: 00007f8ae74d6038 R14: 00007f8ae74d5fa0 R15: 00007fff0b3b57e8 [ 150.778067][T10041] [ 150.995807][ T3305] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 151.121651][T10060] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 151.150774][T10062] loop0: detected capacity change from 0 to 2048 [ 151.162491][T10060] lo speed is unknown, defaulting to 1000 [ 151.211641][T10063] loop6: detected capacity change from 0 to 2048 [ 151.234874][ T3292] loop0: p1 < > p4 [ 151.240002][T10063] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 151.304336][ T3292] loop0: p4 size 8388608 extends beyond EOD, truncated [ 151.381552][T10072] loop5: detected capacity change from 0 to 128 [ 151.395059][T10063] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 151.412800][T10060] lo speed is unknown, defaulting to 1000 [ 151.419618][T10072] vfat: Unknown parameter 'icharset' [ 151.436505][T10062] loop0: p1 < > p4 [ 151.442629][T10062] loop0: p4 size 8388608 extends beyond EOD, truncated [ 151.483445][T10072] tipc: Can't bind to reserved service type 0 [ 151.497689][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 151.510344][T10077] loop0: detected capacity change from 0 to 1024 [ 151.535201][T10077] EXT4-fs: Ignoring removed orlov option [ 151.535440][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 151.541183][T10077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.610694][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 151.636635][T10077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.649618][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 151.663744][T10086] loop5: detected capacity change from 0 to 2048 [ 151.685058][T10091] netlink: 'syz.3.1956': attribute type 10 has an invalid length. [ 151.714766][T10077] pimreg: entered allmulticast mode [ 151.735862][T10077] netlink: 4436 bytes leftover after parsing attributes in process `,&#^%'. [ 151.736589][T10091] team0: Port device dummy0 added [ 151.756218][T10086] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.772093][ T3390] hid-generic 0000:0D17:0000.000D: item fetching failed at offset 0/2 [ 151.781844][ T3390] hid-generic 0000:0D17:0000.000D: probe with driver hid-generic failed with error -22 [ 151.783136][T10089] loop6: detected capacity change from 0 to 1024 [ 151.818251][T10099] netlink: 'syz.3.1956': attribute type 10 has an invalid length. [ 151.827528][T10077] pimreg: left allmulticast mode [ 151.835648][T10089] EXT4-fs (loop6): bad geometry: first data block 0 is beyond end of filesystem (0) [ 151.839534][T10086] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1954: bg 0: block 120: padding at end of block bitmap is not set [ 151.880410][T10105] hub 9-0:1.0: USB hub found [ 151.886014][T10105] hub 9-0:1.0: 8 ports detected [ 151.901877][T10099] team0: Port device dummy0 removed [ 151.967726][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.008208][T10111] loop3: detected capacity change from 0 to 2048 [ 152.016386][T10111] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 152.077597][T10116] loop1: detected capacity change from 0 to 512 [ 152.078200][ T6962] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 152.198761][T10116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.216947][T10111] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 152.414339][T10116] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.428423][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 152.457499][T10127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.484568][T10127] batadv_slave_0: entered promiscuous mode [ 152.490571][T10127] batadv_slave_0: entered allmulticast mode [ 152.561614][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.630881][T10137] loop1: detected capacity change from 0 to 128 [ 152.640274][T10137] bio_check_eod: 32416 callbacks suppressed [ 152.640291][T10137] syz.1.1971: attempt to access beyond end of device [ 152.640291][T10137] loop1: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 152.644350][T10134] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1970'. [ 152.701535][T10138] loop3: detected capacity change from 0 to 512 [ 152.757713][T10138] msdos: Bad value for 'time_offset' [ 152.855726][T10148] loop0: detected capacity change from 0 to 2048 [ 152.902678][T10128] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 152.902961][T10148] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.909331][T10128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.909440][T10128] vhci_hcd vhci_hcd.0: Device attached [ 152.953121][T10148] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1975: bg 0: block 120: padding at end of block bitmap is not set [ 153.108052][T10162] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 153.137372][ T3307] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 153.194553][ T3360] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 153.203587][T10162] loop6: detected capacity change from 0 to 8192 [ 153.221250][T10162] vfat: Unknown parameter '‡±¿í§¾XfÙ…C ê' [ 153.245206][T10154] vhci_hcd: connection reset by peer [ 153.253753][ T173] vhci_hcd: stop threads [ 153.258287][ T173] vhci_hcd: release socket [ 153.263277][ T173] vhci_hcd: disconnect device [ 153.277296][T10174] netlink: 'syz.6.1985': attribute type 10 has an invalid length. [ 153.294169][T10174] team0: Port device dummy0 added [ 153.313608][T10174] netlink: 'syz.6.1985': attribute type 10 has an invalid length. [ 153.329909][T10174] team0: Port device dummy0 removed [ 153.421182][T10181] hub 9-0:1.0: USB hub found [ 153.426835][T10181] hub 9-0:1.0: 8 ports detected [ 153.490754][T10187] IPv6: Can't replace route, no match found [ 153.511737][T10186] loop5: detected capacity change from 0 to 2048 [ 153.538786][T10186] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.556756][T10186] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1990: bg 0: block 120: padding at end of block bitmap is not set [ 153.748322][ T6962] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 153.803050][ T3390] hid-generic 0000:0D17:0000.000E: item fetching failed at offset 0/2 [ 153.829361][ T3390] hid-generic 0000:0D17:0000.000E: probe with driver hid-generic failed with error -22 [ 153.847755][T10204] FAULT_INJECTION: forcing a failure. [ 153.847755][T10204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.861066][T10204] CPU: 1 UID: 0 PID: 10204 Comm: syz.0.1995 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 153.861134][T10204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.861148][T10204] Call Trace: [ 153.861156][T10204] [ 153.861165][T10204] __dump_stack+0x1d/0x30 [ 153.861189][T10204] dump_stack_lvl+0xe8/0x140 [ 153.861232][T10204] dump_stack+0x15/0x1b [ 153.861248][T10204] should_fail_ex+0x265/0x280 [ 153.861271][T10204] should_fail+0xb/0x20 [ 153.861290][T10204] should_fail_usercopy+0x1a/0x20 [ 153.861330][T10204] copy_fpstate_to_sigframe+0x628/0x7d0 [ 153.861367][T10204] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 153.861443][T10204] ? x86_task_fpu+0x36/0x60 [ 153.861547][T10204] get_sigframe+0x34d/0x490 [ 153.861566][T10204] ? get_signal+0xdc8/0xf70 [ 153.861598][T10204] x64_setup_rt_frame+0xa8/0x580 [ 153.861673][T10204] arch_do_signal_or_restart+0x27c/0x480 [ 153.861707][T10204] exit_to_user_mode_loop+0x7a/0x100 [ 153.861761][T10204] do_syscall_64+0x1d6/0x200 [ 153.861785][T10204] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.861807][T10204] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 153.861833][T10204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.861923][T10204] RIP: 0033:0x7fa06668ebe7 [ 153.861941][T10204] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 153.861962][T10204] RSP: 002b:00007fa0650d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.861986][T10204] RAX: 0000000000000010 RBX: 00007fa0668b6090 RCX: 00007fa06668ebe9 [ 153.862000][T10204] RDX: 0000000000000003 RSI: 000000000000540a RDI: 0000000000000005 [ 153.862087][T10204] RBP: 00007fa0650d6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.862101][T10204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.862192][T10204] R13: 00007fa0668b6128 R14: 00007fa0668b6090 R15: 00007ffc7fe73148 [ 153.862261][T10204] [ 153.949777][T10207] lo speed is unknown, defaulting to 1000 [ 154.046990][T10210] netlink: 'syz.3.1998': attribute type 10 has an invalid length. [ 154.128151][T10212] netlink: 'syz.3.1998': attribute type 10 has an invalid length. [ 154.227957][T10210] team0: Port device dummy0 added [ 154.270762][T10215] loop1: detected capacity change from 0 to 2048 [ 154.356702][T10215] EXT4-fs (loop1): failed to initialize system zone (-117) [ 154.370560][T10215] EXT4-fs (loop1): mount failed [ 154.395244][T10207] lo speed is unknown, defaulting to 1000 [ 154.407314][T10229] loop6: detected capacity change from 0 to 1024 [ 154.413536][T10231] loop1: detected capacity change from 0 to 2048 [ 154.452138][T10231] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.468265][T10229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.512063][T10231] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2004: bg 0: block 120: padding at end of block bitmap is not set [ 154.677974][ T3390] hid-generic 0000:0D17:0000.000F: item fetching failed at offset 0/2 [ 154.687667][ T3390] hid-generic 0000:0D17:0000.000F: probe with driver hid-generic failed with error -22 [ 154.728404][ T3302] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 154.746125][T10256] netlink: 'syz.5.2012': attribute type 10 has an invalid length. [ 154.760682][T10258] loop1: detected capacity change from 0 to 512 [ 154.770313][T10258] /dev/loop1: Can't open blockdev [ 154.784364][T10256] team0: Port device dummy0 added [ 154.796703][T10262] netlink: 'syz.5.2012': attribute type 10 has an invalid length. [ 154.828779][T10262] team0: Port device dummy0 removed [ 154.865481][T10270] FAULT_INJECTION: forcing a failure. [ 154.865481][T10270] name failslab, interval 1, probability 0, space 0, times 0 [ 154.878279][T10270] CPU: 1 UID: 0 PID: 10270 Comm: syz.3.2016 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 154.878308][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.878319][T10270] Call Trace: [ 154.878327][T10270] [ 154.878337][T10270] __dump_stack+0x1d/0x30 [ 154.878361][T10270] dump_stack_lvl+0xe8/0x140 [ 154.878383][T10270] dump_stack+0x15/0x1b [ 154.878409][T10270] should_fail_ex+0x265/0x280 [ 154.878432][T10270] should_failslab+0x8c/0xb0 [ 154.878481][T10270] kmem_cache_alloc_noprof+0x50/0x310 [ 154.878511][T10270] ? prepare_creds+0x37/0x4c0 [ 154.878535][T10270] prepare_creds+0x37/0x4c0 [ 154.878613][T10270] copy_creds+0x8f/0x3f0 [ 154.878639][T10270] copy_process+0x658/0x2000 [ 154.878710][T10270] kernel_clone+0x16c/0x5c0 [ 154.878748][T10270] ? vfs_write+0x7e8/0x960 [ 154.878831][T10270] __x64_sys_clone+0xe6/0x120 [ 154.878865][T10270] x64_sys_call+0x119c/0x2ff0 [ 154.878888][T10270] do_syscall_64+0xd2/0x200 [ 154.878916][T10270] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.879007][T10270] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 154.879035][T10270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.879058][T10270] RIP: 0033:0x7f5019c5ebe9 [ 154.879076][T10270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.879096][T10270] RSP: 002b:00007f50186c6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 154.879120][T10270] RAX: ffffffffffffffda RBX: 00007f5019e85fa0 RCX: 00007f5019c5ebe9 [ 154.879164][T10270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 154.879178][T10270] RBP: 00007f50186c7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.879192][T10270] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 154.879205][T10270] R13: 00007f5019e86038 R14: 00007f5019e85fa0 R15: 00007ffd3bab3718 [ 154.879226][T10270] [ 154.882862][T10270] loop3: detected capacity change from 0 to 512 [ 155.084330][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 155.084410][ T29] audit: type=1326 audit(2000000062.230:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5019c5d84a code=0x7ffc0000 [ 155.106851][T10270] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2016: iget: bad extended attribute block 1 [ 155.114346][ T29] audit: type=1326 audit(2000000062.230:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5019c5d84a code=0x7ffc0000 [ 155.129966][T10270] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2016: couldn't read orphan inode 15 (err -117) [ 155.150664][ T29] audit: type=1326 audit(2000000062.230:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5019c5d457 code=0x7ffc0000 [ 155.164478][T10270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.186282][ T29] audit: type=1326 audit(2000000062.230:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5019c6038a code=0x7ffc0000 [ 155.241928][ T9604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.253620][T10270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.269221][ T29] audit: type=1326 audit(2000000062.420:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5019c5d550 code=0x7ffc0000 [ 155.293238][ T29] audit: type=1326 audit(2000000062.430:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5019c5e7eb code=0x7ffc0000 [ 155.317042][ T29] audit: type=1326 audit(2000000062.430:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5019c5d84a code=0x7ffc0000 [ 155.321575][T10286] loop5: detected capacity change from 0 to 2048 [ 155.340715][ T29] audit: type=1326 audit(2000000062.430:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5019c5ebe9 code=0x7ffc0000 [ 155.371476][ T29] audit: type=1326 audit(2000000062.470:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5019c5ebe9 code=0x7ffc0000 [ 155.402582][T10286] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2022: bg 0: block 120: padding at end of block bitmap is not set [ 155.684502][ T29] audit: type=1400 audit(2000000062.830:4016): avc: denied { create } for pid=10307 comm="syz.3.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 155.807829][T10319] loop6: detected capacity change from 0 to 1024 [ 155.816860][T10319] EXT4-fs (loop6): bad geometry: first data block 0 is beyond end of filesystem (0) [ 155.896772][T10326] 9pnet_virtio: no channels available for device 127.0.0.1 [ 155.926191][T10338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2038'. [ 155.936554][T10338] netlink: 'syz.3.2038': attribute type 9 has an invalid length. [ 155.944612][T10338] netlink: 'syz.3.2038': attribute type 9 has an invalid length. [ 156.242606][T10361] lo speed is unknown, defaulting to 1000 [ 156.281549][T10368] FAULT_INJECTION: forcing a failure. [ 156.281549][T10368] name failslab, interval 1, probability 0, space 0, times 0 [ 156.286260][T10361] lo speed is unknown, defaulting to 1000 [ 156.294453][T10368] CPU: 1 UID: 0 PID: 10368 Comm: syz.5.2048 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 156.294489][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.294500][T10368] Call Trace: [ 156.294507][T10368] [ 156.294515][T10368] __dump_stack+0x1d/0x30 [ 156.294536][T10368] dump_stack_lvl+0xe8/0x140 [ 156.294556][T10368] dump_stack+0x15/0x1b [ 156.294651][T10368] should_fail_ex+0x265/0x280 [ 156.294673][T10368] should_failslab+0x8c/0xb0 [ 156.294697][T10368] __kmalloc_noprof+0xa5/0x3e0 [ 156.294727][T10368] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 156.294756][T10368] ? splice_from_pipe_next+0x321/0x380 [ 156.294835][T10368] kernfs_fop_write_iter+0xe1/0x2d0 [ 156.294873][T10368] ? iov_iter_bvec+0xa4/0xd0 [ 156.294947][T10368] iter_file_splice_write+0x666/0x9e0 [ 156.294979][T10368] ? __pfx_iter_file_splice_write+0x10/0x10 [ 156.295000][T10368] direct_splice_actor+0x153/0x2a0 [ 156.295021][T10368] ? splice_grow_spd+0xd1/0xe0 [ 156.295089][T10368] splice_direct_to_actor+0x30f/0x680 [ 156.295186][T10368] ? __pfx_direct_splice_actor+0x10/0x10 [ 156.295210][T10368] do_splice_direct+0xda/0x150 [ 156.295230][T10368] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 156.295321][T10368] do_sendfile+0x380/0x650 [ 156.295352][T10368] __x64_sys_sendfile64+0x105/0x150 [ 156.295381][T10368] x64_sys_call+0x2bb0/0x2ff0 [ 156.295402][T10368] do_syscall_64+0xd2/0x200 [ 156.295499][T10368] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.295524][T10368] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 156.295548][T10368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.295570][T10368] RIP: 0033:0x7f389cd7ebe9 [ 156.295664][T10368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.295682][T10368] RSP: 002b:00007f389b7be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 156.295702][T10368] RAX: ffffffffffffffda RBX: 00007f389cfa6090 RCX: 00007f389cd7ebe9 [ 156.295716][T10368] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 156.295728][T10368] RBP: 00007f389b7be090 R08: 0000000000000000 R09: 0000000000000000 [ 156.295741][T10368] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 156.295753][T10368] R13: 00007f389cfa6128 R14: 00007f389cfa6090 R15: 00007fff626b7be8 [ 156.295777][T10368] [ 156.465645][T10373] netlink: 'syz.1.2050': attribute type 10 has an invalid length. [ 156.550832][T10375] netlink: 'syz.1.2050': attribute type 10 has an invalid length. [ 156.560246][T10373] team0: Port device dummy0 added [ 156.569042][T10375] team0: Port device dummy0 removed [ 156.573703][T10377] program syz.5.2051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.629095][T10381] loop1: detected capacity change from 0 to 2048 [ 156.640519][T10381] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 156.861236][ T48] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 156.871342][T10398] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 156.932351][T10398] loop1: detected capacity change from 0 to 8192 [ 156.941606][T10398] vfat: Unknown parameter '‡±¿í§¾XfÙ…C ê' [ 156.962561][T10405] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2062'. [ 157.036672][T10405] bridge_slave_0: left allmulticast mode [ 157.042366][T10405] bridge_slave_0: left promiscuous mode [ 157.048464][T10405] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.069529][T10405] bridge_slave_1: left allmulticast mode [ 157.075540][T10405] bridge_slave_1: left promiscuous mode [ 157.081786][T10405] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.173176][T10427] loop5: detected capacity change from 0 to 2048 [ 157.253945][T10427] EXT4-fs mount: 2 callbacks suppressed [ 157.253964][T10427] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.277259][T10427] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2070: bg 0: block 120: padding at end of block bitmap is not set [ 157.343436][T10424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.356087][T10424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.371135][T10405] bond0: (slave bond_slave_0): Releasing backup interface [ 157.383696][T10405] bond0: (slave bond_slave_1): Releasing backup interface [ 157.400280][T10405] team0: Port device team_slave_0 removed [ 157.411314][T10405] team0: Port device team_slave_1 removed [ 157.419115][T10405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.426763][T10405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.438790][T10405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.446502][T10405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.492762][ T6962] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 157.547184][T10438] loop6: detected capacity change from 0 to 2048 [ 157.555153][T10438] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 157.785239][T10451] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2078'. [ 157.794619][T10451] FAULT_INJECTION: forcing a failure. [ 157.794619][T10451] name failslab, interval 1, probability 0, space 0, times 0 [ 157.807434][T10451] CPU: 0 UID: 0 PID: 10451 Comm: syz.6.2078 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 157.807469][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.807483][T10451] Call Trace: [ 157.807490][T10451] [ 157.807531][T10451] __dump_stack+0x1d/0x30 [ 157.807567][T10451] dump_stack_lvl+0xe8/0x140 [ 157.807590][T10451] dump_stack+0x15/0x1b [ 157.807608][T10451] should_fail_ex+0x265/0x280 [ 157.807629][T10451] should_failslab+0x8c/0xb0 [ 157.807663][T10451] kmem_cache_alloc_node_noprof+0x57/0x320 [ 157.807692][T10451] ? __alloc_skb+0x101/0x320 [ 157.807731][T10451] __alloc_skb+0x101/0x320 [ 157.807773][T10451] ? __rcu_read_unlock+0x4f/0x70 [ 157.807794][T10451] __neigh_notify+0x5b/0x110 [ 157.807820][T10451] __neigh_update+0x10f4/0x15d0 [ 157.807924][T10451] neigh_add+0x879/0xa70 [ 157.807968][T10451] ? __pfx_neigh_add+0x10/0x10 [ 157.807998][T10451] rtnetlink_rcv_msg+0x65a/0x6d0 [ 157.808056][T10451] netlink_rcv_skb+0x120/0x220 [ 157.808078][T10451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.808115][T10451] rtnetlink_rcv+0x1c/0x30 [ 157.808152][T10451] netlink_unicast+0x5c0/0x690 [ 157.808240][T10451] netlink_sendmsg+0x58b/0x6b0 [ 157.808267][T10451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.808355][T10451] __sock_sendmsg+0x145/0x180 [ 157.808386][T10451] __sys_sendto+0x268/0x330 [ 157.808434][T10451] __x64_sys_sendto+0x76/0x90 [ 157.808518][T10451] x64_sys_call+0x2d05/0x2ff0 [ 157.808544][T10451] do_syscall_64+0xd2/0x200 [ 157.808630][T10451] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.808671][T10451] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 157.808700][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.808751][T10451] RIP: 0033:0x7f3487baebe9 [ 157.808839][T10451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.808856][T10451] RSP: 002b:00007f3486617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 157.808877][T10451] RAX: ffffffffffffffda RBX: 00007f3487dd5fa0 RCX: 00007f3487baebe9 [ 157.808914][T10451] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 157.808929][T10451] RBP: 00007f3486617090 R08: 0000000000000000 R09: 0000000000000000 [ 157.808941][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.808953][T10451] R13: 00007f3487dd6038 R14: 00007f3487dd5fa0 R15: 00007fff221d5f78 [ 157.808993][T10451] [ 158.217731][T10466] loop6: detected capacity change from 0 to 2048 [ 158.230647][ T3360] usb 7-1: enqueue for inactive port 0 [ 158.238073][ T3360] usb 7-1: enqueue for inactive port 0 [ 158.247786][T10461] netlink: 'syz.1.2082': attribute type 30 has an invalid length. [ 158.324356][ T3360] vhci_hcd: vhci_device speed not set [ 158.368919][T10466] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.397679][T10480] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 158.416853][T10466] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2083: bg 0: block 120: padding at end of block bitmap is not set [ 158.449256][T10478] loop0: detected capacity change from 0 to 1024 [ 158.460536][T10480] lo speed is unknown, defaulting to 1000 [ 158.514131][T10478] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 158.519770][T10483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2086'. [ 158.663101][ T9604] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 158.675091][T10480] lo speed is unknown, defaulting to 1000 [ 158.756096][T10513] loop6: detected capacity change from 0 to 164 [ 158.765311][T10513] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.778912][T10518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.796243][T10518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.810509][ T9604] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.845072][ T9604] rock: directory entry would overflow storage [ 158.851416][ T9604] rock: sig=0x4f50, size=4, remaining=3 [ 158.857043][ T9604] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 158.884931][T10528] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2102'. [ 158.895405][ T9604] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.904125][ T9604] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.917091][ T9604] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.926654][ T9604] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.941212][ T9604] rock: directory entry would overflow storage [ 158.947698][ T9604] rock: sig=0x4f50, size=4, remaining=3 [ 158.953360][ T9604] iso9660: Corrupted directory entry in block 3 of inode 1856 [ 158.961990][ T9604] VFS: Lookup of '' in iso9660 loop6 would have caused loop [ 158.970037][ T9604] VFS: Lookup of '' in iso9660 loop6 would have caused loop [ 158.984140][T10528] bridge_slave_0: left allmulticast mode [ 158.990211][T10528] bridge_slave_0: left promiscuous mode [ 158.996062][T10528] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.035514][T10528] bridge_slave_1: left allmulticast mode [ 159.041231][T10528] bridge_slave_1: left promiscuous mode [ 159.047422][T10528] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.050495][T10535] FAULT_INJECTION: forcing a failure. [ 159.050495][T10535] name failslab, interval 1, probability 0, space 0, times 0 [ 159.067669][T10535] CPU: 0 UID: 0 PID: 10535 Comm: syz.3.2104 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 159.067697][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.067727][T10535] Call Trace: [ 159.067736][T10535] [ 159.067745][T10535] __dump_stack+0x1d/0x30 [ 159.067768][T10535] dump_stack_lvl+0xe8/0x140 [ 159.067792][T10535] dump_stack+0x15/0x1b [ 159.067835][T10535] should_fail_ex+0x265/0x280 [ 159.067855][T10535] ? tcp_sendmsg_fastopen+0x172/0x520 [ 159.067933][T10535] should_failslab+0x8c/0xb0 [ 159.067998][T10535] __kmalloc_cache_noprof+0x4c/0x320 [ 159.068106][T10535] tcp_sendmsg_fastopen+0x172/0x520 [ 159.068140][T10535] tcp_sendmsg_locked+0x26e1/0x2c00 [ 159.068164][T10535] ? __rcu_read_unlock+0x4f/0x70 [ 159.068179][T10535] ? xa_load+0xb1/0xe0 [ 159.068247][T10535] ? __account_obj_stock+0x211/0x350 [ 159.068333][T10535] ? __rcu_read_unlock+0x4f/0x70 [ 159.068348][T10535] ? avc_has_perm_noaudit+0x1b1/0x200 [ 159.068444][T10535] ? avc_has_perm+0xf7/0x180 [ 159.068536][T10535] ? _raw_spin_unlock_bh+0x36/0x40 [ 159.068573][T10535] ? __pfx_tcp_sendmsg+0x10/0x10 [ 159.068739][T10535] tcp_sendmsg+0x2f/0x50 [ 159.068753][T10535] inet_sendmsg+0x76/0xd0 [ 159.068764][T10535] __sock_sendmsg+0x102/0x180 [ 159.068816][T10535] ____sys_sendmsg+0x345/0x4e0 [ 159.068830][T10535] ___sys_sendmsg+0x17b/0x1d0 [ 159.068912][T10535] __sys_sendmmsg+0x178/0x300 [ 159.068933][T10535] __x64_sys_sendmmsg+0x57/0x70 [ 159.068944][T10535] x64_sys_call+0x1c4a/0x2ff0 [ 159.069020][T10535] do_syscall_64+0xd2/0x200 [ 159.069036][T10535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.069071][T10535] RIP: 0033:0x7f5019c5ebe9 [ 159.069093][T10535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.069103][T10535] RSP: 002b:00007f50186c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.069115][T10535] RAX: ffffffffffffffda RBX: 00007f5019e85fa0 RCX: 00007f5019c5ebe9 [ 159.069121][T10535] RDX: 0000000000000001 RSI: 0000200000000940 RDI: 0000000000000003 [ 159.069127][T10535] RBP: 00007f50186c7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.069134][T10535] R10: 000000002400c042 R11: 0000000000000246 R12: 0000000000000001 [ 159.069191][T10535] R13: 00007f5019e86038 R14: 00007f5019e85fa0 R15: 00007ffd3bab3718 [ 159.069204][T10535] [ 159.310298][T10528] bond0: (slave bond_slave_0): Releasing backup interface [ 159.323794][T10528] bond0: (slave bond_slave_1): Releasing backup interface [ 159.338191][T10528] team0: Port device team_slave_0 removed [ 159.346306][T10539] loop3: detected capacity change from 0 to 2048 [ 159.357053][T10528] team0: Port device team_slave_1 removed [ 159.364291][T10528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.371729][T10528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.375905][T10539] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.394027][T10528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.401981][T10528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.405063][T10539] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2105: bg 0: block 120: padding at end of block bitmap is not set [ 159.583854][T10552] lo speed is unknown, defaulting to 1000 [ 159.607020][ T3305] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 159.620641][ T9343] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.683007][ T9343] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.719902][T10552] lo speed is unknown, defaulting to 1000 [ 159.782244][T10559] 9pnet_virtio: no channels available for device 127.0.0.1 [ 159.806073][ T9343] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.850516][ T9343] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.943909][T10565] lo speed is unknown, defaulting to 1000 [ 159.954001][T10579] IPv6: Can't replace route, no match found [ 160.057889][ T9343] bond0 (unregistering): Released all slaves [ 160.129735][T10565] lo speed is unknown, defaulting to 1000 [ 160.207053][ T9343] hsr_slave_0: left promiscuous mode [ 160.218544][ T9343] hsr_slave_1: left promiscuous mode [ 160.234155][ T9343] veth1_macvtap: left promiscuous mode [ 160.254980][ T9343] veth0_macvtap: left promiscuous mode [ 160.260560][ T9343] veth1_vlan: left promiscuous mode [ 160.269599][ T9343] veth0_vlan: left promiscuous mode [ 160.551609][T10565] chnl_net:caif_netlink_parms(): no params data found [ 160.598477][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 160.598495][ T29] audit: type=1326 audit(2000000067.750:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06668ebe9 code=0x7ffc0000 [ 160.600721][ T36] hid-generic 0000:0D17:0000.0010: item fetching failed at offset 0/2 [ 160.605071][ T29] audit: type=1326 audit(2000000067.750:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa06668ebe9 code=0x7ffc0000 [ 160.630743][ T36] hid-generic 0000:0D17:0000.0010: probe with driver hid-generic failed with error -22 [ 160.637511][ T29] audit: type=1326 audit(2000000067.750:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06668ebe9 code=0x7ffc0000 [ 160.694645][ T29] audit: type=1326 audit(2000000067.750:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa06668ebe9 code=0x7ffc0000 [ 160.718566][ T29] audit: type=1326 audit(2000000067.750:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.0.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06668ebe9 code=0x7ffc0000 [ 160.724730][T10615] hub 9-0:1.0: USB hub found [ 160.747490][T10615] hub 9-0:1.0: 8 ports detected [ 160.815316][T10565] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.822604][T10565] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.843293][ T29] audit: type=1400 audit(2000000067.990:4302): avc: denied { write } for pid=10631 comm="syz.3.2125" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 160.867655][T10565] bridge_slave_0: entered allmulticast mode [ 160.874918][T10565] bridge_slave_0: entered promiscuous mode [ 160.886139][T10632] syz.3.2125 (10632) used obsolete PPPIOCDETACH ioctl [ 160.887419][T10565] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.900762][T10565] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.912407][T10565] bridge_slave_1: entered allmulticast mode [ 160.921733][T10565] bridge_slave_1: entered promiscuous mode [ 160.957177][T10565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.980127][T10565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.018613][T10565] team0: Port device team_slave_0 added [ 161.035408][T10565] team0: Port device team_slave_1 added [ 161.056398][T10647] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2128'. [ 161.095781][T10565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.102961][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.129954][T10565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.157430][T10565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.164564][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.190960][T10565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.245528][T10565] hsr_slave_0: entered promiscuous mode [ 161.270704][T10565] hsr_slave_1: entered promiscuous mode [ 161.271017][T10662] loop5: detected capacity change from 0 to 2048 [ 161.277211][T10565] debugfs: 'hsr0' already exists in 'hsr' [ 161.289260][T10565] Cannot create hsr debugfs directory [ 161.315633][T10662] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.358583][T10662] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2130: bg 0: block 120: padding at end of block bitmap is not set [ 161.387892][ T29] audit: type=1326 audit(2000000068.540:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5019c5ebe9 code=0x7ffc0000 [ 161.395360][ T3390] hid-generic 0000:0D17:0000.0011: item fetching failed at offset 0/2 [ 161.416197][ T29] audit: type=1326 audit(2000000068.540:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5019c5ebe9 code=0x7ffc0000 [ 161.436917][ T3390] hid-generic 0000:0D17:0000.0011: probe with driver hid-generic failed with error -22 [ 161.444355][ T29] audit: type=1326 audit(2000000068.540:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5019c5ebe9 code=0x7ffc0000 [ 161.478280][ T29] audit: type=1326 audit(2000000068.540:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5019c5ebe9 code=0x7ffc0000 [ 161.602410][ T6962] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 161.611882][T10687] IPv6: Can't replace route, no match found [ 161.618950][T10565] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 161.632159][T10565] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 161.652773][T10565] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 161.677496][T10565] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 161.918019][T10565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.361144][T10565] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.406325][T10719] loop0: detected capacity change from 0 to 764 [ 162.420898][T10565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.431486][T10565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.494121][T10721] loop1: detected capacity change from 0 to 1024 [ 162.564831][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.571956][ T9305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.580977][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.588169][ T9305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.598151][T10729] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 162.629833][T10721] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 162.714075][T10729] lo speed is unknown, defaulting to 1000 [ 162.721226][T10734] loop5: detected capacity change from 0 to 2048 [ 162.777613][T10734] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.781805][T10565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.805184][T10729] lo speed is unknown, defaulting to 1000 [ 162.846593][T10734] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2142: bg 0: block 120: padding at end of block bitmap is not set [ 162.862421][T10759] IPv6: Can't replace route, no match found [ 163.055129][ T6962] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 163.143661][T10797] loop0: detected capacity change from 0 to 2048 [ 163.144373][T10565] veth0_vlan: entered promiscuous mode [ 163.183121][T10807] FAULT_INJECTION: forcing a failure. [ 163.183121][T10807] name failslab, interval 1, probability 0, space 0, times 0 [ 163.191480][T10797] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 163.196490][T10807] CPU: 0 UID: 0 PID: 10807 Comm: syz.3.2153 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 163.196522][T10807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.196534][T10807] Call Trace: [ 163.196541][T10807] [ 163.196550][T10807] __dump_stack+0x1d/0x30 [ 163.196573][T10807] dump_stack_lvl+0xe8/0x140 [ 163.196644][T10807] dump_stack+0x15/0x1b [ 163.196733][T10807] should_fail_ex+0x265/0x280 [ 163.196768][T10807] should_failslab+0x8c/0xb0 [ 163.196894][T10807] __kmalloc_node_noprof+0xa9/0x410 [ 163.196922][T10807] ? alloc_slab_obj_exts+0x31/0x80 [ 163.197071][T10807] alloc_slab_obj_exts+0x31/0x80 [ 163.197096][T10807] __memcg_slab_post_alloc_hook+0x23f/0x580 [ 163.197132][T10807] __kvmalloc_node_noprof+0x398/0x4e0 [ 163.197159][T10807] ? io_sqe_buffers_register+0xc2/0x530 [ 163.197213][T10807] io_sqe_buffers_register+0xc2/0x530 [ 163.197242][T10807] ? __fget_files+0x184/0x1c0 [ 163.197329][T10807] __se_sys_io_uring_register+0xa9f/0xeb0 [ 163.197356][T10807] ? fput+0x8f/0xc0 [ 163.197384][T10807] ? ksys_write+0x192/0x1a0 [ 163.197406][T10807] __x64_sys_io_uring_register+0x55/0x70 [ 163.197499][T10807] x64_sys_call+0x18a3/0x2ff0 [ 163.197521][T10807] do_syscall_64+0xd2/0x200 [ 163.197663][T10807] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 163.197687][T10807] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 163.197711][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.197733][T10807] RIP: 0033:0x7f5019c5ebe9 [ 163.197750][T10807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.197804][T10807] RSP: 002b:00007f50186c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 163.197824][T10807] RAX: ffffffffffffffda RBX: 00007f5019e85fa0 RCX: 00007f5019c5ebe9 [ 163.197847][T10807] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 163.197860][T10807] RBP: 00007f50186c7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.197872][T10807] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 163.197885][T10807] R13: 00007f5019e86038 R14: 00007f5019e85fa0 R15: 00007ffd3bab3718 [ 163.197905][T10807] [ 163.207440][T10565] veth1_vlan: entered promiscuous mode [ 163.440917][T10565] veth0_macvtap: entered promiscuous mode [ 163.458495][T10565] veth1_macvtap: entered promiscuous mode [ 163.473821][T10565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.515914][T10565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.539367][T10797] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 163.558143][ T9289] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.578800][ T9289] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.601047][ T9289] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.638554][ T9289] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.764999][T10843] loop3: detected capacity change from 0 to 128 [ 163.775985][T10848] loop1: detected capacity change from 0 to 256 [ 163.797261][T10843] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 163.805251][T10843] FAT-fs (loop3): Filesystem has been set read-only [ 163.837835][T10843] syz.3.2161: attempt to access beyond end of device [ 163.837835][T10843] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 163.858045][T10843] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 163.866076][T10843] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 163.879766][T10848] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.932639][T10848] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.948978][T10843] syz.3.2161: attempt to access beyond end of device [ 163.948978][T10843] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 163.967729][T10843] syz.3.2161: attempt to access beyond end of device [ 163.967729][T10843] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 164.001012][T10843] syz.3.2161: attempt to access beyond end of device [ 164.001012][T10843] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 164.016882][T10848] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.038648][T10858] IPv6: Can't replace route, no match found [ 164.051429][T10843] syz.3.2161: attempt to access beyond end of device [ 164.051429][T10843] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 164.095836][T10848] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.117495][T10843] syz.3.2161: attempt to access beyond end of device [ 164.117495][T10843] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 164.152759][T10843] syz.3.2161: attempt to access beyond end of device [ 164.152759][T10843] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 164.183678][T10843] syz.3.2161: attempt to access beyond end of device [ 164.183678][T10843] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 164.198912][T10843] syz.3.2161: attempt to access beyond end of device [ 164.198912][T10843] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 164.213211][T10843] syz.3.2161: attempt to access beyond end of device [ 164.213211][T10843] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 164.261777][ T9289] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.276162][ T9289] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.300448][ T9289] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.334182][ T9289] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.797377][T10885] syz.1.2171 (10885) used greatest stack depth: 9344 bytes left [ 164.891655][T10919] loop7: detected capacity change from 0 to 2048 [ 164.916733][T10919] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.005747][T10919] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2178: bg 0: block 120: padding at end of block bitmap is not set [ 165.279178][T10565] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 165.388252][T10957] loop7: detected capacity change from 0 to 2048 [ 165.416096][ T1036] hid-generic 0000:0D17:0000.0012: item fetching failed at offset 0/2 [ 165.424775][ T1036] hid-generic 0000:0D17:0000.0012: probe with driver hid-generic failed with error -22 [ 165.425870][T10957] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.475353][T10957] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2180: bg 0: block 120: padding at end of block bitmap is not set [ 165.538542][T10972] loop3: detected capacity change from 0 to 512 [ 165.548212][T10972] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.571606][T10974] netlink: 'syz.1.2185': attribute type 5 has an invalid length. [ 165.596861][T10974] loop1: detected capacity change from 0 to 256 [ 165.605060][T10972] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2184: corrupted in-inode xattr: overlapping e_value [ 165.619393][ T29] kauditd_printk_skb: 593 callbacks suppressed [ 165.619410][ T29] audit: type=1326 audit(2000000072.770:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10905 comm="syz.5.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f389cd75ba7 code=0x7ffc0000 [ 165.651028][T10972] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2184: couldn't read orphan inode 15 (err -117) [ 165.695022][T10972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.717050][ T29] audit: type=1326 audit(2000000072.770:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10905 comm="syz.5.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f389cd1add9 code=0x7ffc0000 [ 165.740840][ T29] audit: type=1326 audit(2000000072.770:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10905 comm="syz.5.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 165.765031][ T29] audit: type=1326 audit(2000000072.770:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10905 comm="syz.5.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f389cd75ba7 code=0x7ffc0000 [ 165.789290][ T29] audit: type=1326 audit(2000000072.770:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10905 comm="syz.5.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f389cd1add9 code=0x7ffc0000 [ 165.813794][ T29] audit: type=1326 audit(2000000072.770:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10905 comm="syz.5.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 165.838186][ T29] audit: type=1326 audit(2000000072.780:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10905 comm="syz.5.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f389cd75ba7 code=0x7ffc0000 [ 165.862146][ T29] audit: type=1326 audit(2000000072.780:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10905 comm="syz.5.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f389cd1add9 code=0x7ffc0000 [ 165.885772][ T29] audit: type=1326 audit(2000000072.780:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10905 comm="syz.5.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f389cd7ebe9 code=0x7ffc0000 [ 165.909830][ T29] audit: type=1326 audit(2000000072.800:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10905 comm="syz.5.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f389cd75ba7 code=0x7ffc0000 [ 165.980620][T10565] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 166.046804][T11010] lo speed is unknown, defaulting to 1000 [ 166.081722][T11010] lo speed is unknown, defaulting to 1000 [ 166.211427][T11009] lo speed is unknown, defaulting to 1000 [ 166.388388][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.406483][T11013] loop5: detected capacity change from 0 to 2048 [ 166.477267][T11013] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.503002][T11009] lo speed is unknown, defaulting to 1000 [ 166.533905][T11013] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2190: bg 0: block 120: padding at end of block bitmap is not set [ 167.372999][T11037] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2196'. [ 167.396316][ T6962] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 167.462460][T11037] team0: Port device dummy0 removed [ 167.475725][T11037] bridge_slave_0: left allmulticast mode [ 167.481796][T11037] bridge_slave_0: left promiscuous mode [ 167.487775][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.528440][T11037] bridge_slave_1: left allmulticast mode [ 167.534262][T11037] bridge_slave_1: left promiscuous mode [ 167.539979][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.588821][T11037] bond0: (slave bond_slave_0): Releasing backup interface [ 167.607487][T11037] bond0: (slave bond_slave_1): Releasing backup interface [ 167.680219][T11037] team0: Port device team_slave_0 removed [ 167.728253][T11037] team0: Port device team_slave_1 removed [ 167.735140][T11037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.748023][T11037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.755795][T11037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.784696][T11037] batadv1: left allmulticast mode [ 167.789766][T11037] batadv1: left promiscuous mode [ 167.794918][T11037] bridge0: port 3(batadv1) entered disabled state [ 167.803251][T11037] bond1: (slave gretap1): Releasing active interface [ 168.660753][T11062] 9pnet_virtio: no channels available for device 127.0.0.1 [ 168.807277][ T1036] hid-generic 0000:0D17:0000.0013: item fetching failed at offset 0/2 [ 168.812327][T11080] loop5: detected capacity change from 0 to 2048 [ 168.832759][ T1036] hid-generic 0000:0D17:0000.0013: probe with driver hid-generic failed with error -22 [ 168.974726][T11080] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.005337][T11080] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2207: bg 0: block 120: padding at end of block bitmap is not set [ 169.209609][ T6962] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 169.249850][T11114] 9pnet_virtio: no channels available for device 127.0.0.1 [ 169.462189][T11148] loop5: detected capacity change from 0 to 2048 [ 169.506735][T11148] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.519178][T11156] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 169.527260][T11156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2226'. [ 169.545305][T11148] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2223: bg 0: block 120: padding at end of block bitmap is not set [ 169.562077][T11160] FAULT_INJECTION: forcing a failure. [ 169.562077][T11160] name failslab, interval 1, probability 0, space 0, times 0 [ 169.575041][T11160] CPU: 1 UID: 0 PID: 11160 Comm: syz.3.2225 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 169.575130][T11160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.575144][T11160] Call Trace: [ 169.575151][T11160] [ 169.575159][T11160] __dump_stack+0x1d/0x30 [ 169.575180][T11160] dump_stack_lvl+0xe8/0x140 [ 169.575205][T11160] dump_stack+0x15/0x1b [ 169.575225][T11160] should_fail_ex+0x265/0x280 [ 169.575274][T11160] should_failslab+0x8c/0xb0 [ 169.575299][T11160] kmem_cache_alloc_noprof+0x50/0x310 [ 169.575324][T11160] ? dst_alloc+0xbd/0x100 [ 169.575344][T11160] dst_alloc+0xbd/0x100 [ 169.575371][T11160] ? ip_vs_ftp_get_addrport+0x102/0x6c0 [ 169.575402][T11160] ip_route_output_key_hash_rcu+0xef5/0x1380 [ 169.575440][T11160] ip_route_output_key_hash+0x7a/0xb0 [ 169.575528][T11160] tcp_v4_connect+0x3e2/0xad0 [ 169.575625][T11160] __inet_stream_connect+0x166/0x7e0 [ 169.575654][T11160] ? _raw_spin_unlock_bh+0x36/0x40 [ 169.575686][T11160] ? release_sock+0x116/0x150 [ 169.575732][T11160] ? _raw_spin_unlock_bh+0x36/0x40 [ 169.575781][T11160] ? lock_sock_nested+0x112/0x140 [ 169.575857][T11160] ? selinux_netlbl_socket_connect+0x115/0x130 [ 169.575962][T11160] inet_stream_connect+0x44/0x70 [ 169.575993][T11160] ? __pfx_inet_stream_connect+0x10/0x10 [ 169.576015][T11160] __sys_connect+0x1ef/0x2b0 [ 169.576054][T11160] __x64_sys_connect+0x3f/0x50 [ 169.576111][T11160] x64_sys_call+0x2c08/0x2ff0 [ 169.576138][T11160] do_syscall_64+0xd2/0x200 [ 169.576164][T11160] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.576193][T11160] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 169.576283][T11160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.576310][T11160] RIP: 0033:0x7f5019c5ebe9 [ 169.576329][T11160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.576349][T11160] RSP: 002b:00007f50186c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 169.576409][T11160] RAX: ffffffffffffffda RBX: 00007f5019e85fa0 RCX: 00007f5019c5ebe9 [ 169.576431][T11160] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000005 [ 169.576482][T11160] RBP: 00007f50186c7090 R08: 0000000000000000 R09: 0000000000000000 [ 169.576526][T11160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.576545][T11160] R13: 00007f5019e86038 R14: 00007f5019e85fa0 R15: 00007ffd3bab3718 [ 169.576566][T11160] [ 169.623500][T11156] dummy0: entered promiscuous mode [ 169.820345][T11175] loop0: detected capacity change from 0 to 512 [ 169.866472][T11175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.878073][T11173] bond2: entered promiscuous mode [ 169.882531][T11175] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.884757][T11173] bond2: entered allmulticast mode [ 169.899208][T11156] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #12: comm syz.0.2226: corrupted xattr block 6: invalid header [ 169.910570][T11173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.924790][T11156] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 169.924832][T11156] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #12: comm syz.0.2226: corrupted xattr block 6: invalid header [ 169.925372][T11156] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 169.958480][T11173] bond2 (unregistering): Released all slaves [ 169.966231][T11156] EXT4-fs error (device loop0): ext4_xattr_block_find:1869: inode #12: comm syz.0.2226: corrupted xattr block 6: invalid header [ 169.997678][ T6962] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 170.047303][T11189] 9pnet_virtio: no channels available for device 127.0.0.1 [ 170.064307][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.260326][T11215] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 170.303628][T11215] lo speed is unknown, defaulting to 1000 [ 170.404976][T11215] lo speed is unknown, defaulting to 1000 [ 170.644491][T11234] IPv6: Can't replace route, no match found [ 170.682851][T11238] loop0: detected capacity change from 0 to 1024 [ 170.716430][T11238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.732116][T11238] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.763506][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 170.763521][ T29] audit: type=1400 audit(2000000077.910:4976): avc: denied { append } for pid=11244 comm="syz.7.2248" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 170.798477][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.810398][T11248] 9pnet: Could not find request transport: f Ü [ 170.832796][ T29] audit: type=1400 audit(2000000077.980:4977): avc: denied { setopt } for pid=11247 comm="syz.3.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.853263][ T29] audit: type=1400 audit(2000000077.980:4978): avc: denied { bind } for pid=11247 comm="syz.3.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.858005][T11248] loop3: detected capacity change from 0 to 512 [ 170.887840][T11248] EXT4-fs: dax option not supported [ 170.894077][T11248] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2249'. [ 170.925605][ T29] audit: type=1400 audit(2000000078.080:4979): avc: denied { read } for pid=11257 comm="syz.0.2251" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 170.948822][ T29] audit: type=1400 audit(2000000078.080:4980): avc: denied { open } for pid=11257 comm="syz.0.2251" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 170.972855][ T29] audit: type=1400 audit(2000000078.080:4981): avc: denied { ioctl } for pid=11257 comm="syz.0.2251" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 170.997709][ T29] audit: type=1326 audit(2000000078.090:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.7.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66c52ebe9 code=0x7ffc0000 [ 171.021509][ T29] audit: type=1326 audit(2000000078.090:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.7.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66c52ebe9 code=0x7ffc0000 [ 171.059142][ T29] audit: type=1400 audit(2000000078.200:4984): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.1.57 dest=50086 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 171.085644][ T29] audit: type=1400 audit(2000000078.210:4985): avc: denied { read write } for pid=10565 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.100181][ T1036] hid-generic 0000:0D17:0000.0014: item fetching failed at offset 0/2 [ 171.141174][ T1036] hid-generic 0000:0D17:0000.0014: probe with driver hid-generic failed with error -22 [ 171.255443][T11281] FAULT_INJECTION: forcing a failure. [ 171.255443][T11281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.268826][T11281] CPU: 0 UID: 0 PID: 11281 Comm: syz.3.2260 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 171.268865][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.268876][T11281] Call Trace: [ 171.268883][T11281] [ 171.268890][T11281] __dump_stack+0x1d/0x30 [ 171.268948][T11281] dump_stack_lvl+0xe8/0x140 [ 171.268971][T11281] dump_stack+0x15/0x1b [ 171.269005][T11281] should_fail_ex+0x265/0x280 [ 171.269025][T11281] should_fail+0xb/0x20 [ 171.269041][T11281] should_fail_usercopy+0x1a/0x20 [ 171.269063][T11281] _copy_from_user+0x1c/0xb0 [ 171.269167][T11281] ip_tunnel_parm_from_user+0x4c/0x230 [ 171.269199][T11281] ip_tunnel_siocdevprivate+0x45/0xe0 [ 171.269249][T11281] dev_ifsioc+0x8f8/0xaa0 [ 171.269301][T11281] dev_ioctl+0x78d/0x960 [ 171.269323][T11281] sock_ioctl+0x593/0x610 [ 171.269350][T11281] ? __pfx_sock_ioctl+0x10/0x10 [ 171.269371][T11281] __se_sys_ioctl+0xcb/0x140 [ 171.269410][T11281] __x64_sys_ioctl+0x43/0x50 [ 171.269445][T11281] x64_sys_call+0x1816/0x2ff0 [ 171.269468][T11281] do_syscall_64+0xd2/0x200 [ 171.269567][T11281] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.269591][T11281] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.269650][T11281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.269674][T11281] RIP: 0033:0x7f5019c5ebe9 [ 171.269691][T11281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.269712][T11281] RSP: 002b:00007f50186c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.269783][T11281] RAX: ffffffffffffffda RBX: 00007f5019e85fa0 RCX: 00007f5019c5ebe9 [ 171.269796][T11281] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000004 [ 171.269810][T11281] RBP: 00007f50186c7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.269823][T11281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.269843][T11281] R13: 00007f5019e86038 R14: 00007f5019e85fa0 R15: 00007ffd3bab3718 [ 171.269863][T11281] [ 171.282847][T11280] loop0: detected capacity change from 0 to 1024 [ 171.497102][T11280] EXT4-fs: inline encryption not supported [ 171.497292][T11280] EXT4-fs: Ignoring removed bh option [ 171.598483][T11280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.619472][T11290] FAULT_INJECTION: forcing a failure. [ 171.619472][T11290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.632708][T11290] CPU: 1 UID: 0 PID: 11290 Comm: syz.1.2264 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 171.632740][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.632754][T11290] Call Trace: [ 171.632761][T11290] [ 171.632769][T11290] __dump_stack+0x1d/0x30 [ 171.632861][T11290] dump_stack_lvl+0xe8/0x140 [ 171.632944][T11290] dump_stack+0x15/0x1b [ 171.632961][T11290] should_fail_ex+0x265/0x280 [ 171.632982][T11290] should_fail+0xb/0x20 [ 171.632999][T11290] should_fail_usercopy+0x1a/0x20 [ 171.633022][T11290] _copy_from_user+0x1c/0xb0 [ 171.633069][T11290] snd_seq_write+0x1d3/0x530 [ 171.633103][T11290] ? __pfx_snd_seq_write+0x10/0x10 [ 171.633130][T11290] vfs_write+0x269/0x960 [ 171.633153][T11290] ? __rcu_read_unlock+0x4f/0x70 [ 171.633203][T11290] ? __fget_files+0x184/0x1c0 [ 171.633231][T11290] ksys_write+0xda/0x1a0 [ 171.633254][T11290] __x64_sys_write+0x40/0x50 [ 171.633289][T11290] x64_sys_call+0x27fe/0x2ff0 [ 171.633391][T11290] do_syscall_64+0xd2/0x200 [ 171.633418][T11290] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.633443][T11290] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.633554][T11290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.633577][T11290] RIP: 0033:0x7f8ae72aebe9 [ 171.633675][T11290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.633756][T11290] RSP: 002b:00007f8ae5cf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.633778][T11290] RAX: ffffffffffffffda RBX: 00007f8ae74d6090 RCX: 00007f8ae72aebe9 [ 171.633792][T11290] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 171.633805][T11290] RBP: 00007f8ae5cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.633819][T11290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.633832][T11290] R13: 00007f8ae74d6128 R14: 00007f8ae74d6090 R15: 00007fff0b3b57e8 [ 171.633853][T11290] [ 171.845065][T11280] sd 0:0:1:0: device reset [ 171.914178][T11304] FAULT_INJECTION: forcing a failure. [ 171.914178][T11304] name failslab, interval 1, probability 0, space 0, times 0 [ 171.927013][T11304] CPU: 0 UID: 0 PID: 11304 Comm: syz.1.2268 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 171.927046][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.927059][T11304] Call Trace: [ 171.927067][T11304] [ 171.927076][T11304] __dump_stack+0x1d/0x30 [ 171.927103][T11304] dump_stack_lvl+0xe8/0x140 [ 171.927124][T11304] dump_stack+0x15/0x1b [ 171.927143][T11304] should_fail_ex+0x265/0x280 [ 171.927166][T11304] should_failslab+0x8c/0xb0 [ 171.927194][T11304] kmem_cache_alloc_noprof+0x50/0x310 [ 171.927249][T11304] ? alloc_empty_file+0x76/0x200 [ 171.927280][T11304] alloc_empty_file+0x76/0x200 [ 171.927341][T11304] path_openat+0x68/0x2170 [ 171.927362][T11304] ? mntput+0x4b/0x80 [ 171.927390][T11304] ? terminate_walk+0x27f/0x2a0 [ 171.927418][T11304] ? path_openat+0x1bf8/0x2170 [ 171.927504][T11304] ? _parse_integer_limit+0x170/0x190 [ 171.927527][T11304] do_filp_open+0x109/0x230 [ 171.927557][T11304] do_open_execat+0xd8/0x260 [ 171.927579][T11304] alloc_bprm+0x25/0x350 [ 171.927602][T11304] do_execveat_common+0x12e/0x750 [ 171.927693][T11304] ? getname_flags+0x154/0x3b0 [ 171.927795][T11304] __x64_sys_execveat+0x73/0x90 [ 171.927898][T11304] x64_sys_call+0x1fec/0x2ff0 [ 171.927921][T11304] do_syscall_64+0xd2/0x200 [ 171.927949][T11304] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.927975][T11304] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.928111][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.928134][T11304] RIP: 0033:0x7f8ae72aebe9 [ 171.928151][T11304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.928250][T11304] RSP: 002b:00007f8ae5d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 171.928341][T11304] RAX: ffffffffffffffda RBX: 00007f8ae74d5fa0 RCX: 00007f8ae72aebe9 [ 171.928355][T11304] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 171.928368][T11304] RBP: 00007f8ae5d17090 R08: 0000000000000000 R09: 0000000000000000 [ 171.928382][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.928395][T11304] R13: 00007f8ae74d6038 R14: 00007f8ae74d5fa0 R15: 00007fff0b3b57e8 [ 171.928418][T11304] [ 172.212249][T11310] 9pnet_virtio: no channels available for device 127.0.0.1 [ 172.262310][T11313] loop1: detected capacity change from 0 to 1024 [ 172.287165][T11313] EXT4-fs: Ignoring removed orlov option [ 172.314893][T11313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.348980][T11321] IPv6: Can't replace route, no match found [ 172.386997][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.474033][T11313] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2270: bg 0: block 88: padding at end of block bitmap is not set [ 172.603537][ T1036] IPVS: starting estimator thread 0... [ 172.612302][T11343] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 172.636669][T11344] lo speed is unknown, defaulting to 1000 [ 172.704544][T11345] IPVS: using max 2448 ests per chain, 122400 per kthread [ 172.746585][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.761965][T11344] lo speed is unknown, defaulting to 1000 [ 172.867953][T11348] 9pnet_virtio: no channels available for device 127.0.0.1 [ 173.169140][ T1036] hid-generic 0000:0D17:0000.0015: item fetching failed at offset 0/2 [ 173.194034][ T1036] hid-generic 0000:0D17:0000.0015: probe with driver hid-generic failed with error -22 [ 173.216683][ T3469] hid-generic 0000:0D17:0000.0016: item fetching failed at offset 0/2 [ 173.230739][T11376] program syz.0.2292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.230872][ T3469] hid-generic 0000:0D17:0000.0016: probe with driver hid-generic failed with error -22 [ 173.260506][T11378] 9pnet_virtio: no channels available for device 127.0.0.1 [ 173.289824][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'. [ 173.339172][T11381] loop3: detected capacity change from 0 to 512 [ 173.393277][T11381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.406641][T11381] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.423849][T11401] IPv6: Can't replace route, no match found [ 173.424133][T11381] FAULT_INJECTION: forcing a failure. [ 173.424133][T11381] name failslab, interval 1, probability 0, space 0, times 0 [ 173.442564][T11381] CPU: 1 UID: 0 PID: 11381 Comm: syz.3.2294 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 173.442596][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.442607][T11381] Call Trace: [ 173.442614][T11381] [ 173.442622][T11381] __dump_stack+0x1d/0x30 [ 173.442716][T11381] dump_stack_lvl+0xe8/0x140 [ 173.442782][T11381] dump_stack+0x15/0x1b [ 173.442873][T11381] should_fail_ex+0x265/0x280 [ 173.442893][T11381] should_failslab+0x8c/0xb0 [ 173.442946][T11381] kmem_cache_alloc_noprof+0x50/0x310 [ 173.442975][T11381] ? skb_clone+0x151/0x1f0 [ 173.443000][T11381] skb_clone+0x151/0x1f0 [ 173.443090][T11381] __netlink_deliver_tap+0x2c9/0x500 [ 173.443118][T11381] netlink_unicast+0x66b/0x690 [ 173.443178][T11381] netlink_sendmsg+0x58b/0x6b0 [ 173.443199][T11381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.443220][T11381] __sock_sendmsg+0x145/0x180 [ 173.443248][T11381] ____sys_sendmsg+0x31e/0x4e0 [ 173.443337][T11381] ___sys_sendmsg+0x17b/0x1d0 [ 173.443371][T11381] __x64_sys_sendmsg+0xd4/0x160 [ 173.443397][T11381] x64_sys_call+0x191e/0x2ff0 [ 173.443417][T11381] do_syscall_64+0xd2/0x200 [ 173.443447][T11381] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.443511][T11381] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 173.443534][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.443555][T11381] RIP: 0033:0x7f5019c5ebe9 [ 173.443572][T11381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.443589][T11381] RSP: 002b:00007f50186c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.443622][T11381] RAX: ffffffffffffffda RBX: 00007f5019e85fa0 RCX: 00007f5019c5ebe9 [ 173.443636][T11381] RDX: 000000002004e004 RSI: 0000200000006280 RDI: 0000000000000008 [ 173.443650][T11381] RBP: 00007f50186c7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.443666][T11381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.443680][T11381] R13: 00007f5019e86038 R14: 00007f5019e85fa0 R15: 00007ffd3bab3718 [ 173.443703][T11381] [ 173.685927][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2302'. [ 173.695337][T11403] netlink: 'syz.5.2302': attribute type 30 has an invalid length. [ 173.710279][ T9289] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.720451][ T9289] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.730600][ T9289] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.739653][ T9289] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.803581][T11409] loop7: detected capacity change from 0 to 2048 [ 173.820353][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.831296][T11409] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.852391][T11409] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2305: bg 0: block 120: padding at end of block bitmap is not set [ 173.882898][T11414] loop3: detected capacity change from 0 to 2048 [ 173.914689][ T3292] loop3: p1 < > p4 [ 173.919717][ T3292] loop3: p4 size 8388608 extends beyond EOD, truncated [ 173.929509][T11414] loop3: p1 < > p4 [ 173.933917][T11414] loop3: p4 size 8388608 extends beyond EOD, truncated [ 173.994499][T11418] 9pnet_virtio: no channels available for device 127.0.0.1 [ 174.009494][T10565] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 174.029565][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 174.039869][ T3961] udevd[3961]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 174.064743][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 174.065494][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 174.123165][T11431] loop7: detected capacity change from 0 to 512 [ 174.130257][T11431] EXT4-fs: Ignoring removed oldalloc option [ 174.148357][T11431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.169813][T11431] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.221687][T10565] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.237753][T11443] FAULT_INJECTION: forcing a failure. [ 174.237753][T11443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.251044][T11443] CPU: 1 UID: 0 PID: 11443 Comm: syz.0.2312 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 174.251111][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.251125][T11443] Call Trace: [ 174.251132][T11443] [ 174.251140][T11443] __dump_stack+0x1d/0x30 [ 174.251164][T11443] dump_stack_lvl+0xe8/0x140 [ 174.251235][T11443] dump_stack+0x15/0x1b [ 174.251254][T11443] should_fail_ex+0x265/0x280 [ 174.251279][T11443] should_fail+0xb/0x20 [ 174.251297][T11443] should_fail_usercopy+0x1a/0x20 [ 174.251334][T11443] _copy_to_user+0x20/0xa0 [ 174.251444][T11443] simple_read_from_buffer+0xb5/0x130 [ 174.251470][T11443] proc_fail_nth_read+0x10e/0x150 [ 174.251501][T11443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.251644][T11443] vfs_read+0x1a8/0x770 [ 174.251666][T11443] ? __rcu_read_unlock+0x4f/0x70 [ 174.251748][T11443] ? __fget_files+0x184/0x1c0 [ 174.251778][T11443] ksys_read+0xda/0x1a0 [ 174.251802][T11443] __x64_sys_read+0x40/0x50 [ 174.251825][T11443] x64_sys_call+0x27bc/0x2ff0 [ 174.251926][T11443] do_syscall_64+0xd2/0x200 [ 174.251956][T11443] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 174.251984][T11443] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 174.252010][T11443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.252036][T11443] RIP: 0033:0x7fa06668d5fc [ 174.252054][T11443] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.252095][T11443] RSP: 002b:00007fa0650d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.252116][T11443] RAX: ffffffffffffffda RBX: 00007fa0668b6090 RCX: 00007fa06668d5fc [ 174.252129][T11443] RDX: 000000000000000f RSI: 00007fa0650d60a0 RDI: 0000000000000006 [ 174.252142][T11443] RBP: 00007fa0650d6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.252204][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.252218][T11443] R13: 00007fa0668b6128 R14: 00007fa0668b6090 R15: 00007ffc7fe73148 [ 174.252240][T11443] [ 174.252761][ T2991] ================================================================== [ 174.464819][ T2991] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 174.472135][ T2991] [ 174.474460][ T2991] write to 0xffff888106f45330 of 8 bytes by task 3292 on cpu 1: [ 174.482088][ T2991] dentry_unlink_inode+0x65/0x260 [ 174.487122][ T2991] d_delete+0x164/0x180 [ 174.491287][ T2991] d_delete_notify+0x32/0x100 [ 174.495966][ T2991] vfs_unlink+0x30b/0x420 [ 174.500397][ T2991] do_unlinkat+0x24e/0x480 [ 174.504925][ T2991] __x64_sys_unlink+0x2e/0x40 [ 174.509614][ T2991] x64_sys_call+0x2dc0/0x2ff0 [ 174.514297][ T2991] do_syscall_64+0xd2/0x200 [ 174.518811][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.524966][ T2991] [ 174.527294][ T2991] read to 0xffff888106f45330 of 8 bytes by task 2991 on cpu 0: [ 174.534878][ T2991] step_into+0x122/0x820 [ 174.539302][ T2991] walk_component+0x162/0x220 [ 174.544071][ T2991] path_lookupat+0xfe/0x2a0 [ 174.548579][ T2991] filename_lookup+0x147/0x340 [ 174.553463][ T2991] do_readlinkat+0x7d/0x320 [ 174.557992][ T2991] __x64_sys_readlink+0x47/0x60 [ 174.563312][ T2991] x64_sys_call+0x28da/0x2ff0 [ 174.568013][ T2991] do_syscall_64+0xd2/0x200 [ 174.572569][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.578853][ T2991] [ 174.581259][ T2991] value changed: 0xffff88811f4271e8 -> 0x0000000000000000 [ 174.588448][ T2991] [ 174.590773][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 174.597184][ T2991] CPU: 0 UID: 0 PID: 2991 Comm: udevd Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 174.609365][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.619432][ T2991] ================================================================== [ 174.631622][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2314'. [ 174.640724][T11445] netlink: 'syz.7.2314': attribute type 30 has an invalid length. [ 174.666058][ T9289] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.675993][ T9289] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.685295][ T9289] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.695732][ T9289] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.131827][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 179.131841][ T29] audit: type=1400 audit(2000000086.280:5204): avc: denied { search } for pid=11457 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.162317][ T29] audit: type=1400 audit(2000000086.280:5205): avc: denied { search } for pid=11457 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.185812][ T29] audit: type=1400 audit(2000000086.280:5206): avc: denied { search } for pid=11457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.209580][ T29] audit: type=1400 audit(2000000086.280:5207): avc: denied { search } for pid=11457 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.232925][ T29] audit: type=1400 audit(2000000086.280:5208): avc: denied { read open } for pid=11458 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.258948][ T29] audit: type=1400 audit(2000000086.280:5209): avc: denied { getattr } for pid=11458 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.284447][ T29] audit: type=1400 audit(2000000086.290:5210): avc: denied { getattr } for pid=11458 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.311800][ T29] audit: type=1400 audit(2000000086.300:5211): avc: denied { read } for pid=11460 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.333839][ T29] audit: type=1400 audit(2000000086.300:5212): avc: denied { open } for pid=11460 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.359150][ T29] audit: type=1400 audit(2000000086.340:5213): avc: denied { add_name } for pid=11457 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1