last executing test programs: 2m16.788301036s ago: executing program 32 (id=1191): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m45.662772683s ago: executing program 33 (id=1380): mknod$loop(0x0, 0x6000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f0000000440)={[{@auto_da_alloc_val}, {@quota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r11 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r11, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2'}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRES32=r4, @ANYRESOCT=r5, @ANYRES16=r10, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x258, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0xe3, 0x3, "2b18fd06feba6af1331dae852043b1e89046fd5b08988a58d45d8c139131bfe9335e50097940a19d550f8e4750db2e810681463c5c3fa2c581ef83be632554bf7edd7f2586ba621ee56bf59804e45e3f7eaa20a0466750740b805393a118e82c9ead13a79a809e2f4c87e4a9aab49c6dc016933c4e7408f2ba2a38d49ba3f346447478c91cf01edcb6d09df8c5a81e02004e3debe3dab8662c48af1ee9d424585778f4136e20a0689e7560f5645bac3802967cf8f2a76e4dbcea1e36f64433477ced54efec92f3576e83563999820bd869b8a004777107ee66f3f2d2ffb900"}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1783}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6558b3b7}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48a}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}]}, 0x258}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2b, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r13, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) 1m39.780228507s ago: executing program 0 (id=1584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x6dfb, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x0, 0x11b}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) dup2(r3, r2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1m39.321899112s ago: executing program 0 (id=1586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x4e24, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 1m39.211488474s ago: executing program 0 (id=1587): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000000), 0x1, 0x530, &(0x7f00000003c0)="$eJzs3e9rJGcdAPDvTLLX3F1qtipyFmyLrdwVvd3LxbZRpK0g+qqgnu/PNNkL4TbZI7s5L6HYFP8AQUQF/wARBMG3gvRPELGg70VFEb3qS+3IzM56l8tusnfZZM/N5wNP9nnmx/N9niE7Oz8eZgI4tZ6LiNcjYioiXoyIuXJ6WqbY7aZ8uffvvrWcpySy7Nrfk0jKab268vJ0RJwvV5uJiK9/JeLNZH/c9vbOzaVms7FZluud9Vv19vbO5bX1pdXGamNjYWH+5cVXFl9avJKVjtTPakS8+qU//+C7P/nyq7/6zLf+cP2vl76dN+sLH+u2OyKWjxRggG7dlWJb9OTbaPM4go1J3p/K1LhbAQDAMPJj/A9HxCeL4/+5mCqO5gAAAIBJkr02G/9OIjIAAABgYqURMRtJWivHAsxGmtZq3TG8H41zabPV7nz6RmtrYyWfF1GNSnpjrdm4Uo4VrkYlycvz5RjbXvnqA+WFiHgqIr4/d7Yo15ZbzZVxX/wAAACAU+L8s3vP//81lxb5e347trYBAAAAI1QdWCjc/sVP3zzJ5gAAAADHYP8pPwAAADBpnP8DAADARPvqG2/kKeu9x3vl9vbWzdbtyyuN9s3a+tZybbm1eau22mqtFs/sWz+svmardeuzsbF1p95ptDv19vbO9fXW1kbn+tqeV2ADAAAAJ+ipZ9/9fRIRu58/W6QonwMIsMefxt0AYJSmehlX5+HUmR53A4CxqRy6hD0ETLrkkPl7Tg+yLHu7l//1sTUJAAAYsYsf33///0w57/BrA8D/M2N9AOD0cXcPTq/KvRGAD+fCqFsCjMuHuh9PDJo/cHjwEPf/u9cYsuyRGgYAAIzMbJGStFYep89GmtZqEU8WrwWoJDfWmo0r5fnB7+YqT+Tl+WLN5NAxwwAAAAAAAAAAAAAAAAAAAAAAAABAV5YlkQEAAAATLSL9S1I8zT/i4twLs3uvDjzw1q8fX/vhnaVOZ3M+4kzyj7l80pmI6PzoWhL59KuZVwIAAADAY6A4f79afs6PuzUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATJr377613EsnGfdvX4yIar/40zFTfM5EJSLO/TOJ6fvWSyJiagTxd9+JiAv94ifxQZZl1bIV/eKfPeb41WLT9I+fRsT5EcSH0+zdfP/zer/vXxrPFZ/9v3/TZTqqwfu/9H/7v6kB+58nHygP8vR7P68PjP9OxNPT/fc/vfhJN/6eEHnh+SH7+M1v7Oz0nXFflf3i3x+r3lm/VW9v71xeW19abaw2NhYW5l9efGXxpcUr9RtrzUb5t2+Y733ilx8c1P9zA+JX9/Z/3/Z/YajeZ/Gf9+7c/Ui3UOkX/9Lz/X9/LwyIn5a/fZ8q8/n8i738bjd/v2d+9ptnDur/yoD+zxzS/0tD9T8+9+LXvvPHvnP2bQ0A4CS0t3duLjWbjc0DMjNDLHPCmdcej2aMMBOPRzMeNlMZUT3Z293/x6PVc8TV92Wyo6w+HSNoxpl939OpeNQKk4jdvK4h/yEBAIAJc++g/6A7SAAAAAAAAAAAAAAAAAAAAMBxesTHks1ExNALPxhzdzxdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40H8DAAD//6DU1oA=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c00058008000140"], 0x1ec}}, 0x0) 1m38.482014433s ago: executing program 34 (id=1596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000004c0)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) (fail_nth: 4) 1m37.519179855s ago: executing program 35 (id=1599): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x1, r4}, 0x38) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) shutdown(r5, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x2}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e0005000a"], 0x40}}, 0x0) 1m36.870721543s ago: executing program 0 (id=1604): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=@base={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x810) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(r7, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff7}]}]}]}}]}, 0x9c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) 1m36.436244728s ago: executing program 0 (id=1606): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000000), 0x1, 0x530, &(0x7f00000003c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 1m35.382178351s ago: executing program 0 (id=1616): r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r2, r3, 0x0, 0x8000fffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRESOCT=r6, @ANYBLOB='\x00'/20, @ANYRES64=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000600)={0x631, "338c00731658b6b6a9639ed1eb5d376259c9135a5beb05a92f330381a0bc6beefd5ddea038af0ccb2c1b7a8252dd53d775c874394d07d94c92cf62c628e7385c605c13596749ea7a33a3b04e6c35c5423a87ebcb9310c17cee8673053d3812400ced83a0e1a35f44dc57defc329456b534a73e5f81e2d76ab383873a8d33caaa"}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r11, &(0x7f0000000000)=0x700, 0x12) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r8}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r13, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1m35.297551012s ago: executing program 36 (id=1616): r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r2, r3, 0x0, 0x8000fffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRESOCT=r6, @ANYBLOB='\x00'/20, @ANYRES64=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000600)={0x631, "338c00731658b6b6a9639ed1eb5d376259c9135a5beb05a92f330381a0bc6beefd5ddea038af0ccb2c1b7a8252dd53d775c874394d07d94c92cf62c628e7385c605c13596749ea7a33a3b04e6c35c5423a87ebcb9310c17cee8673053d3812400ced83a0e1a35f44dc57defc329456b534a73e5f81e2d76ab383873a8d33caaa"}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r11, &(0x7f0000000000)=0x700, 0x12) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r8}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r13, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1m31.296239862s ago: executing program 3 (id=1634): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x91b, 0x1000, 0x4, 0x1ab}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800009618460200000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)='\x00', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r8}, 0x10) pselect6(0x40, &(0x7f0000000300)={0x0, 0x3ffffffffffffffc, 0x3, 0x102, 0x0, 0x10}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x7fffffff, 0x7c, 0x0, 0x400}, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@rnullb, r9, &(0x7f00000002c0)='./file0\x00') 1m31.027191365s ago: executing program 3 (id=1636): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000000153d3000000000005"]) 1m30.940216847s ago: executing program 3 (id=1637): pipe(&(0x7f0000000140)) syz_emit_ethernet(0x4b, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa01807a5b067eb707751100040200e9791dc54ada35dff72f580f1ccefe4f71f9bd342c5442e13df3bd0469777a779d4e754b7f8051"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004d"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000002b00), 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1m30.66329512s ago: executing program 3 (id=1640): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=@base={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x810) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff7}]}]}]}}]}, 0x9c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) 1m30.275160705s ago: executing program 3 (id=1643): getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='svcrdma_decode_wseg\x00', 0xffffffffffffffff, 0x0, 0x20}, 0x18) syz_emit_ethernet(0xffffffffffffffd5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$tun(r5, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x4e24, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 1m29.240763048s ago: executing program 3 (id=1653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="08e9ffb00000000000000000000000109500000000000000371e853cba4b4f292e5efef3"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000380)="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"/301, 0x12d, r6) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1, 0x2, 0x0, 0x0, r3}) r7 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_sock=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mlockall(0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r9 = syz_pidfd_open(r7, 0x0) setns(r9, 0x24020000) stat(0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x20) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) 1m29.129820529s ago: executing program 37 (id=1653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="08e9ffb00000000000000000000000109500000000000000371e853cba4b4f292e5efef3"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000380)="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"/301, 0x12d, r6) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1, 0x2, 0x0, 0x0, r3}) r7 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_sock=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mlockall(0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r9 = syz_pidfd_open(r7, 0x0) setns(r9, 0x24020000) stat(0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x20) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) 1m18.242560095s ago: executing program 9 (id=1761): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="fbadf5185a90d3c83f830e08708be7afc5951c16e5b63725609e0c410de2d1d7d1", 0x21}], 0x1, 0x7fff, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) sendfile(r0, r2, 0x0, 0x100001) 1m17.761689891s ago: executing program 9 (id=1763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='cpu&&0&&\t') 1m17.630957313s ago: executing program 9 (id=1764): syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0), &(0x7f0000000040)) 1m17.585160553s ago: executing program 9 (id=1766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYBLOB="002918d910d46be7099c66b02010b1f0b7c3dc1dabe625969fb0adc922385af53d57a1d35dd71c90d9dd649b53142dd3d4108b4c7db82e8475d5bb6fa2fa626cd92c7326ce1ba2f33b0aef2b2164e01d910058b51684696959ea7f5a607a6572d2640cf9312a07000000260e3651a0cbfd2c080990fb4c76e9e613a759863734a70d0600ec77e8ba76aacbb21e4b903aa4873a9951f269a9c0f87805a1a0cbdf6b8644a1de05a8d9dd9687d67c8af7f68cb59e60d1fbefb49b93d6b72cce4162edc4468a13987d94d428df36915621aeff6dc1358a7331fa69e05c417c2e1e6b8dc29c496c76d02dfc2d7b48616fb3f01b221f4f8f484a00090964922de8909a1f9f7ef655a12a68a56cb341a8fba4cd81cedec9cb518d13d2a2564427b63b037494748a24daa21fe1256df68d000b2778bf0437cc642cd83c5a1b34eeffdf93ecbd85bb340eeef68dd60101769c74f94d217264c171feea0305bfc87c36247d90b129a9973f00000001d99b195d2f75653a0193672783c6dbca5d1445110621d8095064f0a034f492cf5aa4767a772d6f4967722546bfd83d3202f76c20a9d7f40f9e7818d77129df7fd072804e0227ecaa03dddd303a318d6f7763ce011543587e6a306780ca2f37db7e8a5b64a5059ac91ff2110e40ea13d70e1504653ba9eebcf61b427797fb3fd79d2bb9aaa13c9729fe323c4ac222991981381e004684fb200b17d2f6ede181067662ad8a31f45b613869ca8fc5b1dbe62407a1f6dcb86a4c430210e9bcfca9b83283b87316c4d17f388e0bab0500000092a82e12f8e5348f11e7739033e9081bfc598746cf032fa55d0300470000000019ac65f89ca7d96da3ca2db52f8ec80462fddf42dbbca24b720000000000000000000000000000005214e7febdbc0033d6402c34aa96940474"], 0x1, 0x1221, &(0x7f0000002300)="$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") ptrace(0x10, 0x0) ptrace$setregs(0x1a, 0x0, 0xc, &(0x7f0000000000)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f0000000140), 0x1, 0x27c, &(0x7f0000000c40)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) ioperm(0x1, 0x8, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 1m17.155097168s ago: executing program 9 (id=1773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, r1, 0x8) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x9) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bind$llc(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) mmap$perf(&(0x7f000047b000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000000000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) socket$netlink(0x10, 0x3, 0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="4359423435974b8b8f3c3f05df748a80d57011124eae29f253650aa6f593b18737f6", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) syz_io_uring_setup(0x27f0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x27, 0xffffffffffffffff}, 0xfffffffffffffeee) 1m16.942153621s ago: executing program 9 (id=1781): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000ec0)=0x200009, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae41}, 0x1c) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x10, 0x1, 0x9, 0x3, 0x15, "007de521ec070ef4f834bbeda7f6647bbfdef7"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000400)='GPL\x00', 0x48bc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x9}, 0x18) r4 = syz_io_uring_setup(0x19dc, &(0x7f00000004c0)={0x0, 0x1068, 0x200, 0x0, 0x1ab}, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x5d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x401c0, 0x8) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000002c0), 0x4) io_uring_setup(0x36be, &(0x7f0000000240)={0x0, 0x977c, 0x4000, 0x0, 0x3a}) epoll_create(0x4) socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x2670a7f749be0f7f, 0x13, 0x8, 0x9, 0x0, 0x4, &(0x7f0000000180)}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigsuspend(0x0, 0x0) mq_open(0x0, 0x1, 0x8, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) 1m16.895460812s ago: executing program 38 (id=1781): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000ec0)=0x200009, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae41}, 0x1c) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x10, 0x1, 0x9, 0x3, 0x15, "007de521ec070ef4f834bbeda7f6647bbfdef7"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000400)='GPL\x00', 0x48bc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x9}, 0x18) r4 = syz_io_uring_setup(0x19dc, &(0x7f00000004c0)={0x0, 0x1068, 0x200, 0x0, 0x1ab}, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x5d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x401c0, 0x8) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000002c0), 0x4) io_uring_setup(0x36be, &(0x7f0000000240)={0x0, 0x977c, 0x4000, 0x0, 0x3a}) epoll_create(0x4) socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x2670a7f749be0f7f, 0x13, 0x8, 0x9, 0x0, 0x4, &(0x7f0000000180)}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigsuspend(0x0, 0x0) mq_open(0x0, 0x1, 0x8, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) 48.543968835s ago: executing program 2 (id=2147): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x3}, 0x8, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 47.558877337s ago: executing program 2 (id=2159): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000020800000f00000004000000002d0400", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0101000005000000000008000e0000000000000000000000000000001512014f1aa6f961672da036c567b4cf6ad2875158015effdf650dd3755a63d09ac779672fb0e17f1e03d5a3ffeb2fd293a8c56e677a64b7e06d7c5430c8a10fcdaab76216e5912e360442f2e23360f68bfd30"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000000d14000126bd7000fbdbdf11080001000000000008003e000500090000000000efffffff07003e0005000000"], 0x30}}, 0x40804) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf2504000100"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72160}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000680)=@ethtool_regs={0x12}}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, 0x0, 0x0) r5 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x3, &(0x7f0000000400)='roo4c\xbe\xb1\x8f/hi\"9\xf2\xe7\xe0\xa7/\x17\'?\xae)\x18\xb2r\xfc%(\xe4\x9c\f\xbf\xb5\x83\x18\xb6^X\xa0\xf6\xdd\x0f\x1d\xd0\x03\x14\xe3\x96\x0f\xc4\xd1\xdb\xfb\x8dU\x15\xcb\xf3f\xf2\xd0y3\vz/\\\xe9\xf5*\xa5\xdf\xdf\xbeP%4\xe0\xcc!\xff\x140\x8b\xdeX\xc4\xfe\x85\x80X\b\x1d\xe9T\x95K\xad\xaf@\x9b\xbb\xf4\x96c\v\xe0\x8dG\xe0~\xde\x86=\xc0\xd0 \xbf\xf8\x0f\xd7\x99\xb8\t\x8amhG\xb5_\\\x14$d\xf3\\]*>\xcf\x18\xcb!\xe9i\x01\xcd\x1e\xc6\x9d$d\x9f*@|\a\xe8\x17\xe8M2Z;\xd4\x03\xfe\x8a_G\xfd\xf8\xf2\xc1\x11\x9f\xfc)\xd5\xeaP\xe6\xaf|4ad\xd6\xca%0\xe0\xfcf[7m\xba\x1f\xff\x9e\xa3\xcd\x1e\xaaj\xd2Pp8\x19\vJl!K\xfd\xe7\x9f\x1d\'\xc6\xd2\xe2\xf2[+\x83+\x8b\x8c\xf7\xb4C\xac\x02\xc4\xbf\x89\x93l\x9b\xd6s', &(0x7f0000000300), 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0xfffffffffffffffc, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES64=0x0, @ANYRES8=r2], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000980)=""/248) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f00000000c0)='./file0\x00', 0x0) utime(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c006cfaaec31a5f0d2037", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf250600000005002e0000000000060028000000000008003a000300000005002f0000000000050038000100000005002d000000000008003b0095ffffff05002e000100000005002f0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x800) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7fffffe}, 0x18) 46.392413472s ago: executing program 2 (id=2162): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000000153d3000000000005"]) 46.315849053s ago: executing program 2 (id=2164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) (fail_nth: 5) 45.964043327s ago: executing program 2 (id=2167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x10) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1000, 0x1, &(0x7f0000000800)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x1d, 0x9f2, 0xe7, 0x3, 0x2, 0xb1, 0x8, 0x5, 0x4, 0xe, [0xfffffffe, 0x2, 0x6, 0x3, 0x6, 0x6, 0x200, 0xd]}}) sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000006c0)="dd87", 0x2}], 0x2}}], 0x1, 0x8014) setsockopt$inet6_int(r4, 0x29, 0x60, &(0x7f00000000c0)=0x7fffffff, 0x4) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 45.75767396s ago: executing program 2 (id=2173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) flistxattr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x3}, 0x8, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) getxattr(0x0, 0x0, 0x0, 0x0) 30.592858699s ago: executing program 39 (id=2173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) flistxattr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x3}, 0x8, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) getxattr(0x0, 0x0, 0x0, 0x0) 11.728281833s ago: executing program 6 (id=2551): shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/97) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/netfilter\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4040, 0x709b6fb529be482d) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xee}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x40}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x116}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x30}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x992fc265d1170198}, 0x20000800) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000340)=""/200) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x17c, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x160, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66187c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71b1cb86}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33e075b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf703}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bb1736d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76fe2a11}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b455608}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49ccd408}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb72}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ea9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33f96257}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd38d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10edb8ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x180aea0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38916765}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ba5aad9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c33}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc3b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0c1}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68307e6d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f4b}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44f18cef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ea6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ccfcf9d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe82f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bb556e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8051}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42d1}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x74b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32e795ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d68}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d58e5b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8567}]}]}]}, 0x17c}}, 0x8014) io_setup(0xac12, &(0x7f0000000800)) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x4000, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000880)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x101, 0x8, "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", 0x5, 0xff, 0x2, 0x4, 0xef, 0x5, 0x1, 0x1}, r10}}, 0x120) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a40), 0x410000, 0x0) r12 = semget(0x2, 0x4, 0x108) semop(r12, &(0x7f0000000a80)=[{0x1, 0x9, 0x800}, {0x4, 0x80, 0x1800}, {0x1, 0x100, 0x1800}], 0x3) close(r11) chdir(&(0x7f0000000ac0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'caif0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0) r15 = dup2(r9, r1) r16 = openat$cgroup_ro(r2, &(0x7f00000022c0)='rdma.current\x00', 0x0, 0x0) r17 = getpgid(r0) sendmsg$unix(r13, &(0x7f00000025c0)={&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000c00)="ac201040a64ffd8084e51517a6a0d00bd2c87ba148cb4848e502095961860c12e7b5780466cf7322ef462f62def9e29002977d24ec497627901f28042b19b1659d10ad94657e478ee706e084b9743f23237f6a45ff16b7f9124be9145b5646a0da6679c7a8db09088263124f11610dc0fde8131d0284d95c031a8464c0cf", 0x7e}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="a60be4fac31ab41d4ef29f4cfc5eb4bc69b44046e7058e0f8a58a6431c309e5c98604b2b5429af97b3fd9cb465c8a9139ffff147714409a018418499cfbc85fc8f7f98c8c9e0f933f0d5a7d5c2c20e80d586846377c1cc467177b49cb4bd9d4432556f21252fc852d221d3c872bc35b79287274c264b45577b79f722b85f558d46c1aced9667cba27d5beeca49ffcbf2429aa112a824bb508cd2", 0x9a}, {&(0x7f0000001d40)="9320c69888dc18f7cf06d7718568f3fa54cbb9eb1ebad15214d4ab0ce7ac1ec640b3370fbbb58ae165a216603aa19dcf0d6c5e72b382f595b911c60b7c17e45a64eebfb8ed344f1053428be440276a557609c6dacd94e84b00cc6f8fa935b388579584505e990132d62373deaae7ea04e4054e5e1f81af0cd7cffcc98e003352bfffffefea71acb92f83b39532ddbe4c85fc2f1dd1a61e7503e440da35b8627519747dea4e977fc549bf33e206789acccae40e47ad9e8c148dc52d1942f72de5ecd161c94407c8473cdd", 0xca}, {&(0x7f0000001e40)="46a3bbce0ac3d99920328ef78e9cec4c1c15ae56eed9e0943ddafed0532ac47633645511316d77e2c9272fc068f5190882a938a8a14f3c2fcfcd9454e7beea040463a070abc1d8a56ce60008f36c0d2aa3bf5191c8c87fcdddf3ddc0dc227ff70ce9783ee5a7c8c44e647fd912ad0480b9f355f5965816b6049e50557409c54b7bb2b9af8f341544c043b6b6d440f5e413069abd4945c3020a98d50c90c2d0dca64b61a1e0983ace36b7e7a12a6f4bdc2e0ddc0497f4c45b81d72eee89b2b49574d883055a2b7541c6a23b2307c9f4ad78ccefefb0c3db1d5caf616fcb67aba9a6fe72fa52b57ec2", 0xe8}, {&(0x7f0000001f40)="985f52083a65c6fc5e648b192ba862a7c8aa1320b88ef38b9aa93b15098befced64b670adc2c63d3592ba32425c5755b3e8f419a890081de586a8ed8d1dcae1f07706b6c490f0320da0dc0ec0faa930729f358cac1dd446c472976d6c092468e609b59359ea1b8203eb4dd1648c79115c85bc68ee0f2167b87485b4fa61a033f2318579c7619c448cdcc2c6975b2e5cb4b7c9008f34a02f321e8d8f2b8c9adc30ba500dc35d6", 0xa6}, {&(0x7f0000002000)="7627bdf15cb712bc8e45c65ed70d5a667635637dd45cada9b89da97dfb6c8b14d9ef53ef58171c8ab78ba9ec79fe1a486309a84751169140b5952ecc7ace3c72c51318aa90d6f57eaeeb0a1c18cd43f8b68b906f06a8af2edf5b10e05d2e56087ea31417c45b41c90b3efcef246aaa01acc2ab9adbb53a77c474a121ebe0b28a99982587b6441e518ae19ae79b78e8d0894875ca433b78407e697653ec759a53d554dd7050a2f7df3b5272e5e3dbce05e8546e8b9bbe20cc560d9ac1eec3313ea8f2bbdd89da836c12d1417c415d862b028e77377a5589a46548", 0xda}, {&(0x7f0000002100)="a06c6a6129f08c8118d4924edcced0db6fd5793b440e339ce2a6334096988b9c82ab95702408c1855d02abc98f05e09977b5f09b4fcd29d85dbf06289b706a1d299e232ef6034171b21c89cc3794b56674ab70bca1b4a254d8f12f37bc0b63e0cff4b1a17ac0ade5a16b06497be0a97e337ecca6da57d9ed478dcabfa4cf1d22b28b8d3e7a8d9a08dbb440f0af37b72bbed037a0b9724aceabfc6c38571a2bfd006e42f6711e2c720aa4c329780a16f96fe60db50ed9eb29f167251b7e8e12b38a6899936465d17aa5aa44a729131d525f6fed09531605dbf73a5631438dd7abdf393291018016ed4387cbe077c628b47a5dda79bdfb", 0xf6}], 0x8, &(0x7f0000002500)=[@rights={{0x18, 0x1, 0x1, [r14, r15]}}, @rights={{0x34, 0x1, 0x1, [r9, r16, r9, 0xffffffffffffffff, r9, r1, r9, r9, r1]}}, @cred={{0x1c, 0x1, 0x2, {r17}}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x88, 0x48000}, 0x4) 11.544039606s ago: executing program 6 (id=2557): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xc7f}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x8000000, &(0x7f00008b5000/0x1000)=nil) 11.480462117s ago: executing program 6 (id=2559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x1f}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 11.476940157s ago: executing program 6 (id=2560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0xf0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x76}}}}, [@NL80211_ATTR_TESTDATA={0x56, 0x45, "358f32820545a0e7663b46497f6338740da67344d9632b08cbf2823e3465b77d807a0ecc30da9881ec70b87f976326d140228c2d63e5002a4ad9fcdf2d64c2007f23c228fb6d921eb0cf198738ea91470c61"}, @NL80211_ATTR_TESTDATA={0x66, 0x45, "fe985f5c39ca5eefeb65b1369a1576fa6497c65c4801e61817947bd9a55ad9a32cfd84bf102c39c8dfe34dd836762c5ee2da8c65bfb508b462c9c6ce547d4e3ab168b7c5c73369c023014f24b3215c77da5d8cf202261f41670f6449f02c23953ff9"}, @NL80211_ATTR_TESTDATA={0x5, 0x45, "df"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x1, 0x97, &(0x7f00000008c0)=""/151, 0x41000, 0x47, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) symlink(0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r6) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000940)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000b40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00b95d24b60de5dc19ab839fe50127bd7000fddbdf25300000000c009900010000001d00000006003600380000002d00360038000000460076995ba74e1de85d060600360006009412b32d936bc299fe97c4441a0c381149e5f34a6911bc9fb03bb089e4d00eb48ad90bc6f9f7cf1b06ba3c536a7afd90f55c06a23f53be141a21f9d4dedd68f9a0d84c397191509c12061f"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8801) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYBLOB="f79cf7e2e87e176a28e2a7dfe26ca94151e9285d82fe1563d3475dd05e88f843b85ab3c6893673be0531f69add119297d376cc5a26f2887fefa2b2854ad67e955408bc0bb6d1b5ab3c0a060b8b44d5651f8803fa3a08290282d96db79948272fca7eab912ce74ce0b2da6a19723bd5fb8cf933ecb42e2f4872d719d5147a1f5f16cb7ee7"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, 0x0, 0xc000) socket$can_j1939(0x1d, 0x2, 0x7) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r6) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\b\x00', @ANYRES16=r10, @ANYBLOB="200027bd7000fcdbdf2506000000080003000200000004000680080003000100000034000680060005004e2000000800060002000000060005004e240000080003000a01010208000300ac14142a060005004e23000005000500070000000800020002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r12 = socket$netlink(0x10, 0x3, 0x8000000004) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r13, &(0x7f0000000140)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) writev(r12, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d80)=ANY=[@ANYRES16=r11, @ANYBLOB, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d300000000000000a387541841ef69b29dda21e6dc0f0ae361027da87a775e89de583718ad1814f20a3e1c817d0bb6cbc1b123533e7f1ef20efa1781a695d56fe685cc851e582bd88445c60513d003f18f142dcfec8d8123708cfe069031d28898a96c7b28b00967ed693a5b85f3c52aef932aa75d48cc801f4881fcfe7af046f9ef902a8086cfcb2407d66196cd34a87a5e83db631c3536229", @ANYRESOCT=r6], 0x2c}}, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800) 10.742050656s ago: executing program 40 (id=2564): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4005, @multicast1}, 0x10, 0x0}, 0x30004001) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x2000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) r3 = syz_io_uring_setup(0x234, &(0x7f0000000600)={0x0, 0x0, 0x10100, 0x0, 0x3b8}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="48000000030101080000000000000000020000082c0002800c000280050001000000000006000340000000001400018008000100ac1414aa08000200e0000002060012400004000043ac5d0ca5c8c9c16633b9244db405caa5cfb2b9417052e91c985fbaccff7010f145bf18ef523d5054b2765d4b3348ac1f2b93c5574174cf1ee31ceb192129750500000040a5241ad2356e7702dc62f26598934e404fc3e085f3e6679daede6ca691734667a9280527a490b6a5bec3e7090000008bda951d0b86fc904ed8d6f56c25be34e376490ae6e2dc04eae854d9f41d185fa5ac9be30d3af3994a470480000000000000f4abad52e8c2aed78fd7a712251e05f7f5a48fff2551fed5be"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r6) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000940)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000b40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00b95d24b60de5dc19ab839fe50127bd7000fddbdf25300000000c009900010000001d00000006003600380000002d00360038000000460076995ba74e1de85d060600360006009412b32d936bc299fe97c4441a0c381149e5f34a6911bc9fb03bb089e4d00eb48ad90bc6f9f7cf1b06ba3c536a7afd90f55c06a23f53be141a21f9d4dedd68f9a0d84c397191509c12061f"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8801) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYBLOB="f79cf7e2e87e176a28e2a7dfe26ca94151e9285d82fe1563d3475dd05e88f843b85ab3c6893673be0531f69add119297d376cc5a26f2887fefa2b2854ad67e955408bc0bb6d1b5ab3c0a060b8b44d5651f8803fa3a08290282d96db79948272fca7eab912ce74ce0b2da6a19723bd5fb8cf933ecb42e2f4872d719d5147a1f5f16cb7ee7"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, 0x0, 0xc000) socket$can_j1939(0x1d, 0x2, 0x7) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r6) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\b\x00', @ANYRES16=r10, @ANYBLOB="200027bd7000fcdbdf2506000000080003000200000004000680080003000100000034000680060005004e2000000800060002000000060005004e240000080003000a01010208000300ac14142a060005004e23000005000500070000000800020002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r12 = socket$netlink(0x10, 0x3, 0x8000000004) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r13, &(0x7f0000000140)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) writev(r12, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d80)=ANY=[@ANYRES16=r11, @ANYBLOB, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d300000000000000a387541841ef69b29dda21e6dc0f0ae361027da87a775e89de583718ad1814f20a3e1c817d0bb6cbc1b123533e7f1ef20efa1781a695d56fe685cc851e582bd88445c60513d003f18f142dcfec8d8123708cfe069031d28898a96c7b28b00967ed693a5b85f3c52aef932aa75d48cc801f4881fcfe7af046f9ef902a8086cfcb2407d66196cd34a87a5e83db631c3536229", @ANYRESOCT=r6], 0x2c}}, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800) 5.989208685s ago: executing program 1 (id=2626): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000000), 0x1, 0x530, &(0x7f00000003c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x20080) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 5.193191625s ago: executing program 4 (id=2635): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000000153d3000000000005"]) 5.057123667s ago: executing program 5 (id=2638): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) dup(r0) 4.962299668s ago: executing program 4 (id=2639): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 4.936637668s ago: executing program 5 (id=2640): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast2, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@private1}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x50) (fail_nth: 6) 4.584461422s ago: executing program 5 (id=2642): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000600000000000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) 4.571061383s ago: executing program 4 (id=2643): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x6, 0x2, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x65, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x86, 0x8, "830597d1b1b9"}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f00000006c0)="f32222e3ff2809f3fb1607fd1feb1926b0384e62d31d2751fa02699b5ffa9e925564296193e4a7156d76c37e93f0da76f948976375165dcb987136d3cf570377d03cab1bbf25157c1d658efe5ce0977cf098020295fd78e5b9c50ebc485e589bfbf7adfcf76e17f1d141e2bb0d6f386f40f83e0799e149a262686cc4857f5e17648b210555c15e1a", 0x88, 0x20000040, &(0x7f0000000800)={0x11, 0x2, r4, 0x1, 0x3, 0x6, @local}, 0x14) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000104011e0000000001000800000000000a0002"], 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r5 = socket(0x2b, 0x1, 0x1) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SIOCSIFMTU(r5, 0x5411, &(0x7f0000000140)={'syz_tun\x00', 0x865}) close_range(r0, 0xffffffffffffffff, 0x0) 4.543733733s ago: executing program 1 (id=2645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) flock(r1, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x1) flock(r4, 0x2) dup3(r4, r1, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x3, 0x1, 0x1}, {0x1, 0x1}}], 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r5, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0xdf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r8, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4.092605989s ago: executing program 5 (id=2650): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) dup(r0) 4.061873989s ago: executing program 4 (id=2652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000640)={0x80000000, 0x0, 0xfc6, 0x9, 0x3a, "b768c500de33c1aa180408b19b59de4174b51d", 0xfff}) 4.061401609s ago: executing program 5 (id=2653): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x494816459c341ca6}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1324, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c351280090001007866726d000000000c0002800800020002000000140003007866726d3000"/56], 0x50}}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r4, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x200800400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r6 = syz_pidfd_open(r0, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) unshare(0x2040400) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010004007000ffdbdf250900020073796f310000000008004100727865001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 3.95883082s ago: executing program 1 (id=2655): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b13"], 0x7c}}, 0x20000840) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)) timer_create(0x2, 0x0, &(0x7f0000001140)=0x0) timer_settime(r5, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_settime(r5, 0x0, &(0x7f00000000c0)={{0x77359400}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) timer_delete(0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000002260b037f9485ac700"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r10}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r10}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) 3.440236056s ago: executing program 8 (id=2658): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r1, 0x0, 0x1000000004}, 0x18) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0), &(0x7f0000000040)) 2.954258313s ago: executing program 1 (id=2659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0xf0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x76}}}}, [@NL80211_ATTR_TESTDATA={0x56, 0x45, "358f32820545a0e7663b46497f6338740da67344d9632b08cbf2823e3465b77d807a0ecc30da9881ec70b87f976326d140228c2d63e5002a4ad9fcdf2d64c2007f23c228fb6d921eb0cf198738ea91470c61"}, @NL80211_ATTR_TESTDATA={0x66, 0x45, "fe985f5c39ca5eefeb65b1369a1576fa6497c65c4801e61817947bd9a55ad9a32cfd84bf102c39c8dfe34dd836762c5ee2da8c65bfb508b462c9c6ce547d4e3ab168b7c5c73369c023014f24b3215c77da5d8cf202261f41670f6449f02c23953ff9"}, @NL80211_ATTR_TESTDATA={0x5, 0x45, "df"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x1, 0x97, &(0x7f00000008c0)=""/151, 0x41000, 0x47, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) symlink(0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x40, 0x7800, 0x6, 0x2, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x65, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x86, 0x8, "830597d1b1b9"}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f00000006c0)="f32222e3ff2809f3fb1607fd1feb1926b0384e62d31d2751fa02699b5ffa9e925564296193e4a7156d76c37e93f0da76f948976375165dcb987136d3cf570377d03cab1bbf25157c1d658efe5ce0977cf098020295fd78e5b9c50ebc485e589bfbf7adfcf76e17f1d141e2bb0d6f386f40f83e0799e149a262686cc4857f5e17648b210555c15e1a", 0x88, 0x20000040, &(0x7f0000000800)={0x11, 0x2, r4, 0x1, 0x3, 0x6, @local}, 0x14) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000104011e0000000001000800000000000a0002"], 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$eJzs3c9vG1kdAPDvOL+cbHaTXfYACNiyLBRU1Unc3Wi1B1hOCKGVEHsEqRsSN4pix1HsLJvQQ/o/IFGJExz5Azj3xJ0LghuXckDiRwRqKnHwasaT1E3tJm0SO4o/H2k08+Y5830v7rxnf934BTC0rkXEXkSMR8QnETGTn0/yLT5sb+njHu3fXT7Yv7ucRKv18b+TrD49Fx0/k3olv2YxIn7yg4ifJ8/Gbezsri9Vq5WtdnFyrlnbnGvs7N5cqy2tVlYrG+Xy4sLi/Pu33iufW1/fqo3nR199+Ke97/wybdZ0fqazH+ep3fWxozip0Yj40UUEG4CRvD/jg24IL6UQEW9ExNvZ/T8TI9mzCQBcZa3WTLRmOssAwFVXyHJgSaGU5wKmo1Aoldo5vDdjqlCtN5o37tS3N1baubLZGCvcWatW5vNc4WyMJWl5ITt+Ui4fK9+KiNcj4lcTk1m5tFyvrgzyhQ8ADLFXjs3//5toz/8AwBVXHHQDAIC+M/8DwPAx/wPA8DH/A8DwMf8DwPAx/wPA8DH/A8BQ+fFHH6Vb6yD//uuVT3e21+uf3lypNNZLte3l0nJ9a7O0Wq+vZt/ZUzvpetV6fXPh3dj+bPa7m43mXGNn93atvr3RvJ19r/ftylhfegUAPM/rbz34axIRex9MZlt0rOVgroarrTDoBgADMzLoBgADc7TalwXcYOic4T2+9ABcEV2W6H1KMSImj59stVqti2sScMGuf0n+H4ZVR/7f/wKGISP/D8NrdNANAAam1UpOu+Z/nPaBAMDlJscP9Pj8/418//v8w4GfrRx/xP2LbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbofr/5bytcCno1AolSJejYjZGEvurFUr8xHxWkT8ZWJsIi0vDLjNAMBZFf6R5Ot/XZ95Z/p47XjyeCLbR8QvfvPxrz9baja3/pye/89Ekp9v3s/PlwfSAQDgBIfzdLbveCP/aP/u8uHWz/b88/sRUWzHP9gfj4Oj+KMxmu2LMRYRU/9N8nJb0pG7OIu9exHxxW79T2I6y4G0Vz49Hj+N/Wpf4xeeil/I6tr79HfxhXNoCwybB+n482G3+68Q17J99/u/mI1QZ5ePf+mllg+yMfBJ/MPxb6TH+HfttDHe/eMP20eTz9bdi/jyaMRh7IOO8ecwftIj/junjP+3r3zt7V51rd9GXI/u8TtjzTVrm3ONnd2ba7Wl1cpqZaNcXlxYnH//1nvluSxHPdd7NvjXBzde61WX9n+qR/ziCf3/5in7/7v/f/LTrz8n/re/0S1+Id58Tvx0TvzWKeMvTf2h2Ksujb/So/8nPf83Thn/4d93n1k2HAAYnMbO7vpStVrZ6ufB4QuJvgZ18CIHI3G+F4yIvXO4Tvqv5lL8frocfK9fscbjhX6q1XqpWL1GjPPIugGXwdFNHxGPB90YAAAAAAAAAAAAAACgq378xdKg+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV9XkAAAD///ogzOo=") r5 = socket(0x2b, 0x1, 0x1) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SIOCSIFMTU(r5, 0x5411, &(0x7f0000000140)={'syz_tun\x00', 0x865}) close_range(r0, 0xffffffffffffffff, 0x0) 2.648407356s ago: executing program 1 (id=2664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000440), 0x1, 0x54e, &(0x7f00000014c0)="$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") 2.599609487s ago: executing program 41 (id=2664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000440), 0x1, 0x54e, &(0x7f00000014c0)="$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") 2.460602509s ago: executing program 8 (id=2667): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) flock(r1, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x1) flock(r4, 0x2) dup3(r4, r1, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x3, 0x1, 0x1}, {0x1, 0x1}}], 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r5, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0xdf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_submit(0x0, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2.002526884s ago: executing program 5 (id=2668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2516d8f5fc4e91b8ebc621069aa12e0fc35e95d3739c3ca2945cf164aa70fdbf462bbb6cfa816eec6cdb557e31778ec5a1687bd52b5a138878022e3f141e37dd0f2902257532625d6bab32121ed7cfb0d53b45bdc0fea123075e4042540fdc44704c4c7d377fa5a8b7b7d94449ccf2f6efcbd1baf01461f7cda4ce22c83435790d097a9076841cf40934854e35da7d7b0bf0e591de3e6be718ce07701d6e46c732b9c8ceac6715cefb826a0f9ddb48f13c7397a4a3b6727a32738aa5a8e6f4f1161731f275976c29b27d86929ec2"], 0x48) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) mlockall(0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xdadf95020df029e, 0x31, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000300)}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x1ff}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000fca000)={0x4, {{0xa, 0x4e24, 0x0, @mcast2, 0xd}}}, 0x88) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000054af00000000000002ff"], 0x90) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 1.967031615s ago: executing program 4 (id=2669): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) setrlimit(0x4, &(0x7f0000000280)={0x0, 0xe}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xa56abee0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES16=r7, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='kvm_ioapic_delayed_eoi_inj\x00', r8, 0x0, 0x6}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r9, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000840)="f84bf427a6e2ed6a89c2076c832e83ab390d60fe1aed47495b62ff805b41e170", 0x20}, {&(0x7f0000000880)="c72ac5b411f6387f6ffa4aa9a10339518e918538395d1a6c321e34cd6580b3f2492acdd4f45f78909598a76870226a97373b15856263165a89c6a212290c4b31eb1498cf38c85b1c4495b42fbf44cffa9e3eabc853301cbab284d508dff80ae85abdaacfd37f55d2226a1a3ae52543b1", 0x70}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f00000009c0)="2820bf333c78d43959586faaff18d0fd4396e5ed8d35796eded13e45be452100be34ce7e667481890c2f0aec3e6dbb7a6bc5b014f4dea941da293c94e5071975e7942ea65a8d5950fb2ec3d4641a72acfe24b3bbcdab64941ef3b1fadd5c5e5df37e407944e005c629940bc57ff92062412d891fb2ee3775cd28a911b893680c8b89ad67d61dd47fd87890c95205275e30907966b706ac7ec6ba7b84092863ef9aece21fc14e67161d1d76bdd2ff5b1fac0156", 0xb3}, {&(0x7f0000000900)="73c76ffd6ffe287d09ed0be139791f", 0xf}, {&(0x7f0000000a80)="df0339a8b437669926c90dddadf4988bed4a15e8b2bddac061b83e62425eba7addd15339f5e5935e450057f25c457cef37c7b0ec4c1e92336f588adf94977b1fe1d2ef29cc186a4ca060e499eed3032a4caac656685e1bd625b4db7b9b2824549f5915edc83d1b07c90828fe7d17f24b402a9fb6aa71be990ffe2888a61d55c00e179a98446e4535f00ef51d5cb52d3685e601b6c0ab870957e15e3a3bdc2c6abc1399ec0c004fbfb28598fe0e043306bc30f7c703512411a0dca3d94670ac1a46126dbe25e4f79fd592210f35a26862bb40", 0xd2}], 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="00000000100000000000000001d8cedaa53000000001006ab4"], 0x50, 0x1}}], 0x1, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) 1.937481265s ago: executing program 7 (id=2670): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r1, 0x0, 0x1000000004}, 0x18) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0), &(0x7f0000000040)) 1.739446738s ago: executing program 7 (id=2671): r0 = socket(0x2b, 0x1, 0x1) connect$netlink(r0, &(0x7f0000000000)=@unspec={0x0, 0x0, 0xa00}, 0xc) 1.628311769s ago: executing program 8 (id=2672): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000700000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) 1.628078999s ago: executing program 7 (id=2673): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.260344784s ago: executing program 7 (id=2674): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) r0 = open(&(0x7f0000000040)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x1260, 0x3) syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0xa0c440915259e477, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10001}}, {@nolazytime}, {@noinit_itable}, {@norecovery}, {@mb_optimize_scan}, {@errors_remount}, {@abort}, {@test_dummy_encryption}]}, 0xfe, 0x535, &(0x7f00000008c0)="$eJzs3U9vI2cZAPBnJvEmu5uSFDiUSi0VLcpWsHbS0Dbi0C4S4lYJVO7bKHGiKE4cxU7ZRD2k4gMgIQS9cuKCxAdAQv0IqFIlekeAQAh24cABGDT2mHrd8SbRxvYq+f2k1555Z/w+z7ubjN/5k5kArqwXIuJORExFxMsRMV/Up0WJk27J13tw/731vORL3v5bEklRFxELvfbyupudj1x/ZNzW0fHOWqNRPyjma+3d/Vrr6Pj29u7aVn2rvreysvza6uurr64uXUg/83698e0//fRHv/jOG7/5+g9+f/cvt6b7lxf9OIv0PHE/6bxWYravLg98cJ5GnmBTRX8qk04EAIAzyQezn4+Ir3TG//MxFf8fFg8O6WbHnx0AAABwEbI35+LfSUQGAAAAXFpvRsRcJGm1uBZgLtK0Wu1ew/vFuJE2mq321zabh3sb+bKIhaikm9uN+lJxTe1CVJJ8frm4CLg3/8rA/EpEPB0RP5m/3pmvrjcbG5M++AEAAABXxM2B/f9/znf3/wEAAIBLZmHSCQAAAAAjN2z/PxlzHgAAAMDoDNv/nxlzHgAAAMBIfPett/KSzUb3+dcb7x4d7jTfvb1Rb+1Udw/Xq+vNg/3qVrO51bln3+5p7TWazf1vxN7hvVq7fieptY6O7+42D/fad7c9PxAAAAAm5ekvf/hJEhEn37zeKblrG+9ETA35gHsFwKWRnmflP44uD2D8hn3NA5ff9KQTACbnZNIJAJP20K0+SgYF/RfvpP0r/3aESQEAABdq8Usl5/+LXYDKpJMDRupc5/+BS8X5f7i6znn+/6NR5QGMX+XTEYBLgeCKOu1RH0Nv3lF2/v9a2YpZdmpbAADASM11XpO0WpwLnIs0rVYjnur8qX8l2dxu1Jci4nMR8bv5ykw+v9z9jMcDAgAAAAAAAAAAAAAAAAAAAAAAAMAZZVkSGQAAAHCpRaR/Tornfy3OvzQ3eHzgWvKv+eg+0qv3fMD2wXJe//defbQ/ePtn99ba7YNXxn30AgAAACjT20/vvC9POhsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpsHs++tP7jfKdfGGfev34qIhYgidqd0l0zHbOd9NioRceMfSUz3fS6JiKkLiH/yfkQ8UxY/ydOKhSKLwfhpRFwfT/znsiwrjX/zAuLDVfZhvv25U/b7l8YLnffy3//pojyu3vZvpiR+b/s3NWT799QZYzz78a9qQ+O/H/HsdPn2pxc/GRL/xbIGS/5R3vn+8fFnKruNR/bziMUoj98fq9be3a+1jo5vb++ubdW36nsrK8uvrb6++urqUm1zu1EvXkv7+OPnfv3fgar/ZF2d/seQ+Aun9P+lfKLSV5kNhimCfXzv/he6k5WBJjrxb71Y/vP3zMPxH/pezn8mvlp8D+TLF3vTJ93pfs//8qPnSxMr4m8M6f9p//+3hjU64OXv/fAPZ1wVABiD1tHxzlqjUT8Y+cQHWZadYeV8p7Z00Y3xpXolJ3qju0esM/NYIWaflJ6OeyKJOHncdmYiYnw5X8SRLQAA4Enz6aB/0pkAAAAAAAAAAAAAAAAAAADA1dU6inTUtxMbjHkyma4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzS/wIAAP//AsTQQw==") 985.020018ms ago: executing program 7 (id=2675): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000000153d3000000000005"]) 699.551651ms ago: executing program 7 (id=2676): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x6, 0x2, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x65, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x86, 0x8, "830597d1b1b9"}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f00000006c0)="f32222e3ff2809f3fb1607fd1feb1926b0384e62d31d2751fa02699b5ffa9e925564296193e4a7156d76c37e93f0da76f948976375165dcb987136d3cf570377d03cab1bbf25157c1d658efe5ce0977cf098020295fd78e5b9c50ebc485e589bfbf7adfcf76e17f1d141e2bb0d6f386f40f83e0799e149a262686cc4857f5e17648b210555c15e1a", 0x88, 0x20000040, &(0x7f0000000800)={0x11, 0x2, r4, 0x1, 0x3, 0x6, @local}, 0x14) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000104011e0000000001000800000000000a0002"], 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$eJzs3c9vG1kdAPDvOL+cbHaTXfYACNiyLBRU1Unc3Wi1B1hOCKGVEHsEqRsSN4pix1HsLJvQQ/o/IFGJExz5Azj3xJ0LghuXckDiRwRqKnHwasaT1E3tJm0SO4o/H2k08+Y5830v7rxnf934BTC0rkXEXkSMR8QnETGTn0/yLT5sb+njHu3fXT7Yv7ucRKv18b+TrD49Fx0/k3olv2YxIn7yg4ifJ8/Gbezsri9Vq5WtdnFyrlnbnGvs7N5cqy2tVlYrG+Xy4sLi/Pu33iufW1/fqo3nR199+Ke97/wybdZ0fqazH+ep3fWxozip0Yj40UUEG4CRvD/jg24IL6UQEW9ExNvZ/T8TI9mzCQBcZa3WTLRmOssAwFVXyHJgSaGU5wKmo1Aoldo5vDdjqlCtN5o37tS3N1baubLZGCvcWatW5vNc4WyMJWl5ITt+Ui4fK9+KiNcj4lcTk1m5tFyvrgzyhQ8ADLFXjs3//5toz/8AwBVXHHQDAIC+M/8DwPAx/wPA8DH/A8DwMf8DwPAx/wPA8DH/A8BQ+fFHH6Vb6yD//uuVT3e21+uf3lypNNZLte3l0nJ9a7O0Wq+vZt/ZUzvpetV6fXPh3dj+bPa7m43mXGNn93atvr3RvJ19r/ftylhfegUAPM/rbz34axIRex9MZlt0rOVgroarrTDoBgADMzLoBgADc7TalwXcYOic4T2+9ABcEV2W6H1KMSImj59stVqti2sScMGuf0n+H4ZVR/7f/wKGISP/D8NrdNANAAam1UpOu+Z/nPaBAMDlJscP9Pj8/418//v8w4GfrRx/xP2LbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbofr/5bytcCno1AolSJejYjZGEvurFUr8xHxWkT8ZWJsIi0vDLjNAMBZFf6R5Ot/XZ95Z/p47XjyeCLbR8QvfvPxrz9baja3/pye/89Ekp9v3s/PlwfSAQDgBIfzdLbveCP/aP/u8uHWz/b88/sRUWzHP9gfj4Oj+KMxmu2LMRYRU/9N8nJb0pG7OIu9exHxxW79T2I6y4G0Vz49Hj+N/Wpf4xeeil/I6tr79HfxhXNoCwybB+n482G3+68Q17J99/u/mI1QZ5ePf+mllg+yMfBJ/MPxb6TH+HfttDHe/eMP20eTz9bdi/jyaMRh7IOO8ecwftIj/junjP+3r3zt7V51rd9GXI/u8TtjzTVrm3ONnd2ba7Wl1cpqZaNcXlxYnH//1nvluSxHPdd7NvjXBzde61WX9n+qR/ziCf3/5in7/7v/f/LTrz8n/re/0S1+Id58Tvx0TvzWKeMvTf2h2Ksujb/So/8nPf83Thn/4d93n1k2HAAYnMbO7vpStVrZ6ufB4QuJvgZ18CIHI3G+F4yIvXO4Tvqv5lL8frocfK9fscbjhX6q1XqpWL1GjPPIugGXwdFNHxGPB90YAAAAAAAAAAAAAACgq378xdKg+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV9XkAAAD///ogzOo=") r5 = socket(0x2b, 0x1, 0x1) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$SIOCSIFMTU(r5, 0x5411, &(0x7f0000000140)={'syz_tun\x00', 0x865}) close_range(r0, 0xffffffffffffffff, 0x0) 120.270488ms ago: executing program 8 (id=2677): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000100)=0x1, 0x0, 0x4) 0s ago: executing program 4 (id=2678): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fcntl$setsig(r0, 0xa, 0xa) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r0) kernel console output (not intermixed with test programs): atman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.831458][T15433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.892134][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 245.900585][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 245.914882][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 245.920285][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 245.920303][ T29] audit: type=1326 audit(1748192497.808:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.6.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f109ce969 code=0x7fc00000 [ 245.922661][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 245.931181][T15541] SELinux: failed to load policy [ 245.952979][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 245.953012][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 245.981911][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 245.989957][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 245.998423][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.006140][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.013853][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.021533][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.029946][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.037673][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.045396][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.053056][T13083] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.063907][T13083] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 246.078709][T15543] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 246.089256][T15433] hsr_slave_0: entered promiscuous mode [ 246.115041][T15433] hsr_slave_1: entered promiscuous mode [ 246.121180][T15433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.128919][T15433] Cannot create hsr debugfs directory [ 246.148578][ T29] audit: type=1326 audit(1748192498.038:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.7.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 246.172168][ T29] audit: type=1326 audit(1748192498.038:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.7.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 246.195987][ T29] audit: type=1326 audit(1748192498.038:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.7.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 246.226204][ T29] audit: type=1107 audit(1748192498.038:5145): pid=15549 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 246.239887][T15553] __nla_validate_parse: 1 callbacks suppressed [ 246.239903][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'. [ 246.262175][T15553] FAULT_INJECTION: forcing a failure. [ 246.262175][T15553] name failslab, interval 1, probability 0, space 0, times 0 [ 246.275616][T15553] CPU: 1 UID: 0 PID: 15553 Comm: syz.1.2343 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 246.275650][T15553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.275667][T15553] Call Trace: [ 246.275676][T15553] [ 246.275686][T15553] __dump_stack+0x1d/0x30 [ 246.275712][T15553] dump_stack_lvl+0xe8/0x140 [ 246.275797][T15553] dump_stack+0x15/0x1b [ 246.275814][T15553] should_fail_ex+0x265/0x280 [ 246.275876][T15553] should_failslab+0x8c/0xb0 [ 246.275920][T15553] kmem_cache_alloc_node_noprof+0x57/0x320 [ 246.275951][T15553] ? __alloc_skb+0x101/0x320 [ 246.276016][T15553] __alloc_skb+0x101/0x320 [ 246.276058][T15553] rtmsg_fib+0x99/0x230 [ 246.276099][T15553] ? call_fib_notifiers+0x7e/0xa0 [ 246.276127][T15553] fib_table_delete+0x777/0x830 [ 246.276159][T15553] fib_magic+0x1ba/0x1f0 [ 246.276199][T15553] fib_del_ifaddr+0x8fc/0xa90 [ 246.276244][T15553] ? nlmsg_notify+0xcf/0x170 [ 246.276305][T15553] ? nlmsg_notify+0x12e/0x170 [ 246.276351][T15553] fib_inetaddr_event+0x79/0x1f0 [ 246.276418][T15553] ? inetaddr_event+0x71/0xa0 [ 246.276439][T15553] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 246.276470][T15553] blocking_notifier_call_chain+0x9b/0x1f0 [ 246.276498][T15553] __inet_del_ifa+0x4e5/0x7f0 [ 246.276607][T15553] ? ip_mc_destroy_dev+0x275/0x2d0 [ 246.276640][T15553] inetdev_event+0x658/0xc10 [ 246.276676][T15553] ? __pfx_ib_netdevice_event+0x10/0x10 [ 246.276714][T15553] ? ib_netdevice_event+0x186/0x5f0 [ 246.276767][T15553] ? __pfx_inetdev_event+0x10/0x10 [ 246.276796][T15553] raw_notifier_call_chain+0x6f/0x1b0 [ 246.276824][T15553] ? call_netdevice_notifiers_info+0x9c/0x100 [ 246.276857][T15553] call_netdevice_notifiers_info+0xae/0x100 [ 246.276972][T15553] unregister_netdevice_many_notify+0xd9a/0x16a0 [ 246.277002][T15553] ? unregister_netdevice_queue+0x12b/0x220 [ 246.277087][T15553] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 246.277116][T15553] rtnl_dellink+0x3cb/0x550 [ 246.277181][T15553] ? security_capable+0x83/0x90 [ 246.277233][T15553] ? ns_capable+0x7d/0xb0 [ 246.277262][T15553] ? __pfx_rtnl_dellink+0x10/0x10 [ 246.277306][T15553] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 246.277414][T15553] netlink_rcv_skb+0x120/0x220 [ 246.277454][T15553] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.277538][T15553] rtnetlink_rcv+0x1c/0x30 [ 246.277570][T15553] netlink_unicast+0x59e/0x670 [ 246.277615][T15553] netlink_sendmsg+0x58b/0x6b0 [ 246.277681][T15553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.277708][T15553] __sock_sendmsg+0x142/0x180 [ 246.277746][T15553] ____sys_sendmsg+0x31e/0x4e0 [ 246.277780][T15553] ___sys_sendmsg+0x17b/0x1d0 [ 246.277824][T15553] __x64_sys_sendmsg+0xd4/0x160 [ 246.277861][T15553] x64_sys_call+0x2999/0x2fb0 [ 246.277905][T15553] do_syscall_64+0xd0/0x1a0 [ 246.277933][T15553] ? clear_bhb_loop+0x40/0x90 [ 246.277954][T15553] ? clear_bhb_loop+0x40/0x90 [ 246.278030][T15553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.278058][T15553] RIP: 0033:0x7f9e76b8e969 [ 246.278105][T15553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.278124][T15553] RSP: 002b:00007f9e75171038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.278144][T15553] RAX: ffffffffffffffda RBX: 00007f9e76db6080 RCX: 00007f9e76b8e969 [ 246.278158][T15553] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 246.278171][T15553] RBP: 00007f9e75171090 R08: 0000000000000000 R09: 0000000000000000 [ 246.278188][T15553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.278205][T15553] R13: 0000000000000001 R14: 00007f9e76db6080 R15: 00007fffaa39e9e8 [ 246.278233][T15553] [ 246.286080][T15556] netlink: 'syz.7.2346': attribute type 1 has an invalid length. [ 246.649649][T15558] netlink: 'syz.8.2347': attribute type 1 has an invalid length. [ 246.703456][ T29] audit: type=1326 audit(1748192498.578:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.6.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f109ce969 code=0x7fc00000 [ 246.727231][T15564] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 246.733779][T15564] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 246.742238][T15564] vhci_hcd vhci_hcd.0: Device attached [ 246.754861][T15565] vhci_hcd: connection closed [ 246.754987][T12920] vhci_hcd: stop threads [ 246.764081][T12920] vhci_hcd: release socket [ 246.768539][T12920] vhci_hcd: disconnect device [ 246.775557][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2350'. [ 246.825668][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 246.833441][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 246.841862][T15560] FAULT_INJECTION: forcing a failure. [ 246.841862][T15560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.855234][T15560] CPU: 0 UID: 0 PID: 15560 Comm: syz.7.2348 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 246.855271][T15560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.855284][T15560] Call Trace: [ 246.855339][T15560] [ 246.855348][T15560] __dump_stack+0x1d/0x30 [ 246.855447][T15560] dump_stack_lvl+0xe8/0x140 [ 246.855514][T15560] dump_stack+0x15/0x1b [ 246.855533][T15560] should_fail_ex+0x265/0x280 [ 246.855568][T15560] should_fail+0xb/0x20 [ 246.855610][T15560] should_fail_usercopy+0x1a/0x20 [ 246.855638][T15560] _copy_from_user+0x1c/0xb0 [ 246.855687][T15560] restore_altstack+0x4b/0x2d0 [ 246.855782][T15560] ? __set_task_blocked+0x23a/0x2a0 [ 246.855815][T15560] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 246.855856][T15560] ? _raw_spin_unlock_irq+0x26/0x50 [ 246.855928][T15560] ? signal_setup_done+0x266/0x290 [ 246.855955][T15560] ? fpu__clear_user_states+0x3b/0x280 [ 246.856023][T15560] ? arch_do_signal_or_restart+0x2ed/0x480 [ 246.856099][T15560] ? __rcu_read_unlock+0x4f/0x70 [ 246.856121][T15560] ? fpregs_assert_state_consistent+0x84/0xa0 [ 246.856154][T15560] x64_sys_call+0x2e8a/0x2fb0 [ 246.856265][T15560] do_syscall_64+0xd0/0x1a0 [ 246.856344][T15560] ? clear_bhb_loop+0x40/0x90 [ 246.856367][T15560] ? clear_bhb_loop+0x40/0x90 [ 246.856389][T15560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.856424][T15560] RIP: 0033:0x7fc59d2fab39 [ 246.856444][T15560] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 246.856526][T15560] RSP: 002b:00007fc59b9c6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 246.856546][T15560] RAX: ffffffffffffffda RBX: 00007fc59d585fa0 RCX: 00007fc59d2fab39 [ 246.856560][T15560] RDX: 00007fc59b9c6a80 RSI: 00007fc59b9c6bb0 RDI: 0000000000000021 [ 246.856573][T15560] RBP: 00007fc59b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.856586][T15560] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 246.856636][T15560] R13: 0000000000000000 R14: 00007fc59d585fa0 R15: 00007fff8ff3f7e8 [ 246.856708][T15560] [ 246.857314][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.074198][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.081880][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.089616][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.097288][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.104959][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.112670][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.120424][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.128086][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.135788][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.143502][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.151155][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.158853][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.166510][ T10] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 247.174818][ T10] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 247.226907][T15583] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15583 comm=syz.7.2355 [ 247.239562][T15583] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15583 comm=syz.7.2355 [ 247.249145][T15582] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=512 sclass=netlink_audit_socket pid=15582 comm=syz.7.2355 [ 247.271226][T15587] loop1: detected capacity change from 0 to 1024 [ 247.278442][T15587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.329176][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2354'. [ 247.340648][T15593] netlink: 'syz.7.2357': attribute type 1 has an invalid length. [ 247.425018][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 247.432729][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 247.447131][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.454953][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.462835][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.470672][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.478495][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.486376][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.494188][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.501988][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.505198][T15606] loop7: detected capacity change from 0 to 128 [ 247.509939][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.523845][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.531586][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.539294][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.547129][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.554849][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 247.571596][ T10] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 247.646382][T15433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.680712][T15615] loop8: detected capacity change from 0 to 512 [ 247.689432][T15615] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.699681][T15615] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 247.710893][T15615] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 247.719744][T15615] System zones: 0-2, 18-18, 34-34 [ 247.725922][T15615] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 247.744113][T15433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.757153][T15615] EXT4-fs (loop8): 1 truncate cleaned up [ 247.781355][T15433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.793828][T15433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.886869][T15433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.908189][T15433] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.927570][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.934688][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.969234][T15433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.979787][T15433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.998710][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.005922][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.109251][T15433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.264057][T15634] netlink: 'syz.8.2368': attribute type 1 has an invalid length. [ 248.271310][T15627] sd 0:0:1:0: device reset [ 248.284239][T15634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.297400][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2368'. [ 248.359763][T15634] bond1 (unregistering): Released all slaves [ 248.427096][T15647] loop1: detected capacity change from 0 to 1024 [ 248.434105][T15647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.458536][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2369'. [ 248.459671][T15651] netlink: 'syz.8.2370': attribute type 1 has an invalid length. [ 248.500258][T15433] veth0_vlan: entered promiscuous mode [ 248.513035][T15655] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 248.522294][T15655] tipc: Enabled bearer , priority 10 [ 248.547566][T15433] veth1_vlan: entered promiscuous mode [ 248.599314][T15433] veth0_macvtap: entered promiscuous mode [ 248.608540][T15433] veth1_macvtap: entered promiscuous mode [ 248.652145][T15433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.664688][T15433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.700515][T15433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.709395][T15433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.718873][T15433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.727796][T15433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.753956][ T29] audit: type=1326 audit(1748192500.628:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15667 comm="syz.6.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f109ce969 code=0x7ffc0000 [ 248.777623][ T29] audit: type=1326 audit(1748192500.628:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15667 comm="syz.6.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0f109ce969 code=0x7ffc0000 [ 248.801251][ T29] audit: type=1326 audit(1748192500.628:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15667 comm="syz.6.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f109ce969 code=0x7ffc0000 [ 248.851681][T15671] syz_tun: entered allmulticast mode [ 248.855419][T15672] SELinux: failed to load policy [ 248.861554][T15671] syz_tun: left allmulticast mode [ 248.896264][T15677] loop6: detected capacity change from 0 to 1024 [ 248.911081][T15677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.914770][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2366'. [ 248.998582][T15684] netlink: 'syz.8.2382': attribute type 1 has an invalid length. [ 249.053297][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2381'. [ 249.067429][T15687] SELinux: failed to load policy [ 249.101356][T15691] program syz.8.2384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.122793][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2366'. [ 249.309516][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 249.317894][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 249.363206][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.371001][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.378807][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.387369][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.395155][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.402820][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.410507][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.418878][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.426611][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.434376][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.436097][ T29] audit: type=1107 audit(1748192501.318:5150): pid=15709 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 249.442040][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.464019][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.471695][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.479440][T13083] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 249.488417][T13083] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 249.528476][T15714] loop5: detected capacity change from 0 to 2048 [ 249.560967][T15719] loop1: detected capacity change from 0 to 1024 [ 249.569483][T15719] EXT4-fs: Ignoring removed orlov option [ 249.571063][T15721] netlink: 'syz.8.2395': attribute type 1 has an invalid length. [ 249.675852][T15730] loop8: detected capacity change from 0 to 1024 [ 249.750927][T15730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.791882][T15735] loop7: detected capacity change from 0 to 512 [ 249.805471][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2397'. [ 249.817456][T15735] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.906865][T15745] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2401'. [ 250.076525][T15760] loop8: detected capacity change from 0 to 1024 [ 250.083797][T15760] EXT4-fs: Ignoring removed orlov option [ 250.092133][T15761] netlink: 'syz.7.2407': attribute type 1 has an invalid length. [ 250.129545][T15768] FAULT_INJECTION: forcing a failure. [ 250.129545][T15768] name failslab, interval 1, probability 0, space 0, times 0 [ 250.142251][T15768] CPU: 0 UID: 0 PID: 15768 Comm: syz.6.2411 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 250.142289][T15768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.142305][T15768] Call Trace: [ 250.142312][T15768] [ 250.142322][T15768] __dump_stack+0x1d/0x30 [ 250.142366][T15768] dump_stack_lvl+0xe8/0x140 [ 250.142393][T15768] dump_stack+0x15/0x1b [ 250.142416][T15768] should_fail_ex+0x265/0x280 [ 250.142463][T15768] should_failslab+0x8c/0xb0 [ 250.142530][T15768] kmem_cache_alloc_noprof+0x50/0x310 [ 250.142634][T15768] ? audit_log_start+0x365/0x6c0 [ 250.142676][T15768] audit_log_start+0x365/0x6c0 [ 250.142708][T15768] ? strncpy_from_user+0x1eb/0x230 [ 250.142738][T15768] audit_seccomp+0x48/0x100 [ 250.142922][T15768] ? __seccomp_filter+0x68c/0x10d0 [ 250.142951][T15768] __seccomp_filter+0x69d/0x10d0 [ 250.142984][T15768] __secure_computing+0x82/0x150 [ 250.143009][T15768] syscall_trace_enter+0xcf/0x1e0 [ 250.143080][T15768] do_syscall_64+0xaa/0x1a0 [ 250.143118][T15768] ? clear_bhb_loop+0x40/0x90 [ 250.143148][T15768] ? clear_bhb_loop+0x40/0x90 [ 250.143177][T15768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.143286][T15768] RIP: 0033:0x7f0f109cd37c [ 250.143305][T15768] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 250.143331][T15768] RSP: 002b:00007f0f0f037030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.143357][T15768] RAX: ffffffffffffffda RBX: 00007f0f10bf5fa0 RCX: 00007f0f109cd37c [ 250.143372][T15768] RDX: 000000000000000f RSI: 00007f0f0f0370a0 RDI: 0000000000000007 [ 250.143465][T15768] RBP: 00007f0f0f037090 R08: 0000000000000000 R09: 0000000000000000 [ 250.143482][T15768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.143499][T15768] R13: 0000000000000000 R14: 00007f0f10bf5fa0 R15: 00007ffd4bf29a28 [ 250.143523][T15768] [ 250.335100][T15764] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 250.341794][T15764] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 250.350072][T15764] vhci_hcd vhci_hcd.0: Device attached [ 250.409938][T15433] EXT4-fs unmount: 75 callbacks suppressed [ 250.409959][T15433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.427098][T15765] vhci_hcd: connection closed [ 250.445405][T13164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.446959][T15775] loop5: detected capacity change from 0 to 512 [ 250.467746][ T2853] vhci_hcd: stop threads [ 250.472084][ T2853] vhci_hcd: release socket [ 250.476584][ T2853] vhci_hcd: disconnect device [ 250.487786][T15769] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(0) [ 250.494437][T15769] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.502082][T15769] vhci_hcd vhci_hcd.0: Device attached [ 250.513074][T15780] loop1: detected capacity change from 0 to 512 [ 250.521767][T15764] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 250.532746][T15775] EXT4-fs (loop5): 1 orphan inode deleted [ 250.539257][T15775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.552259][ T2853] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 250.552694][T15775] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.566961][T15780] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 250.627197][T15780] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 250.635842][T15780] System zones: 0-2, 18-18, 34-35 [ 250.641684][T15780] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.653998][T15764] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(4) [ 250.660536][T15764] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 250.667981][T15764] vhci_hcd vhci_hcd.0: Device attached [ 250.689561][T15780] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.2415: path /141/file0: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=0, rec_len=0, size=2048 fake=0 [ 250.726399][T15786] vhci_hcd: connection closed [ 250.726661][ T51] vhci_hcd: stop threads [ 250.735697][ T51] vhci_hcd: release socket [ 250.740167][ T51] vhci_hcd: disconnect device [ 250.740351][T15792] loop6: detected capacity change from 0 to 512 [ 250.745976][T15776] vhci_hcd: connection closed [ 250.751617][ T51] vhci_hcd: stop threads [ 250.761458][ T51] vhci_hcd: release socket [ 250.765906][ T51] vhci_hcd: disconnect device [ 250.780538][T13164] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 250.799636][T15792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.818715][T15792] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.842334][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 250.850077][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 250.884367][T15801] netlink: 'syz.7.2420': attribute type 1 has an invalid length. [ 250.892394][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.900872][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.908657][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.916390][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.924818][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.932466][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.940147][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.947888][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.956406][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.964186][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.971865][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.979567][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.987928][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 250.995610][T13084] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 251.007660][ T8881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.018218][T13084] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 251.239576][T15805] loop1: detected capacity change from 0 to 128 [ 251.259461][T15805] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.276856][T15807] loop7: detected capacity change from 0 to 2048 [ 251.318876][T15807] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.328147][T15805] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 251.370888][T15816] __nla_validate_parse: 4 callbacks suppressed [ 251.370910][T15816] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2425'. [ 251.414556][T13164] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.440392][T15815] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2425'. [ 251.517275][T15819] SELinux: failed to load policy [ 251.526398][T12702] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.697657][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 251.697681][ T29] audit: type=1107 audit(1748192503.588:5170): pid=15828 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 251.754903][T15433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.769607][T15831] FAULT_INJECTION: forcing a failure. [ 251.769607][T15831] name failslab, interval 1, probability 0, space 0, times 0 [ 251.782366][T15831] CPU: 1 UID: 0 PID: 15831 Comm: syz.8.2431 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 251.782405][T15831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.782422][T15831] Call Trace: [ 251.782430][T15831] [ 251.782440][T15831] __dump_stack+0x1d/0x30 [ 251.782478][T15831] dump_stack_lvl+0xe8/0x140 [ 251.782504][T15831] dump_stack+0x15/0x1b [ 251.782526][T15831] should_fail_ex+0x265/0x280 [ 251.782643][T15831] should_failslab+0x8c/0xb0 [ 251.782685][T15831] kmem_cache_alloc_noprof+0x50/0x310 [ 251.782712][T15831] ? getname_flags+0x80/0x3b0 [ 251.782809][T15831] getname_flags+0x80/0x3b0 [ 251.782849][T15831] __x64_sys_renameat+0x50/0x80 [ 251.782886][T15831] x64_sys_call+0x2d98/0x2fb0 [ 251.782939][T15831] do_syscall_64+0xd0/0x1a0 [ 251.783001][T15831] ? clear_bhb_loop+0x40/0x90 [ 251.783026][T15831] ? clear_bhb_loop+0x40/0x90 [ 251.783069][T15831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.783099][T15831] RIP: 0033:0x7f0dd5f4e969 [ 251.783119][T15831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.783142][T15831] RSP: 002b:00007f0dd45b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 251.783228][T15831] RAX: ffffffffffffffda RBX: 00007f0dd6175fa0 RCX: 00007f0dd5f4e969 [ 251.783244][T15831] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 251.783258][T15831] RBP: 00007f0dd45b7090 R08: 0000000000000000 R09: 0000000000000000 [ 251.783271][T15831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.783283][T15831] R13: 0000000000000000 R14: 00007f0dd6175fa0 R15: 00007ffebde9f148 [ 251.783370][T15831] [ 251.955951][ T29] audit: type=1326 audit(1748192503.658:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.8.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd5f4e969 code=0x7ffc0000 [ 251.979476][ T29] audit: type=1326 audit(1748192503.658:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.8.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd5f4e969 code=0x7ffc0000 [ 252.003738][ T29] audit: type=1326 audit(1748192503.658:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.8.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd5f4e969 code=0x7ffc0000 [ 252.027317][ T29] audit: type=1326 audit(1748192503.658:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.8.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd5f4e969 code=0x7ffc0000 [ 252.051567][ T29] audit: type=1326 audit(1748192503.658:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.8.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd5f4e969 code=0x7ffc0000 [ 252.075857][ T29] audit: type=1326 audit(1748192503.658:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.8.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd5f4e969 code=0x7ffc0000 [ 252.099510][ T29] audit: type=1326 audit(1748192503.658:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.8.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd5f4e969 code=0x7ffc0000 [ 252.123846][ T29] audit: type=1326 audit(1748192503.658:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.8.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd5f4e969 code=0x7ffc0000 [ 252.147450][ T29] audit: type=1326 audit(1748192503.658:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.8.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd5f4e969 code=0x7ffc0000 [ 252.205186][T15835] netlink: 'syz.5.2432': attribute type 1 has an invalid length. [ 252.214319][T12662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.245334][T15837] netlink: 'syz.8.2435': attribute type 1 has an invalid length. [ 252.275596][T15842] loop5: detected capacity change from 0 to 128 [ 252.283867][T15837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.301241][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2435'. [ 252.318431][T15848] loop7: detected capacity change from 0 to 512 [ 252.318808][T15842] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.339436][T15842] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 252.374542][T15846] bond1 (unregistering): Released all slaves [ 252.398276][T15848] EXT4-fs (loop7): 1 orphan inode deleted [ 252.405230][T15848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.413237][ T37] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 252.420393][T15848] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.432117][T15433] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.519690][T15857] loop8: detected capacity change from 0 to 512 [ 252.538045][T15857] EXT4-fs (loop8): 1 orphan inode deleted [ 252.546830][ T37] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 252.569215][T15857] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.598518][T15857] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.718375][T15871] FAULT_INJECTION: forcing a failure. [ 252.718375][T15871] name failslab, interval 1, probability 0, space 0, times 0 [ 252.731194][T15871] CPU: 0 UID: 0 PID: 15871 Comm: syz.5.2446 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 252.731226][T15871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.731244][T15871] Call Trace: [ 252.731253][T15871] [ 252.731262][T15871] __dump_stack+0x1d/0x30 [ 252.731291][T15871] dump_stack_lvl+0xe8/0x140 [ 252.731318][T15871] dump_stack+0x15/0x1b [ 252.731401][T15871] should_fail_ex+0x265/0x280 [ 252.731447][T15871] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 252.731487][T15871] should_failslab+0x8c/0xb0 [ 252.731553][T15871] __kmalloc_cache_noprof+0x4c/0x320 [ 252.731610][T15871] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 252.731650][T15871] sctp_association_new+0xde5/0x1200 [ 252.731713][T15871] sctp_connect_new_asoc+0x1a8/0x3a0 [ 252.731792][T15871] sctp_sendmsg+0xf10/0x18d0 [ 252.731896][T15871] ? selinux_socket_sendmsg+0xf1/0x1b0 [ 252.731981][T15871] ? __pfx_sctp_sendmsg+0x10/0x10 [ 252.732051][T15871] inet_sendmsg+0xc5/0xd0 [ 252.732094][T15871] __sock_sendmsg+0x102/0x180 [ 252.732132][T15871] ____sys_sendmsg+0x31e/0x4e0 [ 252.732163][T15871] ___sys_sendmsg+0x17b/0x1d0 [ 252.732280][T15871] __x64_sys_sendmsg+0xd4/0x160 [ 252.732333][T15871] x64_sys_call+0x2999/0x2fb0 [ 252.732355][T15871] do_syscall_64+0xd0/0x1a0 [ 252.732380][T15871] ? clear_bhb_loop+0x40/0x90 [ 252.732409][T15871] ? clear_bhb_loop+0x40/0x90 [ 252.732495][T15871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.732543][T15871] RIP: 0033:0x7f57be4de969 [ 252.732559][T15871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.732580][T15871] RSP: 002b:00007f57bcb47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.732599][T15871] RAX: ffffffffffffffda RBX: 00007f57be705fa0 RCX: 00007f57be4de969 [ 252.732612][T15871] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 252.732627][T15871] RBP: 00007f57bcb47090 R08: 0000000000000000 R09: 0000000000000000 [ 252.732644][T15871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.732662][T15871] R13: 0000000000000000 R14: 00007f57be705fa0 R15: 00007ffffdb7bca8 [ 252.732751][T15871] [ 252.955709][T15873] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2437'. [ 252.968277][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2437'. [ 252.992510][T15875] loop5: detected capacity change from 0 to 512 [ 253.005895][T15864] loop6: detected capacity change from 0 to 512 [ 253.013021][T15864] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.052585][T15875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.067681][T15864] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 253.079574][T15879] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2442'. [ 253.086437][T15875] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.088934][T15879] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2442'. [ 253.129049][T15864] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 253.137217][T15864] System zones: 0-2, 18-18, 34-34 [ 253.142696][T15864] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 253.158413][T15864] EXT4-fs (loop6): 1 truncate cleaned up [ 253.164643][T15864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.209257][T15885] loop1: detected capacity change from 0 to 128 [ 253.218345][T15885] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.234896][T15885] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.298196][T15433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.375290][T13164] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.386162][ T8881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.443224][T15892] FAULT_INJECTION: forcing a failure. [ 253.443224][T15892] name failslab, interval 1, probability 0, space 0, times 0 [ 253.455977][T15892] CPU: 0 UID: 0 PID: 15892 Comm: syz.6.2452 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 253.456006][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.456019][T15892] Call Trace: [ 253.456025][T15892] [ 253.456032][T15892] __dump_stack+0x1d/0x30 [ 253.456126][T15892] dump_stack_lvl+0xe8/0x140 [ 253.456152][T15892] dump_stack+0x15/0x1b [ 253.456174][T15892] should_fail_ex+0x265/0x280 [ 253.456220][T15892] should_failslab+0x8c/0xb0 [ 253.456294][T15892] kmem_cache_alloc_noprof+0x50/0x310 [ 253.456313][T15892] ? skb_clone+0x151/0x1f0 [ 253.456337][T15892] skb_clone+0x151/0x1f0 [ 253.456407][T15892] bpf_clone_redirect+0x7a/0x200 [ 253.456431][T15892] ? __rcu_read_unlock+0x4f/0x70 [ 253.456463][T15892] bpf_prog_208b094576c80b22+0x5f/0x68 [ 253.456487][T15892] ? should_fail_ex+0x30/0x280 [ 253.456587][T15892] ? __rcu_read_unlock+0x4f/0x70 [ 253.456612][T15892] ? avc_has_perm_noaudit+0x1b1/0x200 [ 253.456642][T15892] ? avc_has_perm+0xd3/0x150 [ 253.456659][T15892] ? __rcu_read_unlock+0x4f/0x70 [ 253.456828][T15892] ? is_bpf_text_address+0x141/0x160 [ 253.456871][T15892] ? kernel_text_address+0x94/0xb0 [ 253.456908][T15892] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 253.456985][T15892] ? __kernel_text_address+0xd/0x40 [ 253.457020][T15892] ? unwind_get_return_address+0x16/0x40 [ 253.457055][T15892] ? arch_stack_walk+0xfc/0x150 [ 253.457087][T15892] ? filter_irq_stacks+0x1d/0x70 [ 253.457127][T15892] ? stack_depot_save_flags+0xa3f/0xb10 [ 253.457159][T15892] ? read_tsc+0x9/0x20 [ 253.457190][T15892] ? ktime_get+0x1eb/0x210 [ 253.457224][T15892] bpf_test_run+0x1e0/0x490 [ 253.457292][T15892] ? __list_add_valid_or_report+0x38/0xe0 [ 253.457325][T15892] ? bpf_test_run+0xf6/0x490 [ 253.457392][T15892] bpf_prog_test_run_skb+0x834/0xbd0 [ 253.457484][T15892] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 253.457516][T15892] bpf_prog_test_run+0x207/0x390 [ 253.457609][T15892] __sys_bpf+0x3dc/0x790 [ 253.457659][T15892] __x64_sys_bpf+0x41/0x50 [ 253.457687][T15892] x64_sys_call+0x2478/0x2fb0 [ 253.457715][T15892] do_syscall_64+0xd0/0x1a0 [ 253.457738][T15892] ? clear_bhb_loop+0x40/0x90 [ 253.457765][T15892] ? clear_bhb_loop+0x40/0x90 [ 253.457794][T15892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.457898][T15892] RIP: 0033:0x7f0f109ce969 [ 253.457969][T15892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.457993][T15892] RSP: 002b:00007f0f0f037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.458020][T15892] RAX: ffffffffffffffda RBX: 00007f0f10bf5fa0 RCX: 00007f0f109ce969 [ 253.458034][T15892] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 253.458057][T15892] RBP: 00007f0f0f037090 R08: 0000000000000000 R09: 0000000000000000 [ 253.458074][T15892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.458086][T15892] R13: 0000000000000000 R14: 00007f0f10bf5fa0 R15: 00007ffd4bf29a28 [ 253.458106][T15892] [ 253.842004][T15899] FAULT_INJECTION: forcing a failure. [ 253.842004][T15899] name failslab, interval 1, probability 0, space 0, times 0 [ 253.854729][T15899] CPU: 1 UID: 0 PID: 15899 Comm: syz.1.2455 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 253.854766][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.854785][T15899] Call Trace: [ 253.854791][T15899] [ 253.854799][T15899] __dump_stack+0x1d/0x30 [ 253.854824][T15899] dump_stack_lvl+0xe8/0x140 [ 253.854907][T15899] dump_stack+0x15/0x1b [ 253.854926][T15899] should_fail_ex+0x265/0x280 [ 253.854962][T15899] should_failslab+0x8c/0xb0 [ 253.854998][T15899] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 253.855072][T15899] ? cond_bools_copy+0x30/0x80 [ 253.855096][T15899] ? __pfx_cond_bools_destroy+0x10/0x10 [ 253.855121][T15899] kmemdup_noprof+0x2b/0x70 [ 253.855141][T15899] ? __pfx_cond_bools_destroy+0x10/0x10 [ 253.855233][T15899] cond_bools_copy+0x30/0x80 [ 253.855258][T15899] ? __pfx_cond_bools_destroy+0x10/0x10 [ 253.855286][T15899] hashtab_duplicate+0x11e/0x360 [ 253.855378][T15899] ? __pfx_cond_bools_copy+0x10/0x10 [ 253.855540][T15899] cond_policydb_dup+0xd2/0x4e0 [ 253.855573][T15899] security_set_bools+0xa0/0x340 [ 253.855619][T15899] sel_commit_bools_write+0x1ea/0x270 [ 253.855651][T15899] vfs_writev+0x3eb/0x870 [ 253.855675][T15899] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 253.855789][T15899] ? mutex_lock+0xd/0x30 [ 253.855896][T15899] do_writev+0xe7/0x210 [ 253.855915][T15899] __x64_sys_writev+0x45/0x50 [ 253.856051][T15899] x64_sys_call+0x2006/0x2fb0 [ 253.856079][T15899] do_syscall_64+0xd0/0x1a0 [ 253.856102][T15899] ? clear_bhb_loop+0x40/0x90 [ 253.856128][T15899] ? clear_bhb_loop+0x40/0x90 [ 253.856158][T15899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.856224][T15899] RIP: 0033:0x7f9e76b8e969 [ 253.856239][T15899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.856260][T15899] RSP: 002b:00007f9e751f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 253.856285][T15899] RAX: ffffffffffffffda RBX: 00007f9e76db5fa0 RCX: 00007f9e76b8e969 [ 253.856302][T15899] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000006 [ 253.856315][T15899] RBP: 00007f9e751f7090 R08: 0000000000000000 R09: 0000000000000000 [ 253.856327][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.856360][T15899] R13: 0000000000000000 R14: 00007f9e76db5fa0 R15: 00007fffaa39e9e8 [ 253.856379][T15899] [ 254.236766][T15906] futex_wake_op: syz.1.2458 tries to shift op by 144; fix this program [ 254.315330][T15912] loop1: detected capacity change from 0 to 128 [ 254.343733][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2450'. [ 254.355394][T15912] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.364323][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2450'. [ 254.384016][T15912] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 254.426060][T12662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.438595][T15910] loop6: detected capacity change from 0 to 512 [ 254.477477][T15910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.509435][T15917] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2462'. [ 254.518916][T12702] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.533748][T13164] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.554732][T15910] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.589553][T15919] loop8: detected capacity change from 0 to 512 [ 254.602426][ T8881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.685044][T15919] EXT4-fs (loop8): 1 orphan inode deleted [ 254.691324][T15919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.703956][ T139] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 254.732128][T15925] SELinux: failed to load policy [ 254.741817][T15919] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.825773][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 254.834323][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 254.858601][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.867394][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.875208][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.882864][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.890649][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.899146][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.906924][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.914730][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.922407][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.930850][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.938550][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.946229][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.954657][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.962326][T13082] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 254.997633][T13082] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 255.041667][T15948] loop1: detected capacity change from 0 to 512 [ 255.100547][T15948] EXT4-fs (loop1): 1 orphan inode deleted [ 255.107128][T15948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.121192][T15948] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.227150][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 255.353934][T15955] loop7: detected capacity change from 0 to 128 [ 255.370131][T15955] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.383656][T15955] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.415781][T15945] loop6: detected capacity change from 0 to 8192 [ 255.511536][T15945] FAULT_INJECTION: forcing a failure. [ 255.511536][T15945] name failslab, interval 1, probability 0, space 0, times 0 [ 255.524245][T15945] CPU: 0 UID: 0 PID: 15945 Comm: syz.6.2472 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 255.524311][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.524324][T15945] Call Trace: [ 255.524331][T15945] [ 255.524339][T15945] __dump_stack+0x1d/0x30 [ 255.524402][T15945] dump_stack_lvl+0xe8/0x140 [ 255.524422][T15945] dump_stack+0x15/0x1b [ 255.524521][T15945] should_fail_ex+0x265/0x280 [ 255.524557][T15945] should_failslab+0x8c/0xb0 [ 255.524659][T15945] kmem_cache_alloc_noprof+0x50/0x310 [ 255.524713][T15945] ? __blockdev_direct_IO+0x130/0x1e80 [ 255.524751][T15945] __blockdev_direct_IO+0x130/0x1e80 [ 255.524785][T15945] ? __rcu_read_unlock+0x4f/0x70 [ 255.524852][T15945] ? avc_has_perm_noaudit+0x1b1/0x200 [ 255.524877][T15945] ? __pfx_fat_get_block+0x10/0x10 [ 255.524947][T15945] ? avc_has_perm+0xd3/0x150 [ 255.524990][T15945] fat_direct_IO+0x102/0x1d0 [ 255.525016][T15945] ? _parse_integer_limit+0x170/0x190 [ 255.525139][T15945] generic_file_read_iter+0x218/0x330 [ 255.525182][T15945] do_iter_readv_writev+0x421/0x4c0 [ 255.525302][T15945] vfs_readv+0x1e3/0x670 [ 255.525335][T15945] __se_sys_preadv2+0xfc/0x1c0 [ 255.525380][T15945] __x64_sys_preadv2+0x67/0x80 [ 255.525497][T15945] x64_sys_call+0x2818/0x2fb0 [ 255.525527][T15945] do_syscall_64+0xd0/0x1a0 [ 255.525554][T15945] ? clear_bhb_loop+0x40/0x90 [ 255.525603][T15945] ? clear_bhb_loop+0x40/0x90 [ 255.525628][T15945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.525712][T15945] RIP: 0033:0x7f0f109ce969 [ 255.525732][T15945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.525754][T15945] RSP: 002b:00007f0f0f037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 255.525779][T15945] RAX: ffffffffffffffda RBX: 00007f0f10bf5fa0 RCX: 00007f0f109ce969 [ 255.525836][T15945] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000008 [ 255.525854][T15945] RBP: 00007f0f0f037090 R08: 0000000000000000 R09: 0000000000000000 [ 255.525871][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.525884][T15945] R13: 0000000000000000 R14: 00007f0f10bf5fa0 R15: 00007ffd4bf29a28 [ 255.525903][T15945] [ 255.774876][T12662] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.797293][T15959] netlink: 'syz.5.2471': attribute type 1 has an invalid length. [ 255.851735][T15964] loop6: detected capacity change from 0 to 512 [ 255.868384][T15964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.882945][T15964] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.942285][T12702] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.996300][T15968] netlink: 'syz.5.2478': attribute type 1 has an invalid length. [ 256.035029][ T8881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.060106][T13164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.082937][T15975] batman_adv: batadv0: Adding interface: dummy0 [ 256.089317][T15975] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.124338][T15975] batman_adv: batadv0: Interface activated: dummy0 [ 256.141353][T15984] netlink: 'syz.1.2482': attribute type 1 has an invalid length. [ 256.184988][T15984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.197861][T15989] loop6: detected capacity change from 0 to 1024 [ 256.210667][T15970] loop7: detected capacity change from 0 to 512 [ 256.218367][T15989] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.227223][T15970] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.246781][T15990] bond1 (unregistering): Released all slaves [ 256.253037][T15970] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 256.265854][T15970] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 256.274323][T15970] System zones: 0-2, 18-18, 34-34 [ 256.280177][T15970] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 256.284826][T15989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.297018][T15970] EXT4-fs (loop7): 1 truncate cleaned up [ 256.312691][T15970] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.363154][T15998] loop8: detected capacity change from 0 to 1024 [ 256.369831][T15998] EXT4-fs: Ignoring removed orlov option [ 256.379310][T15981] __nla_validate_parse: 7 callbacks suppressed [ 256.379324][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2480'. [ 256.389306][T15998] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.536978][T16004] netlink: 'syz.5.2488': attribute type 1 has an invalid length. [ 256.543374][T12662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.556733][ T8881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.580986][T16006] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2489'. [ 256.590610][T16007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2488'. [ 256.616886][T16009] loop6: detected capacity change from 0 to 512 [ 256.664015][T16009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.680940][T16015] loop1: detected capacity change from 0 to 512 [ 256.683310][T16009] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.721925][T16015] EXT4-fs (loop1): 1 orphan inode deleted [ 256.733183][ T37] __quota_error: 86 callbacks suppressed [ 256.733222][ T37] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 256.739327][ T29] audit: type=1400 audit(1748192508.628:5262): avc: denied { getopt } for pid=16020 comm="syz.5.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.748833][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 256.769547][T16015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.792784][ T29] audit: type=1400 audit(1748192508.678:5263): avc: denied { ioctl } for pid=16020 comm="syz.5.2494" path="socket:[31916]" dev="sockfs" ino=31916 ioctlcmd=0x54cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.801895][T16021] No such timeout policy "syz0" [ 256.827779][T16015] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.845139][ T8881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.868138][T16023] loop7: detected capacity change from 0 to 2048 [ 256.986781][T16023] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.057741][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 257.065522][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 257.107962][T16033] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2492'. [ 257.119910][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2492'. [ 257.133364][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.141062][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.149586][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.157376][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.165147][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.172872][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.181270][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.189055][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.196759][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.205150][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.212872][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.220650][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.228381][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.236865][T13084] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 257.398415][T13084] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 257.455482][T12702] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.549131][T16039] loop6: detected capacity change from 0 to 512 [ 257.557348][T16039] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 257.716986][T16039] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 257.726997][T16039] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 257.735150][T16039] System zones: 0-2, 18-18, 34-34 [ 257.741099][T16039] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 257.756947][T16039] EXT4-fs (loop6): 1 truncate cleaned up [ 257.763368][T16039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.135778][T12662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.219244][ T29] audit: type=1107 audit(1748192510.098:5264): pid=16049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 258.233573][ T8881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.281799][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2506'. [ 258.303782][T16055] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2506'. [ 258.331802][T16059] loop6: detected capacity change from 0 to 1024 [ 258.355301][T16059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.373976][T13164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.388187][T16063] loop8: detected capacity change from 0 to 128 [ 258.395199][T16064] ipt_REJECT: TCP_RESET invalid for non-tcp [ 258.411727][T16059] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2507: Allocating blocks 497-513 which overlap fs metadata [ 258.436985][T16059] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 117 [ 258.444020][ T29] audit: type=1400 audit(1748192510.328:5265): avc: denied { bind } for pid=16041 comm="syz.5.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.449471][T16059] EXT4-fs (loop6): This should not happen!! Data will be lost [ 258.449471][T16059] [ 258.489806][T16063] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.685473][T16063] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 258.721016][ T8881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.791588][T12702] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.811408][T16074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2513'. [ 258.850003][T16074] loop1: detected capacity change from 0 to 1024 [ 258.857590][T16074] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 258.868628][T16074] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 258.868902][T16076] FAULT_INJECTION: forcing a failure. [ 258.868902][T16076] name failslab, interval 1, probability 0, space 0, times 0 [ 258.879584][T16074] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 258.891643][T16076] CPU: 0 UID: 0 PID: 16076 Comm: syz.8.2512 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 258.891739][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.891758][T16076] Call Trace: [ 258.891768][T16076] [ 258.891780][T16076] __dump_stack+0x1d/0x30 [ 258.891811][T16076] dump_stack_lvl+0xe8/0x140 [ 258.891843][T16076] dump_stack+0x15/0x1b [ 258.891867][T16076] should_fail_ex+0x265/0x280 [ 258.891915][T16076] should_failslab+0x8c/0xb0 [ 258.891958][T16076] __kmalloc_noprof+0xa5/0x3e0 [ 258.892003][T16076] ? io_cache_alloc_new+0x2a/0xb0 [ 258.892044][T16076] io_cache_alloc_new+0x2a/0xb0 [ 258.892081][T16076] io_sqe_buffer_register+0xf2/0x1220 [ 258.892235][T16076] ? ___kmalloc_large_node+0xb3/0x130 [ 258.892265][T16076] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 258.892295][T16076] ? __kvmalloc_node_noprof+0xa8/0x4d0 [ 258.892325][T16076] ? io_sqe_buffers_register+0xc2/0x530 [ 258.892425][T16076] io_sqe_buffers_register+0x2a5/0x530 [ 258.892470][T16076] io_register_rsrc+0x1b2/0x1e0 [ 258.892510][T16076] __se_sys_io_uring_register+0x9e5/0xeb0 [ 258.892548][T16076] ? fput+0x8f/0xc0 [ 258.892625][T16076] ? ksys_write+0x16e/0x1a0 [ 258.892672][T16076] __x64_sys_io_uring_register+0x55/0x70 [ 258.892710][T16076] x64_sys_call+0xc91/0x2fb0 [ 258.892740][T16076] do_syscall_64+0xd0/0x1a0 [ 258.892764][T16076] ? clear_bhb_loop+0x40/0x90 [ 258.892864][T16076] ? clear_bhb_loop+0x40/0x90 [ 258.892946][T16076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.892976][T16076] RIP: 0033:0x7f0dd5f4e969 [ 258.892998][T16076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.893023][T16076] RSP: 002b:00007f0dd45b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 258.893049][T16076] RAX: ffffffffffffffda RBX: 00007f0dd6175fa0 RCX: 00007f0dd5f4e969 [ 258.893066][T16076] RDX: 0000200000002700 RSI: 000000000000000f RDI: 0000000000000006 [ 258.893153][T16076] RBP: 00007f0dd45b7090 R08: 0000000000000000 R09: 0000000000000000 [ 258.893172][T16076] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 258.893254][T16076] R13: 0000000000000000 R14: 00007f0dd6175fa0 R15: 00007ffebde9f148 [ 258.893282][T16076] [ 259.131437][T16074] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 259.140919][T16074] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 259.215828][T16080] loop6: detected capacity change from 0 to 512 [ 259.222494][T16080] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 259.259779][ T29] audit: type=1107 audit(1748192511.138:5266): pid=16081 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 259.318108][T16084] SELinux: failed to load policy [ 259.319416][ T29] audit: type=1107 audit(1748192511.168:5267): pid=16079 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 259.384815][T16092] netlink: 'syz.1.2521': attribute type 1 has an invalid length. [ 259.496706][T16097] loop8: detected capacity change from 0 to 512 [ 259.511496][ T29] audit: type=1400 audit(1748192511.388:5268): avc: denied { getopt } for pid=16096 comm="syz.8.2523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.523620][T16097] ext4: Unknown parameter 'permit_directio' [ 259.588484][T16088] FAULT_INJECTION: forcing a failure. [ 259.588484][T16088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.589598][T16097] cgroup: release_agent respecified [ 259.601700][T16088] CPU: 1 UID: 0 PID: 16088 Comm: syz.6.2519 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 259.601828][T16088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.601846][T16088] Call Trace: [ 259.601856][T16088] [ 259.601866][T16088] __dump_stack+0x1d/0x30 [ 259.601893][T16088] dump_stack_lvl+0xe8/0x140 [ 259.601939][T16088] dump_stack+0x15/0x1b [ 259.601961][T16088] should_fail_ex+0x265/0x280 [ 259.602026][T16088] should_fail+0xb/0x20 [ 259.602070][T16088] should_fail_usercopy+0x1a/0x20 [ 259.602125][T16088] _copy_to_iter+0x24b/0xdd0 [ 259.602155][T16088] ? should_fail_ex+0xdb/0x280 [ 259.602280][T16088] copy_page_to_iter+0x171/0x2b0 [ 259.602307][T16088] process_vm_rw+0x672/0x950 [ 259.602365][T16088] __x64_sys_process_vm_readv+0x78/0x90 [ 259.602389][T16088] x64_sys_call+0x2978/0x2fb0 [ 259.602414][T16088] do_syscall_64+0xd0/0x1a0 [ 259.602526][T16088] ? clear_bhb_loop+0x40/0x90 [ 259.602586][T16088] ? clear_bhb_loop+0x40/0x90 [ 259.602618][T16088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.602648][T16088] RIP: 0033:0x7f0f109ce969 [ 259.602725][T16088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.602821][T16088] RSP: 002b:00007f0f0f037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 259.602916][T16088] RAX: ffffffffffffffda RBX: 00007f0f10bf5fa0 RCX: 00007f0f109ce969 [ 259.602934][T16088] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000240 [ 259.602952][T16088] RBP: 00007f0f0f037090 R08: 0000000000000286 R09: 0000000000000000 [ 259.602969][T16088] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 259.602986][T16088] R13: 0000000000000000 R14: 00007f0f10bf5fa0 R15: 00007ffd4bf29a28 [ 259.603013][T16088] [ 259.655701][T16100] loop1: detected capacity change from 0 to 2048 [ 259.656044][T16100] EXT4-fs: Ignoring removed i_version option [ 259.816476][ T29] audit: type=1326 audit(1748192511.708:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16105 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f109ce969 code=0x7ffc0000 [ 259.835813][T16100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.870280][ T29] audit: type=1326 audit(1748192511.748:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16105 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f109ce969 code=0x7ffc0000 [ 259.870359][T16100] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.908690][T16100] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2524: bg 0: block 345: padding at end of block bitmap is not set [ 259.965491][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2510'. [ 259.975278][T16069] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2510'. [ 259.992795][T16100] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 260.005355][T16100] EXT4-fs (loop1): This should not happen!! Data will be lost [ 260.005355][T16100] [ 260.111955][T16125] netlink: 'syz.5.2532': attribute type 1 has an invalid length. [ 260.128902][T16127] SELinux: failed to load policy [ 260.166538][T13164] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.244987][T16134] loop5: detected capacity change from 0 to 128 [ 260.267504][T16134] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.285463][T16134] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.377877][T16138] Cannot find add_set index 0 as target [ 260.507604][T16143] netlink: 'syz.1.2538': attribute type 10 has an invalid length. [ 260.539492][T16143] batman_adv: batadv0: Adding interface: team0 [ 260.545840][T16143] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.571968][T16143] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 260.648062][T16151] syzkaller0: entered allmulticast mode [ 260.660583][T16149] syzkaller0: left allmulticast mode [ 260.736316][T15433] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.759502][T16163] loop8: detected capacity change from 0 to 1024 [ 260.777366][T16163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.832926][T16166] netlink: 'syz.5.2544': attribute type 1 has an invalid length. [ 260.875840][T16163] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.959643][T12702] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.980545][T16173] loop5: detected capacity change from 0 to 512 [ 260.985488][T16162] devtmpfs: Too few inodes for current use [ 260.997317][T16173] EXT4-fs (loop5): 1 orphan inode deleted [ 260.997729][T16173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.997924][T16173] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.019847][ T139] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 261.091460][T16179] SELinux: failed to load policy [ 261.163036][T15433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.300349][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 261.300422][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 261.300459][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300485][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300510][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300550][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300581][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300609][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300634][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300724][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300749][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300805][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300831][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300857][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300883][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.300953][T13083] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 261.301316][T13083] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 261.379199][T16190] FAULT_INJECTION: forcing a failure. [ 261.379199][T16190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.379235][T16190] CPU: 0 UID: 0 PID: 16190 Comm: syz.1.2552 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 261.379271][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.379284][T16190] Call Trace: [ 261.379292][T16190] [ 261.379302][T16190] __dump_stack+0x1d/0x30 [ 261.379328][T16190] dump_stack_lvl+0xe8/0x140 [ 261.379388][T16190] dump_stack+0x15/0x1b [ 261.379410][T16190] should_fail_ex+0x265/0x280 [ 261.379508][T16190] should_fail+0xb/0x20 [ 261.379615][T16190] should_fail_usercopy+0x1a/0x20 [ 261.379641][T16190] _copy_from_user+0x1c/0xb0 [ 261.379672][T16190] ucma_set_option+0x54/0x7f0 [ 261.379713][T16190] ? _parse_integer+0x27/0x40 [ 261.379757][T16190] ? kstrtoull+0x111/0x140 [ 261.379787][T16190] ? kstrtouint+0x76/0xc0 [ 261.379816][T16190] ? kstrtouint_from_user+0x9f/0xf0 [ 261.379873][T16190] ? should_fail_ex+0xdb/0x280 [ 261.379920][T16190] ucma_write+0x1b3/0x250 [ 261.379962][T16190] ? __pfx_ucma_write+0x10/0x10 [ 261.380002][T16190] vfs_write+0x266/0x8d0 [ 261.380078][T16190] ? __rcu_read_unlock+0x4f/0x70 [ 261.380107][T16190] ? __fget_files+0x184/0x1c0 [ 261.380149][T16190] ksys_write+0xda/0x1a0 [ 261.380186][T16190] __x64_sys_write+0x40/0x50 [ 261.380300][T16190] x64_sys_call+0x2cdd/0x2fb0 [ 261.380324][T16190] do_syscall_64+0xd0/0x1a0 [ 261.380366][T16190] ? clear_bhb_loop+0x40/0x90 [ 261.380394][T16190] ? clear_bhb_loop+0x40/0x90 [ 261.380421][T16190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.380443][T16190] RIP: 0033:0x7f9e76b8e969 [ 261.380529][T16190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.380554][T16190] RSP: 002b:00007f9e751f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.380587][T16190] RAX: ffffffffffffffda RBX: 00007f9e76db5fa0 RCX: 00007f9e76b8e969 [ 261.380600][T16190] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000006 [ 261.380612][T16190] RBP: 00007f9e751f7090 R08: 0000000000000000 R09: 0000000000000000 [ 261.380624][T16190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.380640][T16190] R13: 0000000000000000 R14: 00007f9e76db5fa0 R15: 00007fffaa39e9e8 [ 261.380662][T16190] [ 261.475267][T16198] FAULT_INJECTION: forcing a failure. [ 261.475267][T16198] name failslab, interval 1, probability 0, space 0, times 0 [ 261.475296][T16198] CPU: 0 UID: 0 PID: 16198 Comm: syz.1.2556 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 261.475332][T16198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.475350][T16198] Call Trace: [ 261.475387][T16198] [ 261.475398][T16198] __dump_stack+0x1d/0x30 [ 261.475424][T16198] dump_stack_lvl+0xe8/0x140 [ 261.475451][T16198] dump_stack+0x15/0x1b [ 261.475474][T16198] should_fail_ex+0x265/0x280 [ 261.475524][T16198] should_failslab+0x8c/0xb0 [ 261.475574][T16198] kmem_cache_alloc_noprof+0x50/0x310 [ 261.475625][T16198] ? mm_alloc+0x2b/0xa0 [ 261.475648][T16198] ? alloc_bprm+0x62/0x660 [ 261.475679][T16198] mm_alloc+0x2b/0xa0 [ 261.475705][T16198] alloc_bprm+0x20a/0x660 [ 261.475816][T16198] do_execveat_common+0x12e/0x750 [ 261.475858][T16198] __x64_sys_execve+0x5c/0x70 [ 261.475898][T16198] x64_sys_call+0x13ab/0x2fb0 [ 261.475969][T16198] do_syscall_64+0xd0/0x1a0 [ 261.476001][T16198] ? clear_bhb_loop+0x40/0x90 [ 261.476031][T16198] ? clear_bhb_loop+0x40/0x90 [ 261.476061][T16198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.476090][T16198] RIP: 0033:0x7f9e76b8e969 [ 261.476143][T16198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.476168][T16198] RSP: 002b:00007f9e751f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 261.476193][T16198] RAX: ffffffffffffffda RBX: 00007f9e76db5fa0 RCX: 00007f9e76b8e969 [ 261.476211][T16198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 261.476298][T16198] RBP: 00007f9e751f7090 R08: 0000000000000000 R09: 0000000000000000 [ 261.476316][T16198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.476333][T16198] R13: 0000000000000000 R14: 00007f9e76db5fa0 R15: 00007fffaa39e9e8 [ 261.476361][T16198] [ 261.513809][T16202] loop1: detected capacity change from 0 to 128 [ 261.532246][T16202] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.582834][T16205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16205 comm=syz.5.2555 [ 261.614168][T16202] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 261.627679][T16205] loop5: detected capacity change from 0 to 1024 [ 261.646953][T16209] Q6\bY4: renamed from lo [ 261.660893][T16196] loop8: detected capacity change from 0 to 1764 [ 261.661873][T16205] EXT4-fs: Ignoring removed bh option [ 261.693181][T16196] __nla_validate_parse: 3 callbacks suppressed [ 261.693198][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2554'. [ 261.695658][T16205] EXT4-fs: inline encryption not supported [ 262.082753][T16205] EXT4-fs: Ignoring removed i_version option [ 262.088785][T16205] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 262.114822][T16205] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.2555: lblock 1 mapped to illegal pblock 1 (length 1) [ 262.115004][T16205] __quota_error: 21 callbacks suppressed [ 262.115084][T16205] Quota error (device loop5): write_blk: dquota write failed [ 262.143798][T16205] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 262.144002][T16205] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2555: Failed to acquire dquot type 0 [ 262.147194][T16205] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.2555: Freeing blocks not in datazone - block = 0, count = 4096 [ 262.147378][T16205] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2555: Invalid inode bitmap blk 0 in block_group 0 [ 262.147539][T16205] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 262.147621][T16205] EXT4-fs (loop5): 1 orphan inode deleted [ 262.187214][ T139] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 262.234376][T16215] loop1: detected capacity change from 0 to 512 [ 262.235499][ T139] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 262.235524][ T139] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0 [ 262.278788][T16215] EXT4-fs (loop1): 1 orphan inode deleted [ 262.287272][T16215] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.309558][T12920] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 262.319437][T12920] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 262.348502][T16222] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 262.416733][ T29] audit: type=1326 audit(1748192514.308:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 262.460029][T16236] syz.8.2569 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 262.464071][ T29] audit: type=1326 audit(1748192514.338:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 262.494722][ T29] audit: type=1326 audit(1748192514.338:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 262.518340][ T29] audit: type=1326 audit(1748192514.338:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 262.542621][ T29] audit: type=1326 audit(1748192514.338:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 262.566971][ T29] audit: type=1326 audit(1748192514.338:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 262.612442][T16244] loop7: detected capacity change from 0 to 128 [ 262.621733][T16244] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 262.663760][T16242] loop5: detected capacity change from 0 to 512 [ 262.670411][T16242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.677991][T16242] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 262.690535][T16242] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 262.714059][T16242] EXT4-fs (loop5): 1 truncate cleaned up [ 262.738543][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.762318][T16254] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2562'. [ 262.786943][T16254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2562'. [ 262.802198][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.811892][ T139] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 262.822295][ T139] bond0 (unregistering): Released all slaves [ 262.834484][T16219] chnl_net:caif_netlink_parms(): no params data found [ 262.905220][T16256] tipc: Enabling of bearer rejected, failed to enable media [ 262.913763][ T139] tipc: Left network mode [ 262.951195][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2575'. [ 263.000534][ T139] hsr_slave_0: left promiscuous mode [ 263.017383][ T139] hsr_slave_1: left promiscuous mode [ 263.029187][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.051432][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.165897][T16268] loop7: detected capacity change from 0 to 512 [ 263.198227][T16268] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.212343][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2576'. [ 263.242937][T16219] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.250207][T16219] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.258887][T16219] bridge_slave_0: entered allmulticast mode [ 263.268547][T16219] bridge_slave_0: entered promiscuous mode [ 263.278907][T16278] netlink: 'syz.7.2580': attribute type 1 has an invalid length. [ 263.290817][T16219] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.298128][T16219] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.305454][T16219] bridge_slave_1: entered allmulticast mode [ 263.312006][T16219] bridge_slave_1: entered promiscuous mode [ 263.326571][T16278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.339675][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2580'. [ 263.397904][T16219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.430237][T16285] loop8: detected capacity change from 0 to 128 [ 263.451034][T16281] bond0 (unregistering): Released all slaves [ 263.466378][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2583'. [ 263.485888][T16219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.496006][T16287] FAULT_INJECTION: forcing a failure. [ 263.496006][T16287] name failslab, interval 1, probability 0, space 0, times 0 [ 263.508768][T16287] CPU: 1 UID: 0 PID: 16287 Comm: syz.5.2583 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 263.508877][T16287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.508894][T16287] Call Trace: [ 263.508902][T16287] [ 263.508911][T16287] __dump_stack+0x1d/0x30 [ 263.508939][T16287] dump_stack_lvl+0xe8/0x140 [ 263.508966][T16287] dump_stack+0x15/0x1b [ 263.508988][T16287] should_fail_ex+0x265/0x280 [ 263.509094][T16287] should_failslab+0x8c/0xb0 [ 263.509132][T16287] kmem_cache_alloc_node_noprof+0x57/0x320 [ 263.509162][T16287] ? __alloc_skb+0x101/0x320 [ 263.509276][T16287] __alloc_skb+0x101/0x320 [ 263.509312][T16287] netlink_ack+0xfd/0x500 [ 263.509354][T16287] netlink_rcv_skb+0x192/0x220 [ 263.509457][T16287] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 263.509495][T16287] xfrm_netlink_rcv+0x48/0x60 [ 263.509525][T16287] netlink_unicast+0x59e/0x670 [ 263.509562][T16287] netlink_sendmsg+0x58b/0x6b0 [ 263.509583][T16287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.509648][T16287] __sock_sendmsg+0x142/0x180 [ 263.509683][T16287] ____sys_sendmsg+0x31e/0x4e0 [ 263.509716][T16287] ___sys_sendmsg+0x17b/0x1d0 [ 263.509770][T16287] __x64_sys_sendmsg+0xd4/0x160 [ 263.509862][T16287] x64_sys_call+0x2999/0x2fb0 [ 263.509887][T16287] do_syscall_64+0xd0/0x1a0 [ 263.509918][T16287] ? clear_bhb_loop+0x40/0x90 [ 263.509998][T16287] ? clear_bhb_loop+0x40/0x90 [ 263.510021][T16287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.510043][T16287] RIP: 0033:0x7f57be4de969 [ 263.510063][T16287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.510087][T16287] RSP: 002b:00007f57bcb47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.510113][T16287] RAX: ffffffffffffffda RBX: 00007f57be705fa0 RCX: 00007f57be4de969 [ 263.510129][T16287] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 263.510234][T16287] RBP: 00007f57bcb47090 R08: 0000000000000000 R09: 0000000000000000 [ 263.510251][T16287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.510268][T16287] R13: 0000000000000000 R14: 00007f57be705fa0 R15: 00007ffffdb7bca8 [ 263.510314][T16287] [ 263.510788][T16285] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 263.582869][T16292] loop7: detected capacity change from 0 to 512 [ 263.877755][T16291] loop5: detected capacity change from 0 to 512 [ 263.886973][T16291] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.921589][T16291] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 263.931720][T16291] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 263.939846][T16291] System zones: 0-2, 18-18, 34-34 [ 263.946047][T16291] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 263.962152][T16291] EXT4-fs (loop5): 1 truncate cleaned up [ 263.979771][T16219] team0: Port device team_slave_0 added [ 263.996323][T16292] EXT4-fs (loop7): 1 orphan inode deleted [ 264.008474][T16292] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.022911][T16219] team0: Port device team_slave_1 added [ 264.040469][ T3330] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 264.120581][T16305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2589'. [ 264.156054][T16219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.163164][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.190398][T16219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.204931][T16219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.211959][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.238947][T16219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.287542][T16219] hsr_slave_0: entered promiscuous mode [ 264.309206][T16219] hsr_slave_1: entered promiscuous mode [ 264.315606][T16219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.324016][T16219] Cannot create hsr debugfs directory [ 264.385796][T16325] netlink: 'syz.5.2594': attribute type 10 has an invalid length. [ 264.399256][T16325] batman_adv: batadv0: Adding interface: team0 [ 264.405586][T16325] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.431673][T16325] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 264.453043][T16327] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2586'. [ 264.465020][T16327] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2586'. [ 264.521195][T16331] loop5: detected capacity change from 0 to 128 [ 264.545056][T16331] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 264.685589][T16335] loop5: detected capacity change from 0 to 128 [ 264.694160][T16335] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 264.880725][T16341] loop5: detected capacity change from 0 to 128 [ 264.899025][T16341] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 264.988249][T16343] loop1: detected capacity change from 0 to 512 [ 264.996275][T16343] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.063615][T16343] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 265.072598][T16343] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 265.081568][T16343] System zones: 0-2, 18-18, 34-34 [ 265.089099][T16343] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 265.105570][T16343] EXT4-fs (loop1): 1 truncate cleaned up [ 265.469364][T16358] loop5: detected capacity change from 0 to 128 [ 265.472472][T16219] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.490069][T16358] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 265.501770][T16356] loop8: detected capacity change from 0 to 8192 [ 265.523380][T16360] loop7: detected capacity change from 0 to 512 [ 265.531899][T16219] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.537288][T16356] vfat: Unknown parameter '' [ 265.566352][T16219] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.582384][T16219] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.593309][T16360] EXT4-fs (loop7): 1 orphan inode deleted [ 265.606072][T16360] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.618066][T16356] loop8: detected capacity change from 0 to 1024 [ 265.626294][ T37] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 265.679020][T16219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.692002][T16219] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.703989][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.711087][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.753580][T16365] SELinux: failed to load policy [ 265.768208][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.775332][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.803865][T16372] loop8: detected capacity change from 0 to 128 [ 265.807570][T16219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.814063][T16371] loop1: detected capacity change from 0 to 128 [ 265.820611][T16219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.855473][T16372] ext4 filesystem being mounted at /204/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.082579][T16379] loop5: detected capacity change from 0 to 512 [ 266.109685][T16379] EXT4-fs (loop5): 1 orphan inode deleted [ 266.122866][T16379] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.134242][ T139] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 266.150640][T16219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.306635][T16398] loop1: detected capacity change from 0 to 512 [ 266.316090][T16398] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 266.349709][T16219] veth0_vlan: entered promiscuous mode [ 266.359403][T16219] veth1_vlan: entered promiscuous mode [ 266.392556][T16398] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 266.399119][T16398] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 266.407516][T16398] vhci_hcd vhci_hcd.0: Device attached [ 266.431234][T16404] vhci_hcd: cannot find the pending unlink 6 [ 266.442441][T16219] veth0_macvtap: entered promiscuous mode [ 266.450236][T16404] vhci_hcd: connection closed [ 266.450399][ T3330] vhci_hcd: stop threads [ 266.459472][ T3330] vhci_hcd: release socket [ 266.463174][T16219] veth1_macvtap: entered promiscuous mode [ 266.464750][ T3330] vhci_hcd: disconnect device [ 266.478172][T16219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.529942][T16219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.546755][T16219] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.555592][T16219] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.564463][T16219] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.574053][T16219] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.585290][T16413] loop8: detected capacity change from 0 to 128 [ 266.600687][T16413] ext4 filesystem being mounted at /208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.861943][T16421] loop4: detected capacity change from 0 to 1024 [ 266.894878][T16428] loop7: detected capacity change from 0 to 128 [ 266.911802][T16428] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.073331][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 267.081114][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 267.094219][T16443] loop1: detected capacity change from 0 to 512 [ 267.100980][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.108743][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.116462][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.125109][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.127475][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 267.127491][ T29] audit: type=1326 audit(1748192519.018:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16440 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 267.132765][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.139625][ T29] audit: type=1326 audit(1748192519.018:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc59d391225 code=0x7ffc0000 [ 267.163186][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.170774][ T29] audit: type=1326 audit(1748192519.018:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16440 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 267.194242][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.201059][ T29] audit: type=1326 audit(1748192519.018:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16440 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 267.225277][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.225346][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.225370][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.225400][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.225429][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.225457][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.225522][ T3389] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 267.314534][ T3389] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 267.326621][ T29] audit: type=1326 audit(1748192519.198:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16445 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 267.354919][ T29] audit: type=1326 audit(1748192519.228:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16440 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 267.379217][ T29] audit: type=1326 audit(1748192519.228:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16440 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 267.402849][ T29] audit: type=1326 audit(1748192519.228:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16440 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 267.426404][ T29] audit: type=1326 audit(1748192519.228:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16440 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc59d2fab39 code=0x7ffc0000 [ 267.450625][ T29] audit: type=1326 audit(1748192519.228:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16440 comm="syz.7.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59d35e969 code=0x7ffc0000 [ 267.462558][T16443] EXT4-fs (loop1): 1 orphan inode deleted [ 267.475680][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 267.493467][T16443] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.522647][T16449] syzkaller0: entered promiscuous mode [ 267.528367][T16449] syzkaller0: entered allmulticast mode [ 267.560165][T16457] FAULT_INJECTION: forcing a failure. [ 267.560165][T16457] name failslab, interval 1, probability 0, space 0, times 0 [ 267.573781][T16457] CPU: 0 UID: 0 PID: 16457 Comm: syz.8.2633 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 267.573882][T16457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.573976][T16457] Call Trace: [ 267.573982][T16457] [ 267.573990][T16457] __dump_stack+0x1d/0x30 [ 267.574018][T16457] dump_stack_lvl+0xe8/0x140 [ 267.574087][T16457] dump_stack+0x15/0x1b [ 267.574105][T16457] should_fail_ex+0x265/0x280 [ 267.574142][T16457] should_failslab+0x8c/0xb0 [ 267.574175][T16457] __kvmalloc_node_noprof+0x126/0x4d0 [ 267.574256][T16457] ? alloc_netdev_mqs+0x73f/0xab0 [ 267.574287][T16457] alloc_netdev_mqs+0x73f/0xab0 [ 267.574317][T16457] slip_open+0x2d1/0x920 [ 267.574345][T16457] ? vfree+0x374/0x3f0 [ 267.574426][T16457] ? up_write+0x18/0x60 [ 267.574501][T16457] tty_ldisc_open+0x5d/0xb0 [ 267.574594][T16457] tty_set_ldisc+0x1db/0x380 [ 267.574622][T16457] tiocsetd+0x51/0x60 [ 267.574651][T16457] tty_ioctl+0xa7f/0xb80 [ 267.574684][T16457] ? __pfx_tty_ioctl+0x10/0x10 [ 267.574742][T16457] __se_sys_ioctl+0xcb/0x140 [ 267.574815][T16457] __x64_sys_ioctl+0x43/0x50 [ 267.574841][T16457] x64_sys_call+0x19a8/0x2fb0 [ 267.574870][T16457] do_syscall_64+0xd0/0x1a0 [ 267.574901][T16457] ? clear_bhb_loop+0x40/0x90 [ 267.574930][T16457] ? clear_bhb_loop+0x40/0x90 [ 267.575035][T16457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.575057][T16457] RIP: 0033:0x7f0dd5f4e969 [ 267.575100][T16457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.575124][T16457] RSP: 002b:00007f0dd45b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.575147][T16457] RAX: ffffffffffffffda RBX: 00007f0dd6175fa0 RCX: 00007f0dd5f4e969 [ 267.575165][T16457] RDX: 00002000000002c0 RSI: 0000000000005423 RDI: 0000000000000005 [ 267.575219][T16457] RBP: 00007f0dd45b7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.575231][T16457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.575267][T16457] R13: 0000000000000000 R14: 00007f0dd6175fa0 R15: 00007ffebde9f148 [ 267.575293][T16457] [ 267.830591][T16460] loop7: detected capacity change from 0 to 128 [ 267.862294][T16462] loop4: detected capacity change from 0 to 128 [ 267.890102][T16460] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.954930][T16462] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.996664][T16470] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64512 sclass=netlink_xfrm_socket pid=16470 comm=syz.8.2637 [ 268.039380][T16474] __nla_validate_parse: 6 callbacks suppressed [ 268.039400][T16474] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2626'. [ 268.055475][T16474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2626'. [ 268.120872][T16478] FAULT_INJECTION: forcing a failure. [ 268.120872][T16478] name failslab, interval 1, probability 0, space 0, times 0 [ 268.134453][T16478] CPU: 0 UID: 0 PID: 16478 Comm: syz.5.2640 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 268.134491][T16478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.134509][T16478] Call Trace: [ 268.134517][T16478] [ 268.134528][T16478] __dump_stack+0x1d/0x30 [ 268.134552][T16478] dump_stack_lvl+0xe8/0x140 [ 268.134657][T16478] dump_stack+0x15/0x1b [ 268.134675][T16478] should_fail_ex+0x265/0x280 [ 268.134771][T16478] ? xfrm_policy_alloc+0x62/0x1b0 [ 268.134802][T16478] should_failslab+0x8c/0xb0 [ 268.134846][T16478] __kmalloc_cache_noprof+0x4c/0x320 [ 268.134932][T16478] xfrm_policy_alloc+0x62/0x1b0 [ 268.134956][T16478] xfrm_policy_construct+0x2f/0x320 [ 268.134991][T16478] xfrm_add_policy+0x156/0x450 [ 268.135066][T16478] xfrm_user_rcv_msg+0x563/0x660 [ 268.135099][T16478] ? __kfree_skb+0x109/0x150 [ 268.135118][T16478] ? nlmon_xmit+0x4f/0x60 [ 268.135213][T16478] ? consume_skb+0x49/0x150 [ 268.135323][T16478] netlink_rcv_skb+0x120/0x220 [ 268.135368][T16478] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 268.135421][T16478] xfrm_netlink_rcv+0x48/0x60 [ 268.135445][T16478] netlink_unicast+0x59e/0x670 [ 268.135568][T16478] netlink_sendmsg+0x58b/0x6b0 [ 268.135597][T16478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.135624][T16478] __sock_sendmsg+0x142/0x180 [ 268.135680][T16478] ____sys_sendmsg+0x31e/0x4e0 [ 268.135705][T16478] ___sys_sendmsg+0x17b/0x1d0 [ 268.135780][T16478] __x64_sys_sendmsg+0xd4/0x160 [ 268.135814][T16478] x64_sys_call+0x2999/0x2fb0 [ 268.135836][T16478] do_syscall_64+0xd0/0x1a0 [ 268.135875][T16478] ? clear_bhb_loop+0x40/0x90 [ 268.135905][T16478] ? clear_bhb_loop+0x40/0x90 [ 268.135935][T16478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.136013][T16478] RIP: 0033:0x7f57be4de969 [ 268.136029][T16478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.136049][T16478] RSP: 002b:00007f57bcb47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.136072][T16478] RAX: ffffffffffffffda RBX: 00007f57be705fa0 RCX: 00007f57be4de969 [ 268.136109][T16478] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 0000000000000003 [ 268.136122][T16478] RBP: 00007f57bcb47090 R08: 0000000000000000 R09: 0000000000000000 [ 268.136135][T16478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.136149][T16478] R13: 0000000000000000 R14: 00007f57be705fa0 R15: 00007ffffdb7bca8 [ 268.136171][T16478] [ 268.431532][T16482] netlink: 'syz.4.2639': attribute type 1 has an invalid length. [ 268.477628][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 268.486312][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 268.515239][T16489] FAULT_INJECTION: forcing a failure. [ 268.515239][T16489] name failslab, interval 1, probability 0, space 0, times 0 [ 268.527949][T16489] CPU: 0 UID: 0 PID: 16489 Comm: syz.7.2641 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 268.528029][T16489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.528042][T16489] Call Trace: [ 268.528048][T16489] [ 268.528055][T16489] __dump_stack+0x1d/0x30 [ 268.528077][T16489] dump_stack_lvl+0xe8/0x140 [ 268.528097][T16489] dump_stack+0x15/0x1b [ 268.528120][T16489] should_fail_ex+0x265/0x280 [ 268.528303][T16489] should_failslab+0x8c/0xb0 [ 268.528337][T16489] kmem_cache_alloc_noprof+0x50/0x310 [ 268.528402][T16489] ? security_file_alloc+0x32/0x100 [ 268.528434][T16489] security_file_alloc+0x32/0x100 [ 268.528529][T16489] init_file+0x5c/0x1d0 [ 268.528549][T16489] alloc_empty_file+0x8b/0x200 [ 268.528569][T16489] alloc_file_pseudo+0xc6/0x160 [ 268.528593][T16489] anon_inode_getfd+0xc1/0x150 [ 268.528677][T16489] do_inotify_init+0x220/0x270 [ 268.528726][T16489] __x64_sys_inotify_init1+0x1e/0x30 [ 268.528753][T16489] x64_sys_call+0x2ce8/0x2fb0 [ 268.528862][T16489] do_syscall_64+0xd0/0x1a0 [ 268.528888][T16489] ? clear_bhb_loop+0x40/0x90 [ 268.528911][T16489] ? clear_bhb_loop+0x40/0x90 [ 268.528934][T16489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.528957][T16489] RIP: 0033:0x7fc59d35e969 [ 268.528981][T16489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.529039][T16489] RSP: 002b:00007fc59b9c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 268.529059][T16489] RAX: ffffffffffffffda RBX: 00007fc59d585fa0 RCX: 00007fc59d35e969 [ 268.529073][T16489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.529090][T16489] RBP: 00007fc59b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 268.529102][T16489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.529115][T16489] R13: 0000000000000001 R14: 00007fc59d585fa0 R15: 00007fff8ff3f7e8 [ 268.529136][T16489] [ 268.529292][T16488] loop4: detected capacity change from 0 to 512 [ 268.605303][T16491] tipc: Enabling of bearer rejected, failed to enable media [ 268.607450][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.647578][T16495] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2648'. [ 268.652774][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.707583][T16502] loop7: detected capacity change from 0 to 128 [ 268.710107][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.710132][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.710199][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.732727][T16502] ext4 filesystem being mounted at /220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.736156][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.749221][T16488] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.752329][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.775969][T16504] loop8: detected capacity change from 0 to 1024 [ 268.783603][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.783638][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.817669][T16504] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.832284][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.898289][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.905989][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.914230][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.921896][T13083] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x0 [ 268.930616][T13083] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 268.991859][T16513] loop7: detected capacity change from 0 to 128 [ 269.000319][T16513] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.050598][T16516] loop5: detected capacity change from 0 to 1024 [ 269.069396][T16516] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2653'. [ 269.081273][T16523] netlink: 'syz.8.2654': attribute type 1 has an invalid length. [ 269.086864][T16516] lo: entered promiscuous mode [ 269.094976][T16516] lo: entered allmulticast mode [ 269.141842][T16528] loop8: detected capacity change from 0 to 512 [ 269.158435][T16530] loop4: detected capacity change from 0 to 512 [ 269.166658][T16530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.219263][T16530] EXT4-fs (loop4): orphan cleanup on readonly fs [ 269.227232][T16530] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2652: bg 0: block 248: padding at end of block bitmap is not set [ 269.248087][T16530] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2652: Failed to acquire dquot type 1 [ 269.260879][T16530] EXT4-fs (loop4): 1 truncate cleaned up [ 269.337139][T16528] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.396869][T16529] vlan2: entered allmulticast mode [ 269.416464][T16529] bridge0: port 3(vlan2) entered blocking state [ 269.422949][T16529] bridge0: port 3(vlan2) entered disabled state [ 269.479128][T16529] vlan2: entered promiscuous mode [ 269.496943][T16529] bridge0: mtu less than device minimum [ 269.597106][T16516] infiniband syo1: set active [ 269.601881][T16516] infiniband syo1: added veth0_to_bridge [ 269.627720][T16516] RDS/IB: syo1: added [ 269.631996][T16516] smc: adding ib device syo1 with port count 1 [ 269.640356][T16516] smc: ib device syo1 port 1 has pnetid [ 270.116751][T16543] Q6\bY4: renamed from lo (while UP) [ 270.262468][T16550] loop7: detected capacity change from 0 to 128 [ 270.279837][T16549] loop8: detected capacity change from 0 to 512 [ 270.295129][T16550] ext4 filesystem being mounted at /223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 270.362820][ T3428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.375648][T16549] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.456029][ T3428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.537326][ T3428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.657806][ T3428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.785614][ T3428] bridge_slave_1: left allmulticast mode [ 270.791303][ T3428] bridge_slave_1: left promiscuous mode [ 270.797217][ T3428] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.820461][ T3428] bridge_slave_0: left allmulticast mode [ 270.826333][ T3428] bridge_slave_0: left promiscuous mode [ 270.832040][ T3428] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.036995][ T3428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.048570][ T3428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.072750][T16567] netlink: 'syz.7.2666': attribute type 1 has an invalid length. [ 271.085748][ T3428] bond0 (unregistering): Released all slaves [ 271.363932][ T3428] tipc: Disabling bearer [ 271.368999][ T3428] tipc: Disabling bearer [ 271.374322][ T3428] tipc: Left network mode [ 271.435120][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 271.442917][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 271.562559][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.570480][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.578323][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.586921][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.594737][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.602472][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.610192][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.618651][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.626415][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.634176][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.641898][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.650478][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.658219][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.665923][ T10] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 271.855006][T16587] loop7: detected capacity change from 0 to 512 [ 272.069476][T16592] loop7: detected capacity change from 0 to 128 [ 272.147704][ T3428] hsr_slave_0: left promiscuous mode [ 272.157953][T16592] ext4 filesystem being mounted at /229/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 272.204441][ T3428] hsr_slave_1: left promiscuous mode [ 272.210210][ T3428] batman_adv: batadv0: Removing interface: team0 [ 272.229676][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.237235][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.262283][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.269876][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.324725][ T3428] veth1_macvtap: left promiscuous mode [ 272.330247][ T3428] veth0_macvtap: left promiscuous mode [ 272.338472][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2668'. [ 272.351566][ T3428] veth1_vlan: left promiscuous mode [ 272.358420][ T3428] veth0_vlan: left promiscuous mode [ 272.485529][ T3428] team0 (unregistering): Port device team_slave_1 removed [ 272.496619][ T3428] team0 (unregistering): Port device team_slave_0 removed [ 272.547221][T16557] chnl_net:caif_netlink_parms(): no params data found [ 272.559235][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2668'. [ 272.617180][T16557] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.624624][T16557] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.631917][T16557] bridge_slave_0: entered allmulticast mode [ 272.639996][T16557] bridge_slave_0: entered promiscuous mode [ 272.648101][T16557] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.655362][T16557] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.664401][T16557] bridge_slave_1: entered allmulticast mode [ 272.671044][T16557] bridge_slave_1: entered promiscuous mode [ 272.692261][T16557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.705948][T16557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.729457][T16557] team0: Port device team_slave_0 added [ 272.739101][T16557] team0: Port device team_slave_1 added [ 272.758861][T16557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.765853][T16557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.792599][T16557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.805806][T16557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.812763][T16557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.839575][T16557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.863544][ T10] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 272.892888][T16603] loop7: detected capacity change from 0 to 512 [ 272.956577][T16603] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.068130][T16605] ================================================================== [ 273.076266][T16605] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 273.083659][T16605] [ 273.086001][T16605] read-write to 0xffff8881031a0b80 of 8 bytes by interrupt on cpu 1: [ 273.094088][T16605] rtc_pie_update_irq+0x93/0xf0 [ 273.098966][T16605] __hrtimer_run_queues+0x20c/0x5a0 [ 273.104201][T16605] hrtimer_interrupt+0x21a/0x460 [ 273.109174][T16605] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 273.115108][T16605] sysvec_apic_timer_interrupt+0x6f/0x80 [ 273.120790][T16605] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.126807][T16605] strlen+0x20/0x40 [ 273.130653][T16605] insert_header+0x694/0x970 [ 273.135288][T16605] __register_sysctl_table+0xb69/0xc00 [ 273.140796][T16605] register_net_sysctl_sz+0x19e/0x1c0 [ 273.146204][T16605] __addrconf_sysctl_register+0x22b/0x330 [ 273.151957][T16605] addrconf_sysctl_register+0xe6/0x130 [ 273.157448][T16605] ipv6_add_dev+0x8da/0xb30 [ 273.162000][T16605] addrconf_notify+0x4c8/0x930 [ 273.166802][T16605] raw_notifier_call_chain+0x6f/0x1b0 [ 273.172210][T16605] call_netdevice_notifiers_info+0xae/0x100 [ 273.178139][T16605] register_netdevice+0xd48/0xf10 [ 273.183186][T16605] veth_newlink+0x321/0x770 [ 273.187710][T16605] rtnl_newlink_create+0x1c2/0x630 [ 273.192854][T16605] rtnl_newlink+0xf29/0x12d0 [ 273.197485][T16605] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 273.202459][T16605] netlink_rcv_skb+0x120/0x220 [ 273.207253][T16605] rtnetlink_rcv+0x1c/0x30 [ 273.211698][T16605] netlink_unicast+0x59e/0x670 [ 273.216505][T16605] netlink_sendmsg+0x58b/0x6b0 [ 273.221293][T16605] __sock_sendmsg+0x142/0x180 [ 273.225993][T16605] __sys_sendto+0x268/0x330 [ 273.230536][T16605] __x64_sys_sendto+0x76/0x90 [ 273.235256][T16605] x64_sys_call+0x2eb6/0x2fb0 [ 273.239965][T16605] do_syscall_64+0xd0/0x1a0 [ 273.244503][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.250423][T16605] [ 273.252762][T16605] read to 0xffff8881031a0b80 of 8 bytes by task 16605 on cpu 0: [ 273.260416][T16605] rtc_dev_poll+0x78/0xb0 [ 273.264776][T16605] __io_arm_poll_handler+0x1ee/0xb70 [ 273.270088][T16605] io_poll_add+0x69/0xe0 [ 273.274365][T16605] __io_issue_sqe+0xfe/0x2e0 [ 273.279003][T16605] io_issue_sqe+0x53/0x970 [ 273.283475][T16605] io_req_task_submit+0x6b/0xc0 [ 273.288364][T16605] io_poll_task_func+0x674/0xa20 [ 273.293329][T16605] io_handle_tw_list+0xcc/0x1c0 [ 273.298210][T16605] tctx_task_work_run+0x6d/0x1a0 [ 273.303179][T16605] tctx_task_work+0x3f/0x80 [ 273.307729][T16605] task_work_run+0x12e/0x1a0 [ 273.312379][T16605] get_signal+0xe13/0xf70 [ 273.316741][T16605] arch_do_signal_or_restart+0x97/0x480 [ 273.322329][T16605] syscall_exit_to_user_mode+0x68/0xb0 [ 273.327822][T16605] do_syscall_64+0xdd/0x1a0 [ 273.332402][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.338335][T16605] [ 273.340679][T16605] value changed: 0x000000000000abc0 -> 0x000000000000acc0 [ 273.347825][T16605] [ 273.350167][T16605] Reported by Kernel Concurrency Sanitizer on: [ 273.356342][T16605] CPU: 0 UID: 0 PID: 16605 Comm: syz.8.2677 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 273.368984][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.379072][T16605] ================================================================== [ 273.418085][T16557] hsr_slave_0: entered promiscuous mode [ 273.433179][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 273.433195][ T29] audit: type=1400 audit(1748192525.308:5406): avc: denied { write } for pid=3301 comm="syz-executor" path="pipe:[1712]" dev="pipefs" ino=1712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 273.483381][T16557] hsr_slave_1: entered promiscuous mode [ 273.489578][T16557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.529419][T16557] Cannot create hsr debugfs directory [ 273.752535][ T31] bridge_slave_1: left allmulticast mode [ 273.759086][ T31] bridge_slave_1: left promiscuous mode [ 273.765559][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.777777][ T31] bridge_slave_0: left allmulticast mode [ 273.784439][ T31] bridge_slave_0: left promiscuous mode [ 273.790946][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.895205][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.915443][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.935494][ T31] bond0 (unregistering): Released all slaves [ 274.007800][ T31] hsr_slave_0: left promiscuous mode [ 274.014407][ T31] hsr_slave_1: left promiscuous mode [ 274.020070][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.028854][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.053569][ T31] team0 (unregistering): Port device team_slave_1 removed [ 274.065556][ T31] team0 (unregistering): Port device team_slave_0 removed [ 274.360639][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.415825][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.466802][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.519076][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.581433][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.591764][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44911 - 0 [ 274.602228][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 41091 - 0 [ 274.667218][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.678722][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44911 - 0 [ 274.689500][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 41091 - 0 [ 274.738236][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.749339][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44911 - 0 [ 274.759795][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 41091 - 0 [ 274.795805][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.806272][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44911 - 0 [ 274.816688][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 41091 - 0 [ 274.876571][ T31] bridge_slave_1: left allmulticast mode [ 274.882230][ T31] bridge_slave_1: left promiscuous mode [ 274.887988][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.896382][ T31] bridge_slave_0: left allmulticast mode [ 274.902025][ T31] bridge_slave_0: left promiscuous mode [ 274.907721][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.915984][ T31] bridge_slave_1: left allmulticast mode [ 274.921627][ T31] bridge_slave_1: left promiscuous mode [ 274.927296][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.935119][ T31] bridge_slave_0: left allmulticast mode [ 274.940776][ T31] bridge_slave_0: left promiscuous mode [ 274.947114][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.226343][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.236202][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.246540][ T31] bond0 (unregistering): Released all slaves [ 275.255741][ T31] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.264462][ T31] bond_slave_0: left promiscuous mode [ 275.270987][ T31] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.280675][ T31] bond_slave_1: left promiscuous mode [ 275.287648][ T31] $H (unregistering): Released all slaves [ 275.346492][ T31] tipc: Left network mode [ 275.417333][ T31] hsr_slave_0: left promiscuous mode [ 275.422983][ T31] hsr_slave_1: left promiscuous mode [ 275.428774][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.436208][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.444427][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.451898][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.461010][ T31] hsr_slave_0: left promiscuous mode [ 275.466645][ T31] hsr_slave_1: left promiscuous mode [ 275.472269][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.479690][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.487751][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.495241][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.508143][ T31] veth1_macvtap: left promiscuous mode [ 275.514480][ T31] veth0_macvtap: left promiscuous mode [ 275.520036][ T31] veth1_vlan: left promiscuous mode [ 275.525313][ T31] veth0_vlan: left promiscuous mode [ 275.531111][ T31] veth1_macvtap: left promiscuous mode [ 275.536758][ T31] veth0_macvtap: left promiscuous mode [ 275.542321][ T31] veth1_vlan: left promiscuous mode [ 275.548417][ T31] veth0_vlan: left promiscuous mode [ 275.642301][ T31] team0 (unregistering): Port device team_slave_1 removed [ 275.652950][ T31] team0 (unregistering): Port device team_slave_0 removed [ 275.707752][ T31] team0 (unregistering): Port device team_slave_1 removed [ 275.717229][ T31] team0 (unregistering): Port device team_slave_0 removed [ 276.266595][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.316057][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.356323][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.415498][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.467422][ T12] vlan2: left promiscuous mode [ 276.472441][ T12] bridge0: port 3(vlan2) entered disabled state [ 276.479917][ T12] bridge_slave_1: left allmulticast mode [ 276.485599][ T12] bridge_slave_1: left promiscuous mode [ 276.491379][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.499208][ T12] bridge_slave_0: left promiscuous mode [ 276.504889][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.675306][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.685183][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.695044][ T12] bond0 (unregistering): Released all slaves [ 276.755565][ T12] tipc: Left network mode [ 276.777240][ T12] hsr_slave_0: left promiscuous mode [ 276.782953][ T12] hsr_slave_1: left promiscuous mode [ 276.789324][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.797031][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.804728][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.812135][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.822034][ T12] veth1_macvtap: left promiscuous mode [ 276.827637][ T12] veth0_macvtap: left promiscuous mode [ 276.833289][ T12] veth1_vlan: left promiscuous mode [ 276.838563][ T12] veth0_vlan: left promiscuous mode [ 276.899287][ T12] team0 (unregistering): Port device team_slave_1 removed [ 276.911520][ T12] team0 (unregistering): Port device team_slave_0 removed